Bingether is an app for keeping track of the shows you watch with the people you live with. It needs to know who you are and what you watch, and nothing else. This page says exactly what, why, and what you can do about it.
It is written to be read. If a sentence sounds vague, that is our fault: write to us at contact@bingether.app.
The French version of this policy is the binding one. This translation is provided for convenience.
Who is responsible#
PLIXEN, a SASU with share capital of 300 euros, registered office at 14 rue Bausset, 75015 Paris, France, registered with the Paris Trade and Companies Register under number 981 321 342.
Contact: contact@bingether.app.
What the app stores, and why#
| Data | Why it exists | Legal basis |
|---|---|---|
| Your email address | It is the only way to sign in. Bingether does not ask you for a password: you get a link, you tap it, you are signed in. (One single account is the exception, the one the stores use to review the app before publication. It belongs to no one.) | Performance of the contract |
| Your display name and language | So the other members of your household can see who you are. You choose it when you first sign in; you can change it later. | Performance of the contract |
| Your household, its members, your role and colour | This is what the product does. | Performance of the contract |
| The invitations you send | An invitation link carries a token, an expiry date and a use count. It expires after fourteen days. | Performance of the contract |
| The shows and films you follow, the episodes you have watched | This is what you came for, and it is what the other members of your household see of you. | Performance of the contract |
| Shared viewing | When you agree to watch a show together, marking an episode marks it for everyone. The app records who proposed, who marked, and in which group. | Performance of the contract |
| The announcements you have already seen | So we do not show you the same thing twice, such as your household keeping its tier for life. We keep which one, and when. | Performance of the contract |
| The households your subscription unlocks | A subscription unlocks the household you are in. We keep which ones, to stop a single purchase from unlocking an unlimited number. | Legitimate interest, fraud prevention |
| A notification token | Only if you turn notifications on. It lets us send you a message when something is waiting for you, and it records whether your device runs iOS or Android. | Your consent |
| What was sent to that token | One line per attempted notification: the kind, the device, and whether it went out. It is how we see that a send failed without waiting for you to complain. Erased after 90 days. | Legitimate interest, keeping the service working |
| The platforms you declare | Netflix, Prime, Disney+… picked during onboarding. ⚠️ Nothing reads them yet: they are collected for targeting to come, decided on 31/08/2026, and until it exists they serve no purpose. You can change them in Settings. | Performance of the contract |
| Your subscription, if you take one | The tier, its end date, and the transaction identifier supplied by Apple or Google. It is what unlocks your household. Never a payment method, never any banking data. | Performance of the contract |
There is nothing else. No free-text field beyond your name and your household's name, no notes, no comments, no health data, no opinions, no origin.
What the app does not do#
Bingether contains no advertising, no trackers, no analytics. We do not know which screens you open, how long you stay, or where you came from. We do not collect your advertising identifier. We keep your IP address in no database.
One clarification we would rather write down: artwork is loaded by your device from our own image server, and that server records it in its technical logs, as any web server does. We do not exploit them and they are tied to no account. ⚠️ How long they are kept depends on our host and we have not verified it yet; this paragraph will be made precise once we have.
This is not a promise of good behaviour, it is an absence of code. The app's dependency file is public in that sense: it contains no ad network, no analytics SDK, no crash reporting tool.
We sell nothing to anyone, and we hand none of this over.
Who else sees your data#
The members of your household. That is the point. They see your name, your colour, the shows and films you follow, and how far along you are. A household is private and invitation-only: nobody joins without a link somebody sent.
The providers that keep the app running. They act on our instructions and may not use your data for anything else:
- Supabase, which hosts the database and handles the sign-in link.
- Expo, which delivers notifications if you turned them on. It receives your device token, not your email address.
- Apple and Google, if you subscribe. They are the sellers and they take the payment. We never see your payment method, and we only learn whether your subscription is active.
- RevenueCat, which tells us whether your subscription is active. It receives your account identifier on our side and the state of your purchase, nothing else: not your email address, not what you watch.
TheTVDB supplies the information about shows and films (titles, artwork, air dates), and Wikidata fills in the name of whoever created a show when TheTVDB does not have it. We are the ones querying them, from our server, and about a title: neither receives any data about you, and neither knows you exist.
Where the data lives#
The database is hosted by Supabase, in the West EU region, in Paris. Everything you track, your household and your account therefore stay inside the European Union.
Only one thing leaves it, and only if you turned it on: the token that lets us send you a notification travels through Expo, in the United States. That transfer is covered by the European Commission's standard contractual clauses. The token says neither who you are nor what you watch.
How long it stays#
As long as your account exists. Bingether has no automatic expiry: a show you followed in 2026 will still be there in 2031 unless you delete it, and that is deliberate.
Two exceptions, which clear themselves:
- an invitation link expires after fourteen days;
- a notification token is deleted as soon as you turn the switch off;
- the log of notifications sent is erased after 90 days.
When you delete your account, everything goes at once. It is not queued.
One exception, and only one: if you bought a subscription, the transaction identifier is kept, with no link to you. It says nothing about who you were, what you watched, or which household you were in. It serves two purposes: handling a refund that arrives after you leave, and preventing one purchase from unlocking new accounts indefinitely.
Your rights, and the fact that they already work#
European law gives you rights over your data. In most apps that means writing a letter and waiting a month. Here, two of them are buttons.
Get your history, in one tap. Settings, "Export everything". You get a human-readable file containing everything you track: your shows, your films, the episodes you watched, your household and its members. It is free, it always has been, and it will stay that way: it is a product commitment, not a compliance checkbox.
Get the rest. The button does not include your name, your language, the platforms you declared, your notification token or your subscription. Those you obtain by writing to contact@bingether.app, and we answer within a month. We would rather say so than let you think the button covers everything.
Delete your account. Settings, "Delete my account". Deletion is immediate and permanent, with no written request and no delay. Three honest notes on what it does:
- If you created a household where other people are still present, the household does not go with you: it passes to the longest-standing member. Deleting your account must not erase other people's history. If you are alone in your household, it goes with you.
- Episodes you marked on someone else's behalf stay with that person. The record survives, but it no longer says it was you.
- If you have an active subscription, deleting your account does not touch it. It is cancelled from the App Store or the Play Store, and until you do that, it keeps being charged.
Correct what is wrong. Your name and colour can be changed on the household screen.
The other rights (objection, restriction, withdrawing consent to notifications) can be exercised by writing to contact@bingether.app. We answer within one month. Consent to notifications can also be withdrawn on your own, with the switch in Settings.
If our answer does not satisfy you, you can complain to the CNIL, the French data protection authority, at 3 place de Fontenoy, 75007 Paris, or on cnil.fr. If you live elsewhere in the European Union, you can complain to your own national authority.
Minors#
Bingether is not intended for people under fifteen. We do not ask for your age and we have no way of verifying it: we rely on this rule and on the parental controls of both platforms. If you find that an account was created by a child under fifteen, write to us and we will delete it.
Notifications#
They are off by default, and rare: only when something is waiting for you. Today, four cases — an episode out on a show you follow, several the same day, someone in your household proposing to watch a show with you, and someone saying they watched a film with you.
There are no marketing notifications, no nudges, no engagement reminders. Turning the switch off deletes the token, not just the display.
If this page changes#
We will update it, and the date at the top will say so. If a change adds a purpose, a recipient or a category of data, you will be told in the app before it applies, not only here.
On 8 September 2026, two recipients were added to the list above: RevenueCat, which was announced as forthcoming while it was already in service, and Wikidata, which fills in one catalogue field. The latter receives nothing from you.