Privacy Policy
Last updated 16 October 2026
Binge Fluent is a language-learning layer for the shows you already watch. We collect as little as the product needs, we never sell personal data, and we don't run advertising trackers. This page says exactly what we do collect and why.
Who we are
Binge Fluent is operated by Trioflowlabs Ltd, a company registered in England and Wales ("we", "us"). We are the data controller for the personal data described here. You can reach us at support@bingefluent.com.
What we collect
Your account
- Your email address, and your name if Google or Apple pass it to us.
- How you signed in (Google, Apple, or an emailed code). There are no passwords.
- If you sign in with Apple's "Hide My Email", we only ever see the relay address Apple gives us.
Sign-in security
- Emailed sign-in codes are stored hashed and expire after 10 minutes or 3 wrong attempts.
- To stop code-guessing, we keep a keyed hash of the address each code was sent to for 24 hours, and apply per-connection rate limits.
Billing
- Payments are handled by Stripe. Your card details go straight to Stripe and never reach our servers.
- We store your Stripe customer reference, which plan you are on, whether you are in a trial, and when your access renews or ends — that is what the paywall and your Settings page run on.
Learning data
- When you are signed in, your learning progress is stored with your account so it follows you across devices: your word deck (each word you caught, the show and line you caught it in, and when it is next due for review), your review history (which word, when, and whether you knew it), your streak and each day's activity (how many words you caught, how many quiz questions you answered and got right, and how many words you reviewed), and your points. Each device keeps a copy so the app works without waiting. Your devices send your local date and the time your day started, so your streak follows your own calendar; that shows which time zone you were in.
- When you are signed out, your progress and preferences stay in your browser on that device. The first time you sign in on a device, the progress made there is added to your account once.
- When you open your Wrap after watching a YouTube video with the extension, we store that watch with your account: the video's ID, when you watched and for how long, the words you tapped, your quiz answers and any questions you reported. That is what your Wrap shows. The words you tapped also join your word deck, with the line they were in. It stays with your account until you delete the account.
- The optional profile you fill in (name, target language, level) is stored with your account.
Waitlist
- If you joined the waitlist, we hold the email address you gave us.
Browser extension
- The extension adds a Binge Fluent control on YouTube watch pages. It keeps its connection key and your settings in the browser's extension storage.
- If your account has Pro or a trial, the extension is connected to it, and you switch on "learn from the videos I watch", the extension asks YouTube's player for the caption tracks of each video you watch, including tracks you have not switched on: the spoken language's automatic captions, the creator's captions in that language and in the language you are learning. It sends their text, the video's ID, and each track's language and type to our servers so we can prepare word help and quizzes for that video. The switch stays on, across videos and browser restarts, until you turn it off.
- Nothing is read or sent while the switch is off, on any other website, or when the extension is not connected to an account with Pro or a trial.
- We store captions under a fingerprint of their text, without your account or any record of who sent them: a video's captions are the same for every viewer, so once they are stored, later viewers add nothing new. To stop abuse, we count uploads per account for one minute at a time.
Preparing lessons with AI
- When the extension sends us a video's captions, our servers turn them into a lesson: we split them into sentences, translate each sentence into your language, and choose which dictionary meaning each word has in its sentence. The translating and choosing is done by an AI model from OpenAI, reached through Cloudflare's AI Gateway.
- The model receives the caption text and the dictionary meanings to choose from — not your name, email address or account. Under OpenAI's API terms this data is not used to train their models.
- Cloudflare's AI Gateway keeps a log of recent requests — the caption text sent, the model's answer, your account ID and the video's ID — so we can see spending and errors. It keeps the most recent 100,000 requests and deletes older ones.
- The prepared lesson is stored under a fingerprint of the captions, without your account, and reused for every learner who watches the same video.
- To apply the daily limit on new video and our spending limit, we record that your account prepared a video: the video's ID, when, the AI model used and its estimated cost, and how many minutes of new video you prepared that day.
Technical data
- Like any website, our servers see your IP address, browser type and the pages or requests you make. We use these for security, rate limiting and fixing errors.
- We do not use advertising trackers or third-party analytics cookies.
Cookies
We set one strictly necessary cookie that keeps you signed in. Stripe sets its own cookies inside its checkout frame for fraud prevention; they are covered by Stripe's policy. There is no cookie banner because there is nothing optional to consent to.
Why we use your data (legal bases under UK GDPR)
- Contract — creating your account, taking payment, giving you the plan you bought, emailing you sign-in codes and renewal reminders.
- Legitimate interests — keeping accounts secure, preventing fraud and abuse, understanding errors, and improving the product.
- Legal obligation — keeping billing records for tax and accounting.
- Consent — any marketing email, which we would only send if you opt in and can stop with one click.
Who we share it with
| Who | What for |
|---|---|
| Stripe | Payments, subscriptions, refunds. |
| Cloudflare | Hosting the app and API, our database and storage, sending our transactional emails, and routing AI requests (AI Gateway). |
| OpenAI | Translating caption sentences and choosing word meanings for lessons — it receives caption text and dictionary meanings only. |
| Google / Apple | Only if you choose to sign in with them; what they receive is shown on their consent screen. |
These providers act on our instructions. We do not sell personal data, and we do not share it with advertisers. We would disclose data if the law required it.
Where it is processed
Our providers run global infrastructure, so your data may be processed outside the UK. Where that happens we rely on the UK's adequacy decisions or the UK International Data Transfer Addendum with those providers.
How long we keep it
- Account and profile data: while your account exists, then deleted within 30 days.
- Billing records: 6 years, as UK tax law requires.
- Sign-in codes: 10 minutes. Send-limit hashes: 24 hours.
- Video captions the extension sent, and the lessons prepared from them: while we offer lessons for that video. They are not linked to your account.
- Records that your account prepared a video: 90 days. Daily counts of new video minutes: 7 days.
- Watches you sent to your Wrap: while your account exists.
- Your word deck, streak, daily activity and points: while your account exists.
- Review history: 90 days. A record of each update your devices sent (its identifier, its kind, its day and the points it gave, used so a retried update is not counted twice): 60 days.
- Server logs: up to 30 days.
- Waitlist addresses: until launch, or until you ask us to remove you.
Your rights
You can ask us for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable form. Email support@bingefluent.com and we will answer within one month. To delete your account, email us from the address on the account; we cancel any subscription and remove your data within 30 days. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
Binge Fluent is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Changes
When this page changes we update the date at the top. For changes that affect what we collect or share, we email account holders before they take effect.
Questions about this page: support@bingefluent.com