Privacy Policy

1. Introduction

Welcome to BiB ("Binge it bro"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bingeitbro.com (the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, username, and birthday.
• Profile Information: Your chosen avatar (emoji) and display name.
• Recommendations: Movies and series you recommend, including personal notes, mood tags, ratings, and watch context.
• Social Data: Your friends list, nudges sent and received, and friend-to-friend recommendations.
• Direct Messages and Group Chat: Messages you send, reactions, mentions, shared titles, and message metadata inside chats and group watch conversations.
• Group Watch: Groups you create or join, voting picks, and group activity.
• Safety Actions: Blocking actions and safety reports you submit about users or messages.
• Scheduled Watchlist: Movies and series you schedule to watch, including reminder preferences.
• Trivia Data: Your Weekly Trivia scores, answers, and leaderboard rankings.
• Watchlist: Movies and series you save to your watchlist.

2.2 Information Collected Automatically

• Authentication Data: Session tokens and authentication cookies necessary to keep you signed in.
• Push Notification Data: On supported devices, we may store notification permission status and push tokens so we can deliver direct-message, recommendation, reminder, and group-watch notifications.
• Local Storage Data: We store certain preferences locally in your browser, including your watched movies list and UI preferences. This data stays on your device and is not transmitted to our servers.
• Usage Events: We collect privacy-focused page and interaction events through DataFast analytics.

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name and email address from Google. We do not access any other Google account data.
• Sign in with Apple: If you sign in with Apple, we receive the identity data Apple shares with us for authentication.
• TMDB (The Movie Database): We use TMDB's API to fetch movie metadata, posters, and streaming availability. TMDB does not receive any of your personal information from us.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your movie recommendations to your friends and the community
• Enable the friends and social features of the platform
• Deliver and display direct messages, group messages, reactions, and shared-title conversations
• Facilitate Group Watch sessions, voting, and group picks
• Process blocking actions, safety reports, and moderation reviews
• Send nudge notifications between friends
• Send email notifications and push notifications for scheduled reminders, friend activity, direct messages, and group invites
• Power the Weekly Trivia feature and maintain leaderboards
• Show relevant streaming availability for recommended titles
• Improve and maintain the Service
• Communicate with you about your account or the Service

4. Data Storage and Security

Your data is stored securely using Supabase, a managed database platform with enterprise-grade security. We implement row-level security policies to ensure users can only access data they are authorized to view. Authentication is handled via secure PKCE flow, and all data is transmitted over HTTPS.

While we take reasonable measures to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following cases:

• Public Recommendations: Your movie recommendations, username, and avatar are visible to other users of the Service.
• Friends: Your friends can see your recommendations, direct messages, and group-watch activity only where those features are intended to be visible.
• Service Providers: We use Supabase for database hosting and authentication, Cloudflare for website hosting, CDN, and edge caching, TMDB for movie data, DataFast for privacy-focused analytics, Expo for mobile push delivery, and UnoSend for transactional emails. These providers process data as necessary to provide their services.
• Email and Push Notifications: Your email address and device push token may be used to send scheduled watch reminders, friend recommendations, direct-message alerts, and group invites. You can manage notification preferences in your profile settings or device settings.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process.

6. Cookies and Local Storage

We use essential cookies and browser local storage for authentication and basic functionality. For more details, see our Cookie Policy.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct your personal information through your profile settings.
• Deletion: Delete your account from your in-app profile settings or contact support if you cannot access the app.
• Portability: Request your data in a portable format.
• Withdraw Consent: You can stop using the Service at any time and request account deletion.

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

bingeitbroo@gmail.com

Support page: /support