Privacy Policy
Bindle
This Privacy Policy explains what information Bindle (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using Bindle you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| User-provided server credentials | No | No | Used only to authenticate directly against the Wallabag server you specify. Stored encrypted on your device (expo-secure-store); never sent to Erebos Lab or any third party — the only server Bindle talks to is the one you configure. |
| Saved articles (on your own server + local cache) | No | No | Provide the save/read/offline functionality. This data lives on the Wallabag server you control, mirrored into a local on-device cache for offline reading. None of it passes through or is stored by Erebos Lab. |
| App Preferences (on-device only) | No | No | Remember your preferences and schedule the optional local reading reminder. Stored on your device only; no push token is collected and no remote notification server exists. |
What we collect
User-provided server credentials
- The server URL, OAuth client ID/secret, and account credentials you enter for your own Wallabag server
Used only to authenticate directly against the Wallabag server you specify. Stored encrypted on your device (expo-secure-store); never sent to Erebos Lab or any third party — the only server Bindle talks to is the one you configure.
Saved articles (on your own server + local cache)
- Article URLs, extracted content, tags, and star/archive/read state
Provide the save/read/offline functionality. This data lives on the Wallabag server you control, mirrored into a local on-device cache for offline reading. None of it passes through or is stored by Erebos Lab.
App Preferences (on-device only)
- Reading-reminder toggle and app settings
Remember your preferences and schedule the optional local reading reminder. Stored on your device only; no push token is collected and no remote notification server exists.
What we do NOT do
- Erebos Lab operates no backend for Bindle and receives none of your saved articles, credentials, or reading data — everything goes directly between your device and the Wallabag server you configure.
- No third-party analytics, advertising SDK, or crash/diagnostics SDK is used.
- No ads are shown.
- We do not sell your personal information (there is nothing for us to sell — we never receive it).
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- Your own Wallabag server — The self-hosted server you configure — stores your saved articles and account; not operated by Erebos Lab
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email [email protected].