Privacy Policy

Effective date: October 31, 2026 · Last updated: October 31, 2026

BingeBox (“BingeBox,” “we,” “us”) is an Android app and website for short vertical dramas made with AI. This policy explains what data we collect, why, who processes it, and your choices. It applies to the BingeBox app, bingebox.app, and related emails sent from bingeboxapp.com.

Contact for privacy requests: privacy@bingeboxapp.com

1. Who we are

Operator: Amit Raban (individual developer) pending formal entity registration. Primary service region for launch: United States, with planned availability in the United Kingdom, Canada, and Australia.

2. Data we collect

Account and profile

• Email address and authentication identifiers when you sign in (Neon Auth).
• Optional profile fields you provide: display name, handle, bio, avatar, public social link (for example Instagram).
• Browsing without an account is allowed. Sign-in is required to like, create shows, or open the wallet.

Content you create or upload

• Show premises, hooks, scripts, cast metadata, generated images and video, and related creator assets.
• Stored on our object storage (Cloudflare R2) and delivered via CDN to viewers.

Usage and device data

• App interactions and product analytics events (PostHog), including device or install identifiers.
• Push notification tokens (Firebase Cloud Messaging) if you enable notifications.
• Crash and diagnostic logs (Firebase Crashlytics), including device model, OS version, and stack traces.

Purchases and balances

• In-app purchase records processed by Google Play Billing (we receive product IDs, order identifiers, and entitlement status; we do not receive your full payment card number).
• Coin and credit balances, unlock history, and reward-task progress on our servers.
• Creator payout details you submit when payouts are enabled (for example payout email or account identifiers). Collected only when you request payouts.

Communications

• Transactional and product email (Resend), sent from addresses on bingeboxapp.com (for example account, security, or support mail).
• Messages you send to our support or privacy addresses.

We do not intentionally collect

• Precise location, address-book contacts, or payment card PAN/CVV (cards stay with Google Play or your bank).
• Data from children under 13. BingeBox is not directed at children.

3. How we use data

• Provide the app: accounts, playback, creation, wallets, notifications, and support.
• Generate and deliver AI media for your shows (see vendors below).
• Process purchases, unlocks, revenue share, and (when live) creator payouts.
• Measure product usage, fix crashes, and improve reliability.
• Send transactional email and, where permitted, product updates you can opt out of.
• Detect abuse, fraud, and policy violations; enforce our Terms.
• Comply with law and respond to lawful requests.

4. AI and media vendors

To generate scripts, images, voice, and video we send the prompts and assets needed for that job to subprocessors. We do not sell your content as a training dataset. Vendors may process inputs to fulfill the request under their terms.

5. Other processors

These parties process data on our instructions as service providers / processors, except where they act as independent controllers under their own policies (for example Google Play’s handling of your Google account and payments).

6. Sharing

We do not sell personal information. We share data only:

• With processors listed above to run the service.
• Publicly when you publish a show or profile (title, artwork, creator handle, and similar).
• If required by law, or to protect rights, safety, and integrity of the service.
• In a merger, acquisition, or asset transfer, with notice where required.

7. Retention

• Account and profile data: while your account is active, then deleted or anonymized after a deletion request (typically within 30 days, unless law requires longer).
• Published shows: retained while published; removed from public view when you delete them or your account, subject to backup cycles and legal holds.
• Purchase and payout records: retained as needed for accounting, tax, chargebacks, and legal obligations.
• Analytics and crash logs: retained for a limited operational window (generally up to 12–24 months unless shortened in product settings).

8. Security

We use HTTPS/TLS in transit, access controls on production systems, and vendor security features where available. No method of transmission or storage is fully secure; please use a strong unique password for your account email provider.

9. Your choices and rights

In-app

• Edit profile fields; disconnect optional social links.
• Disable notifications in OS settings (and in-app when available).
• Delete your account from Profile → Delete account.

Email us

Write to privacy@bingeboxapp.com to access, correct, export, or delete personal data, or to object to certain processing. We may need to verify your identity.

10. United States (including CCPA / CPRA)

If you are a California resident, you may request to know, delete, or correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information and do not use it for cross-context behavioral ads. We do not use sensitive personal information beyond what is needed to provide the service. You will not be discriminated against for exercising privacy rights. Authorized agents may contact us at the email above with proof of authority.

11. United Kingdom and GDPR-style rights (UK / EU users)

Where UK GDPR or similar law applies, our processing bases include: contract (providing the app you requested), legitimate interests (security, product improvement, abuse prevention), consent (optional notifications / marketing where required), and legal obligation. You may have rights to access, rectification, erasure, restriction, portability, and objection, and to lodge a complaint with the UK ICO or your local authority. International transfers use vendor mechanisms such as Standard Contractual Clauses where required.

12. Canada and Australia

For Canadian users we handle personal information under applicable private-sector privacy laws (including PIPEDA principles of consent, limited collection, and safeguards). For Australian users we handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988, including access and correction requests via the contact below. Cross-border processing to our vendors in other countries may occur as described in this policy.

13. Children

BingeBox is for users 13+ (and older where local law requires). We do not knowingly collect data from children under 13. If you believe a child provided data, contact us and we will delete it.

14. Changes

We may update this policy. We will change the “Last updated” date above and, for material changes, provide additional notice in the app or by email when appropriate.

15. Contact

Privacy: privacy@bingeboxapp.com
Web: https://bingebox.app