Privacy Policy

1. Who this policy applies to

This policy applies to users of the Scene mobile app (iOS and Android) and visitors to our website. If you do not agree with this policy, please do not use the Services.

2. Information we collect

2.1 Information you provide

• Account information: Name, email address, and authentication credentials when you sign up or sign in (including via email/password, Google Sign-In, or Sign in with Apple).
• Profile information: Bio, profile photo, visibility preferences, and attendance privacy settings you choose to set.
• Event information: Titles, descriptions, dates, locations, capacity, images, RSVP status, comments, and other details you add when creating or interacting with events.
• Group information: Group names, descriptions, membership, roles, and related content when you create or join groups.
• Social interactions: Follows, follow requests, join requests, invitations, and notifications you send or receive.
• Communications: Messages or requests you send to us (for example, support emails).

2.2 Information collected automatically

• Device and app data: Device type, operating system, app version, language, and push notification tokens (FCM) needed to deliver notifications.
• Log and usage data: IP address, timestamps, and diagnostic information when you use the Services, such as API requests and error logs.
• Location data: With your permission, precise or approximate location to display events and venues on maps and help you discover nearby events. You can disable location access in your device settings.

2.3 Information from third-party sign-in

If you sign in with Google or Apple, we receive information from that provider (such as your name, email address, and a unique account identifier) as permitted by your settings with that provider. Apple's private relay email addresses may be used where applicable.

3. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Create and manage your account and authenticate you
• Enable you to create, discover, join, and share events and groups
• Send push notifications, reminders, and service-related messages
• Display maps and location-based event information
• Suggest event tags using automated processing (see Section 5)
• Enforce our terms, prevent abuse, and protect the security of the Services
• Comply with legal obligations and respond to lawful requests
• Improve and develop the Services

4. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following bases:

• Contract: To provide the Services you request
• Legitimate interests: To secure, improve, and operate the Services, and to prevent fraud
• Consent: Where required, for example location access, push notifications, camera, or photo library access
• Legal obligation: Where we must comply with applicable law

5. Automated processing and AI

We may use automated tools, including third-party AI services, to suggest tags or categories for events based on event details you provide (such as title and description). This processing is used to improve discovery and organization within the app. It does not produce legal or similarly significant effects on you.

6. Device permissions

The app may request the following permissions. You can revoke them at any time in your device settings:

• Camera: To take photos for your profile or events
• Photo library: To select and upload images, and to save images where supported
• Location (while in use): To show events and venues on maps
• Notifications: To send event reminders, invites, and updates

7. How we share information

We do not sell your personal information. We may share information in these situations:

• With other users: Content you make visible — such as your profile, events you host, RSVPs, and group membership — is shared according to your privacy and visibility settings.
• Service providers: Companies that help us run the Services, including:
  • Cloud hosting and database providers (e.g., Google Cloud Platform)
  • Authentication and messaging services (e.g., Firebase, Google, Apple)
  • Map services (e.g., Google Maps) when you use location features
  • AI processing providers for event tag suggestions (e.g., OpenAI), limited to the data needed for that feature
• Legal and safety: When required by law, regulation, legal process, or to protect the rights, safety, and security of Scene, our users, or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to this policy.

Third-party services have their own privacy policies. We encourage you to review the policies of providers you interact with through the app.

8. International data transfers

We may process and store information in countries other than where you live, including the United States. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

9. Data retention

We keep your information for as long as your account is active or as needed to provide the Services. If you delete your account, we will anonymize or delete your personal data within a reasonable period, except where we must retain certain information for legal, security, or fraud-prevention purposes.

10. Data security

We use technical and organizational measures designed to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your account settings
• Delete your account through the app settings (this initiates anonymization/deletion of your personal data)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your data in a portable format
• Lodge a complaint with your local data protection authority

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at the email below. We will not discriminate against you for exercising your rights.

12. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it. Users between 13 and 18 should use the Services only with parental or guardian permission where required by local law.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app, by email, or by posting a notice on this page before the change takes effect. The “Last updated” date at the top reflects the latest revision. Continued use of the Services after changes means you accept the updated policy.