Privacy Policy

Last updated 3 October 2026

Binge Fluent is a language-learning layer for the shows you already watch. We collect as little as the product needs, we never sell personal data, and we don't run advertising trackers. This page says exactly what we do collect and why.

Who we are

Binge Fluent is operated by Trioflowlabs Ltd, a company registered in England and Wales ("we", "us"). We are the data controller for the personal data described here. You can reach us at support@bingefluent.com.

What we collect

Your account

• Your email address, and your name if Google or Apple pass it to us.
• How you signed in (Google, Apple, or an emailed code). There are no passwords.
• If you sign in with Apple's "Hide My Email", we only ever see the relay address Apple gives us.

Sign-in security

• Emailed sign-in codes are stored hashed and expire after 10 minutes or 3 wrong attempts.
• To stop code-guessing, we keep a keyed hash of the address each code was sent to for 24 hours, and apply per-connection rate limits.

Billing

• Payments are handled by Stripe. Your card details go straight to Stripe and never reach our servers.
• We store your Stripe customer reference, which plan you are on, whether you are in a trial, and when your access renews or ends — that is what the paywall and your Settings page run on.

Learning data

• Your word deck, streak, quiz results, progress and preferences are stored in your browser on your device. Today there is no server copy; when we add one so your progress follows you across devices, this page will say so first.
• The optional profile you fill in (name, target language, level) is stored with your account.

Waitlist

• If you joined the waitlist, we hold the email address you gave us.

Browser extension

• The current extension adds a Binge Fluent button on YouTube watch pages. It does not read the page, the video, or your subtitles, and it sends nothing anywhere. If a future version needs to read subtitles to teach from them, we will update this page and the extension will ask for the matching permission before it does so.

Technical data

• Like any website, our servers see your IP address, browser type and the pages or requests you make. We use these for security, rate limiting and fixing errors.
• We do not use advertising trackers or third-party analytics cookies.

Cookies

We set one strictly necessary cookie that keeps you signed in. Stripe sets its own cookies inside its checkout frame for fraud prevention; they are covered by Stripe's policy. There is no cookie banner because there is nothing optional to consent to.

Why we use your data (legal bases under UK GDPR)

• Contract — creating your account, taking payment, giving you the plan you bought, emailing you sign-in codes and renewal reminders.
• Legitimate interests — keeping accounts secure, preventing fraud and abuse, understanding errors, and improving the product.
• Legal obligation — keeping billing records for tax and accounting.
• Consent — any marketing email, which we would only send if you opt in and can stop with one click.

Who we share it with

These providers act on our instructions. We do not sell personal data, and we do not share it with advertisers. We would disclose data if the law required it.

Where it is processed

Our providers run global infrastructure, so your data may be processed outside the UK. Where that happens we rely on the UK's adequacy decisions or the UK International Data Transfer Addendum with those providers.

How long we keep it

• Account and profile data: while your account exists, then deleted within 30 days.
• Billing records: 6 years, as UK tax law requires.
• Sign-in codes: 10 minutes. Send-limit hashes: 24 hours.
• Server logs: up to 30 days.
• Waitlist addresses: until launch, or until you ask us to remove you.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable form. Email support@bingefluent.com and we will answer within one month. To delete your account, email us from the address on the account; we cancel any subscription and remove your data within 30 days. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk.

Children

Binge Fluent is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

Changes

When this page changes we update the date at the top. For changes that affect what we collect or share, we email account holders before they take effect.

Questions about this page: support@bingefluent.com