Privacy policy

Binit is an iOS app that finds the mailing lists holding your email address and gets you off them, made by The It Group. This policy explains what Binit does with your information, in the order it matters.

The short version

• Binit collects only what the service needs to work. The whole list is below — there is nothing beyond it.
• Everything you save in Binit stays on your device. What leaves it, and what makes it leave, is listed below.
• The only third-party services involved are: Microsoft, whose own sign-in page you use to reach your mailbox — Binit never sees your password; Have I Been Pwned, which answers the password check described above, and which also publishes the list of known break-ins Binit downloads. That list is the same for everybody and your address is never sent with the request — the matching against your mailbox happens on the phone.
• Your data is never sold, and never used for advertising or tracking.

What Binit collects

Only what the service needs to work, and only while you are using it:

• Five scrambled characters of a password, and only when you ask Binit to check one. The password is scrambled on the phone and only the first five characters of the result are sent; those five match around half a million different passwords, so the service cannot tell which one you meant. The answer is worked out back on the phone.
• Your email address, reaching a sender when you unsubscribe from their list — which is what unsubscribing is. They already have it, which is why they were writing to you.
• Whatever is in a scam report or a deletion request you send. These go out as mail from your own mailbox, to the national reporting address or to the company concerned. Binit has no server in the path.

Where your content lives

Everything you make or save in Binit is stored locally on your device unless a feature explicitly says otherwise. If you use Apple’s own device backups (such as iCloud Backup), your Binit data may be included in them — that backup is governed by Apple’s privacy policy, and we have no access to it.

Third parties

Binit uses these services, and each receives only what it needs to do its job:

• Microsoft, whose own sign-in page you use to reach your mailbox — Binit never sees your password
• Have I Been Pwned, which answers the password check described above, and which also publishes the list of known break-ins Binit downloads. That list is the same for everybody and your address is never sent with the request — the matching against your mailbox happens on the phone

There are no advertising SDKs and no trackers in the app.

The App Store

If you download Binit from Apple’s App Store, Apple may provide us with aggregated, anonymised statistics — download counts and crash reports, for example. These contain no personal information and cannot be traced back to you by us.

Deleting your data

You can delete your data by deleting the app. If you believe we hold anything further, email us and we will erase it.

Children

Binit is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has given us information, tell us and we will delete it.

Your rights

UK GDPR applies. You may ask for access to your data, ask for it to be corrected or deleted, and object to how it is used. Write to us and we will answer within one month.

Changes to this policy

If Binit ever changes how it handles data, this page will be updated first and the effective date above will change. A promise kept simple: if the app starts collecting something, this policy will say so plainly before it does.

Contact

Questions about this policy or about Binit: theitgroupapps@gmail.com