Privacy Policy
Last updated: 27 May 2026
Short version: Binly stores your scan history, postcode, and streak only on your device. We don't have a server collecting your data. The only time anything leaves your device is when you ask Binly to look up a barcode or identify an item from a photo, and even then no personal information is sent.
1. Who we are
Binly ("we", "us", "our") is a pre-launch UK app that helps people recycle correctly and earn rewards. This Privacy Policy explains how we handle personal data when you use our marketing site, the web prototype, and the iOS app — referred to collectively as "Binly" or "the Service".
The data controller is Binly, based in the United Kingdom. You can reach us at privacy@binly.app.
2. What data we collect
On your device only — never transmitted to us
- Postcode and selected council (so we know which bin rules to apply)
- Your scan history, streak count, points balance, and preferences
- Your name, if you choose to enter one during onboarding
- iOS only: state shared with home-screen widgets via the system App Group
This data lives in your browser's local storage and (on iOS) the device's User Defaults. We do not have a copy on any server we control.
Sent to third-party services when you scan
- Barcode lookups — barcode numbers are queried against OpenFoodFacts, an open public food database. No personal information is sent.
- Image-based recognition (camera / AR mode) — when on-device detection cannot identify an item, the photo may be sent to Google Cloud Vision API as a fallback. The image is processed transiently and is not retained by Binly. Google's handling of submitted images is described at cloud.google.com/vision/docs/data-usage.
3. Permissions we ask for
- Camera — required for barcode and AR scanning. The live camera feed stays on your device. Only when you actively scan does an image leave the device (and only to the services described above).
- Microphone — required for voice scanning. Speech-to-text is performed by the operating system (iOS Speech framework or your browser's Web Speech API). Audio is not retained.
- Live Activities (iOS) — used to show scan results in the Dynamic Island and on the Lock Screen. The activity payload stays on your device.
4. Lawful basis (UK GDPR)
We rely on the following lawful bases under UK GDPR (Article 6):
- Your consent — granting the camera and microphone permissions described above.
- Legitimate interest — running the scanning service so we can show you the right bin for your council.
You can withdraw consent at any time by revoking permissions in iOS Settings → Binly, or by clearing your browser's site data for the web app.
5. Cookies and analytics
The marketing site binlyrecyclingcom.netlify.app does not use third-party tracking cookies or analytics during the pre-launch phase.
The web app uses only first-party local storage (no cookies sent to a server) to persist your in-app state.
6. Children's data
Kids Mode is designed for children aged 5–11. Binly does not knowingly collect personal data from any user, child or adult, beyond what is stored locally on the user's device. There is no account creation, no email collection, and no analytics or advertising profile built on children.
If you are a parent or guardian and would like data on your child's device deleted, simply clear the app's storage (Safari: Settings → Safari → Clear History and Website Data; iOS app: uninstall the app).
7. Data retention
Because we do not collect or store your data on our servers, retention is entirely under your control. Clearing your browser data, signing out, or uninstalling the app removes all data Binly held.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you (we hold none on our servers)
- Request deletion (handled by clearing storage / uninstalling)
- Object to processing
- Withdraw consent for camera, microphone, or Live Activities at any time
- Lodge a complaint with the UK Information Commissioner's Office at ico.org.uk
9. Security
All network traffic between the app and external services uses HTTPS (TLS 1.2+). On-device storage is protected by iOS data protection / your browser's standard sandboxing. No additional encryption is used beyond what the operating system provides.
10. International transfers
Some of our processors (such as Google Cloud Vision) may process data outside the UK. These processors are bound by their own data-protection terms, and we only transmit non-personal data (barcodes or item photos) to them.
11. Changes to this policy
When Binly launches publicly — beyond the current pilot/preview phase — this policy will be updated to reflect any new processing (for example, user accounts, the rewards marketplace, or aggregated reporting to councils). We will notify users of material changes via the app and re-prompt for consent where required.
12. Contact
Questions about this policy, your data, or anything else: