Privacy Policy

1. Introduction

Welcome to BiB ("Binge it bro"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bingeitbro.com (the "Service"). Please read this policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and username. Birthday is optional profile information and can be left blank.
• Profile Information: Your chosen avatar (emoji) and display name.
• Recommendations: Movies and series you recommend, including personal notes, mood tags, ratings, and watch context.
• Social Data: Your friends list, nudges sent and received, and friend-to-friend recommendations.
• Direct Messages and Group Chat: Messages you send, reactions, mentions, shared titles, and message metadata inside chats and group watch conversations.
• Group Watch: Groups you create or join, voting picks, and group activity.
• Safety Actions: Blocking actions and safety reports you submit about users or messages.
• Scheduled Watchlist: Movies and series you schedule to watch, including reminder preferences.
• Trivia Data: Your Weekly Trivia scores, answers, and leaderboard rankings.
• Watchlist: Movies and series you save to your watchlist. Your watchlist is tied to your account so it persists across signed-in sessions until you remove items or delete the account.

2.2 Information Collected Automatically

• Authentication Data: Session tokens and authentication cookies necessary to keep you signed in.
• Push Notification Data: On supported devices, we may store notification permission status and push tokens so we can deliver direct-message, recommendation, reminder, and group-watch notifications.
• Local Storage Data: We store certain preferences locally in your browser, including your watched movies list and UI preferences. This data stays on your device and is not transmitted to our servers.
• Usage Events: We collect privacy-focused page and interaction events through DataFast analytics.

2.3 Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name and email address from Google. We do not access any other Google account data.
• Sign in with Apple: If you sign in with Apple, we receive the identity data Apple shares with us for authentication. The current shipped Sign in with Apple flow usually does not retain the short-lived Apple token material required for automatic Apple authorization revocation, so deleting your BiB account still works but you may also need to remove BiB manually from the Sign in with Apple section of your Apple account settings.
• TMDB (The Movie Database): We use TMDB's API to fetch movie metadata, posters, and streaming availability. TMDB does not receive any of your personal information from us.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Display your movie recommendations to your friends and the community
• Enable the friends and social features of the platform
• Deliver and display direct messages, group messages, reactions, and shared-title conversations
• Facilitate Group Watch sessions, voting, and group picks
• Process blocking actions, safety reports, and moderation reviews
• Send nudge notifications between friends
• Send email notifications and push notifications for scheduled reminders, friend activity, direct messages, and group invites
• Power the Weekly Trivia feature and maintain leaderboards
• Show relevant streaming availability for recommended titles
• Improve and maintain the Service
• Communicate with you about your account or the Service

4. Data Storage and Security

Your data is stored securely using Supabase, a managed database platform with enterprise-grade security. We implement row-level security policies to ensure users can only access data they are authorized to view. Authentication is handled via secure PKCE flow, and all data is transmitted over HTTPS.

While we take reasonable measures to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following cases:

• Public Recommendations: Your movie recommendations, username, and avatar are visible to other users of the Service.
• Friends: Your friends can see your recommendations and group-watch activity where those features are intended to be visible. Direct messages are only visible to the participants in that conversation.
• Service Providers: We use Supabase for database hosting and authentication, Cloudflare for website hosting, CDN, and edge caching, TMDB for movie data, DataFast for privacy-focused analytics, Expo for mobile push delivery, and UnoSend for transactional emails. These providers process data as necessary to provide their services.
• Email and Push Notifications: Your email address and device push token may be used to send scheduled watch reminders, friend recommendations, direct-message alerts, and group invites. You can manage notification preferences in your profile settings or device settings.
• Legal Requirements: We may disclose your information if required by law, regulation, or legal process.

6. Cookies and Local Storage

We use essential cookies and browser local storage for authentication and basic functionality. For more details, see our Cookie Policy.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct your personal information through your profile settings.
• Deletion: Delete your account from the native app Profile tab, from signed-in account settings on the website, or contact support if you cannot access either.
• Portability: Request your data in a portable format.
• Withdraw Consent: You can stop using the Service at any time and request account deletion.

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Account-linked data such as your watchlist stays associated with your profile until you remove it or delete the account. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

bingeitbroo@gmail.com

Support page: /support