BingeFree privacy notice

The short version

• Your urge logs, moods, journal, reasons, commitments, badges, voice note and signature never leave your phone. We cannot read them. There is no cloud sync.
• The AI companion chat is the one place your words are sent to us. Those messages go to our server and are processed by Claude, an AI model made by Anthropic, to write the reply. Anthropic's terms say they do not train models on that content.
• Chat conversations are deleted from our server automatically 90 days after the last message.
• Messages that look like a crisis are caught on our server first and answered with helpline information. They are never sent to the AI model.
• The community is pseudonymous. You get an assigned name like QuietBrook; your real name, email and account are never attached to a post.
• An account is optional and only needed for chat. You can delete it inside the app, in Settings → Account → Delete Account.
• No ads. No analytics or tracking SDKs. Nothing sold or shared for advertising.

What stays on your device

Almost everything. The following is stored only in BingeFree's private storage on your iPhone and is never transmitted to us or to anyone else:

• Urge logs — time, intensity, trigger, location, whether you were alone, and notes.
• Journal entries and mood check-ins.
• Daily commitments and your list of reasons.
• Badges, streaks, care actions and game scores.
• Your voice note to yourself — an audio file in the app's own folder.
• The signature and typed name on your commitment.
• Onboarding answers, including your assessment score and any spending figure you entered.
• Your chosen companion character, appearance settings and reminders.

BingeFree does not use iCloud or CloudKit sync, and it has no backup-to-our-server feature. If you delete the app, that data is gone — including from us, because we never had it.

AI companion chat

The companion chat is optional. Before your first message the app shows a notice explaining what the companion is and is not, and you have to accept it to continue. Chat also requires signing in. If you never open it, nothing in this section applies to you.

What is sent, and where

When you send a message, the app sends it to our own server at accounts.cong-le.com, operated by us. The request contains:

• The text you typed (up to 2,000 characters).
• Your device language, so the reply comes back in the right language.
• The companion character you chose, which sets the reply's tone.
• An anonymous per-installation identifier and your sign-in token, so we can find your conversation and count your daily allowance.

Nothing else from the app is attached. Your urge logs, journal, moods, assessment score and badges are not sent with a message and are not visible to the companion.

The AI provider

Our server does not write the replies itself. It calls Anthropic, the company behind Claude, and Claude generates the response. Anthropic is a processor acting on our instructions.

What Anthropic receives for a single reply:

• The recent messages in that one conversation — up to the last 20 turns, so the companion remembers what you were talking about.
• A set of instructions we wrote, describing the companion's character and your language.

What Anthropic does not receive: your name, your email, your Apple ID, your account identifier, your installation identifier, your subscription status, your location, or any of your on-device data. The conversation arrives at Anthropic unattached to any identity we hold.

We use Anthropic's commercial API. Their Commercial Terms of Service state that “Anthropic may not train models on Customer Content from Services” — Customer Content being the inputs we send and the outputs returned. Their handling is also described in the Anthropic privacy policy.

Crisis messages are never sent to the AI

Before a message reaches the model, our server checks it against a list of crisis phrases in every language the app supports. If it matches, the message stops there. You get a fixed reply we wrote ourselves, listing helplines for your region — the 988 Suicide & Crisis Lifeline, Samaritans, the Beat eating disorder helpline, and equivalents in Japanese, Korean, German and Chinese — plus findahelpline.com. No AI model sees that message, and it does not use up your daily allowance.

Being complete about it: the message is still saved in your conversation on our server for the usual 90 days, and an automated alert tells us that a crisis reply was triggered. That alert contains only the app name and the conversation identifier — never the text of what you wrote. BingeFree does not contact anyone on your behalf and does not report you to anybody.

Crisis resources are also listed in the app's Toolkit and Settings, and reaching them there involves no network request at all.

Reply safety

Replies are checked before they reach you and cut short if the model drifts into diet, calorie or weight advice, which the companion is instructed never to give.

How long we keep it

Conversations and their messages are stored on our server so the thread is still there when you come back. A job runs every night and deletes any conversation with no activity in the last 90 days, along with every message in it. This is automatic, not something you have to ask for.

Deleting your account removes all of your conversations and messages immediately, without waiting for the 90 days.

Allowances

Free accounts can send a limited number of messages a day and Pro accounts more, so we keep a per-day message count against your account and a record of whether your subscription is active. Your subscription status is not attached to the message itself and is never passed to Anthropic.

Community

The community lets you post, comment and react alongside other people using the app. It runs on our server, and it is deliberately pseudonymous.

• Your community name is assigned by us, not chosen — a calm two-word name like QuietBrook, derived from a one-way hash of your installation identifier. You cannot pick it, and it does not contain anything about your body, weight or progress.
• Posts, comments and reactions are stored on our server against that installation identifier only. Your real name, email address and account are never attached, and the installation identifier is never shown to other users.
• If you post a badge, only the badge's identifier and date go with it — never your streak, weight, or anything you wrote privately.
• You can report a post or comment, and block another pseudonym. Content reported by several different people is hidden automatically, and we can hide content or ban an identity from our moderation console. New posts are also screened for diet-culture and abusive language before they are accepted.
• Some posts and replies come from accounts we run ourselves — community hosts — so the space is not empty and new members get a welcome. They are written and operated by us, not by other users.

One thing worth being clear about: because community content is tied to your installation rather than to your account, deleting your account does not remove it. To have your community posts removed, email [email protected] with your pseudonym and we will delete them.

Your account

An account is optional. Everything in BingeFree works signed out except the AI companion chat, which needs one so your allowance and conversations follow you.

You can sign in with Apple or with your email address and a one-time code. If you use Sign in with Apple you may hide your email, and Apple gives us a relay address instead. We store your email address, an account identifier, whether you agreed to receive occasional product emails, and when the account was created. We do not store a password, because there isn't one.

Deleting your account

In the app: Settings → Account → Delete Account. It asks you to confirm, then deletes straight away. You can also email [email protected] and we will do it for you.

Deleting your account removes:

• Your account record and email address.
• Every AI chat conversation and message.
• Your subscription entitlement record on our server.
• Your sign-in sessions, and any stored backup data.

Where you signed in with Apple, we also ask Apple to revoke the app's access. We keep one thing: a one-way hash of your email address, so that a deleted account stays off our mailing list. It cannot be turned back into your address.

Your on-device data — logs, journal, badges, voice note — is untouched by account deletion, because it was never ours. Deleting the app removes it.

Purchases

BingeFree Pro is sold through the Apple App Store. Apple takes the payment; we never see your card details. We use RevenueCat to check whether a purchase is valid and to keep it working across your devices. RevenueCat receives your account identifier — or an anonymous identifier if you are signed out — and the details of the purchase itself. That record exists to unlock the app you paid for. It is not used for advertising, not combined with anything you write in the app, and not used to track you across other apps or websites.

Feedback and support

If you send feedback from inside the app, we receive your message, an anonymous installation identifier so we can reply in the same thread, and — with the first message of a thread — your app version, iOS version, device model and language, which is what makes a bug report actionable. Your email address is not attached. If you email us directly instead, we have your address because you wrote to us from it.

What BingeFree does not do

• No advertising, and no advertising SDK in the app.
• No analytics, attribution or crash-reporting SDKs. We do not measure your usage.
• No tracking as the App Store defines it — nothing is linked to you across other companies' apps or websites, and the app does not ask for tracking permission because it has nothing to ask for.
• We do not sell or rent your personal information, and we do not buy it.
• We do not use anything you write — chat, journal or community — to train AI models, and neither does our AI provider.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your information, and to object to or restrict certain processing. Under UK GDPR you can also complain to the Information Commissioner's Office. Email [email protected] and we will act on it.

For the on-device data, you do not need us: it is yours, on your phone, and deleting it in the app or deleting the app removes it. We have no copy.

Children

BingeFree is not intended for children under 13, or the equivalent minimum age where you live. It is a support tool, not medical care or treatment, and it does not diagnose anything.

Changes

If we change how BingeFree handles your information we will update this page and the date at the top. Anything material — a new place your data goes — will also be surfaced in the app.

Contact

Privacy questions, data requests and account deletion: [email protected]
Anything else: [email protected] or [email protected]