Last Updated: October 6th, 2025
SceneSync (“we,” “our,” “us”) operates the SceneSync mobile application. This Privacy Policy explains how we collect, use, protect, and handle your personal information.
By using SceneSync, you agree to the collection and use of information in accordance with this policy.
When you create a SceneSync account, we collect:
– Email address (for authentication and communication)
– Display name (optional)
– Account credentials (securely encrypted)
– Scene plans you write
– Reflections you document
– Feedback requests you submit
– Survey responses during beta testing
We automatically collect certain information when you use SceneSync:
– Device information (type, operating system version, unique device identifiers)
– App version and build number
– Usage statistics (features accessed, session duration, screen views)
– Error logs and crash reports (to improve app stability)
– Token usage records (types of tokens consumed, timestamps)
We track anonymized usage patterns to improve SceneSync:
– Feature adoption rates
– User flow patterns
– Performance metrics
– Token consumption patterns
We do NOT collect:
– Location data
– Contacts or address book
– Photos or media (unless you explicitly upload)
– Payment card details (handled by Stripe)
– Authenticate your account
– Store and sync your scene plans and reflections
– Generate personalized feedback for your content
– Track token balances and consumption
– Process payments through Stripe
– Analyze usage patterns to identify needed features
– Debug technical issues and crashes
– Optimize app performance
– Test new features with beta users
– Send important service notifications
– Share beta testing updates (during beta period)
– Respond to support requests
– Send tier reward notifications
– Comply with applicable laws and regulations
– Enforce our Terms of Service
– Protect against fraud or abuse
– Sell your data to third parties
– Use your scene plans or reflections for advertising
– Share your content with anyone without your permission
– Send promotional emails (beyond beta testing communications)
Primary Infrastructure:
– Backend: Google Firebase (Firestore database, Authentication)
– Feedback Generation: Meta Llama 3.3 70B Instruct Turbo model served through Together AI (api.together.xyz), proxied via Firebase Functions
– Payment Processing: Stripe (handles all payment information)
– Email Communications: EmailJS (beta testing notifications only)
Geographic Location:
– Data stored on Google Cloud Platform servers (multi-region for reliability)
– Subject to Google’s data residency and security policies
We implement industry-standard security practices:
– All data encrypted in transit via HTTPS using TLS 1.3 (or newer)
– All data encrypted at rest (AES-256)
– Secure authentication tokens with automatic expiration
– Firebase security rules enforce user-specific access
– Only you can read your scene plans and reflections
– No SceneSync employee can access your content without explicit authorization
– Regular security audits, automatic security updates, firewall protection, and DDoS mitigation
Despite our best efforts, no method of transmission or storage is 100 % secure. We cannot guarantee absolute security.
Your data is retained as long as your account remains active.
When you delete your account:
– Immediate deletion: All scene plans, reflections, and personal data are permanently removed
– 30-day grace period: Backups are purged within 30 days
– Token records: Retained for accounting purposes (anonymized after 90 days)
– Analytics data: Anonymized and aggregated (no personal identifiers)
During beta testing:
– Survey responses: Retained for product development (anonymized after 90 days)
– Feedback patterns: Aggregated and anonymized for analysis
– Tester activity: Tracked for tier reward eligibility (deleted 90 days post-beta)
SceneSync uses the following third-party services. Each has its own privacy policy governing how they handle data.
Google Firebase (Backend Infrastructure)
What they do: Authentication, database, cloud functions, hosting
Data shared: Account info, app content, usage statistics
Policy: firebase.google.com/support/privacy
Why we use them: Industry-leading security, GDPR compliance, reliable infrastructure
Together AI / Meta Llama 3.3 (Feedback Generation)
What they do: Process your scene plans and reflections to generate personalized feedback
Data shared: Only the content you explicitly request feedback on
Policies: together.ai/privacy | llama.meta.com/license | llama.meta.com/use-policy
Why we use them: Reliable, high-performance model hosting with clear privacy options
Important: Together AI states that prompts and responses are not used to train models without explicit user opt-in. Limited logs may be retained briefly for reliability and abuse prevention.
Stripe (Payment Processing)
What they do: Process subscription and token pack purchases
Data shared: Email address, payment information
Policy: stripe.com/privacy
Why we use them: PCI-DSS compliant, industry standard for secure payments
Important: We never see or store your payment card details
EmailJS (Automated Communications)
What they do: Send automated email notifications
Data shared: Email address, name
Policy: emailjs.com/legal/privacy-policy
Why we use them: Reliable email delivery for communications
You have the following rights regarding your personal data:
Request a copy of all data we hold about you.
We’ll provide your data in a structured, commonly used format (JSON or CSV).
Permanently delete your account and all associated data.
Deletion is immediate and irreversible. All scene plans, reflections, and personal information will be permanently removed.
Download your scene plans and reflections.
Available in-app: Settings → Data Export → Download your data as JSON
Update inaccurate or incomplete information.
You can edit your profile, email, and display name directly in the app.
Limit how we use your data.
You can opt out of analytics tracking in Settings → Privacy → Analytics
Revoke permissions at any time.
Changes take effect immediately. Note: Some features may become unavailable.
Object to certain data processing activities.
Contact us at privacy@scenesync.app to discuss your concerns.
File a complaint with a data protection authority.
If you’re in the EU: Contact your local Data Protection Authority
If you’re in California: Contact the California Attorney General
To request any of the above:
Email: support@scenesync.app
Subject Line: Data Request – [Your Request Type]
Include: Your registered email address and specific request
Response Time:
– We respond to all requests within 30 days
– Complex requests may take up to 90 days (we’ll notify you of any delays)
– Identity verification required for security purposes
No Cost:
– Exercising your privacy rights is completely free
– We may charge a reasonable fee for excessive or repetitive requests
If you are located in the European Economic Area (EEA), you have additional protections under GDPR.
Legal Basis for Processing:
– Consent: You explicitly agree to our data practices by using SceneSync
– Contract Performance: Necessary to provide the services you requested
– Legitimate Interests: Improve app functionality, prevent fraud, ensure security
Data Transfers:
– Your data may be transferred to and processed in the United States
– We rely on Google’s Standard Contractual Clauses for GDPR-compliant transfers
Data Protection Officer:
– Contact: privacy@scenesync.app
– Response within 30 days to GDPR-related inquiries
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA).
Right to Know:
– What personal information we collect
– Sources of that information
– Purposes for collecting it
– Categories of third parties we share it with
Right to Delete:
– Request deletion of personal information (with certain exceptions)
Right to Opt-Out:
– We do NOT sell personal information (you have nothing to opt out of)
Right to Non-Discrimination:
– We will not discriminate against you for exercising your CCPA rights
To Exercise California Rights:
– Email: privacy@scenesync.app
– Subject: CCPA Request
– Include: Proof of California residency
SceneSync is intended ONLY for users 18 years of age or older.
We do not knowingly collect information from anyone under 18. If you are under 18, do not use SceneSync or provide any personal information.
If we discover a user is under 18:
1. We will immediately delete their account
2. All associated data will be permanently removed
3. We will notify the email address on file
If you believe a minor has provided information to SceneSync:
– Report immediately: privacy@scenesync.app
– Include: Any identifying information you have
– We will investigate and take appropriate action within 48 hours
The SceneSync mobile app does NOT use cookies. However, we do use:
– Local device storage: For draft autosave and offline functionality
– Session tokens: For authentication (stored securely, auto-expire)
– Analytics identifiers: For usage tracking (can be disabled in Settings)
The scenesync.app website uses minimal cookies:
Essential Cookies (Cannot be disabled):
– Age verification: Remembers you confirmed 18+ (30-day expiration)
– Session management: Keeps you logged in to the website
Optional Cookies (Can be disabled):
– Analytics: Tracks page views and site usage (Google Analytics)
– Disable in browser settings or use privacy extensions
We do NOT use:
– Advertising cookies
– Social media tracking pixels
– Third-party remarketing cookies
SceneSync operates globally using cloud infrastructure. Your data may be transferred to and processed in countries other than your own.
Primary Data Locations:
– United States (Google Cloud Platform primary region)
– European Union (Firebase multi-region replication)
Safeguards for International Transfers:
– Google’s Standard Contractual Clauses (GDPR-approved)
– Firebase Privacy Shield certification
– Equivalent data protection standards across all regions
If you’re in the EU:
– Your data may be transferred to the US, but only under GDPR-compliant mechanisms
– You have the right to object to international transfers
In the unlikely event of a data breach that affects your personal information:
We will notify you within 72 hours if:
– The breach involves sensitive data (scene plans, reflections, account credentials)
– There is a risk to your rights and freedoms
– The breach could result in identity theft or harm
Our notification will include:
– Nature of the breach
– Types of data affected
– Steps we’re taking to address it
– Recommendations for protecting yourself
You will be notified via:
– Email to your registered address
– In-app notification
– Website announcement (if widespread)
If you’re in the EU:
– We will also notify the relevant Data Protection Authority within 72 hours
We may update this Privacy Policy periodically to reflect:
– Changes in our data practices
– New features or services
– Legal or regulatory requirements
When we make changes:
– “Last Updated” date will be revised at the top of this page
– Material changes will be communicated via email or in-app notification
– Continued use of SceneSync after changes indicates acceptance
Your options if you disagree:
– Stop using SceneSync
– Delete your account (Settings → Account → Delete Account)
– Contact us with concerns: privacy@scenesync.app
We will NEVER:
– Make retroactive changes to how we handle your existing data without consent
– Reduce your privacy rights without notification
For privacy-related questions, concerns, or requests:
Email: support@scenesync.app
Website: https://scenesync.appResponse Time:
– General inquiries: Within 3 business days
– Data requests: Within 30 days
– Urgent security concerns: Within 24 hours
SceneSync is committed to protecting your privacy and handling your data responsibly. Your trust is essential to our mission of helping you plan safer, more fulfilling scenes.