SceneSync Privacy Policy
Last Updated: July 7, 2026
SceneSync (“we,” “our,” “us”), operated by Consynt Collective LLC, provides the SceneSync web app and website. This policy explains what we collect, how we use it, and the choices you have. By using SceneSync, you agree to the practices described here.
In short: the Feedback Assistant is optional; when used, only the text you choose to submit (plus any profile context you opt in to) is transmitted for processing, and your account identity is not attached. We do not sell your data or use your content for advertising.
Information We Collect
Account information
- Email address
- Display name (optional; a pseudonym is fine)
- Authentication credentials (managed by Firebase Authentication)
Content you create
- Scene plans and reflections
- Your profile and partner profiles
- Feedback Assistant requests and their results
Scene and reflection content can reveal information about your sex life and sexual orientation. We treat this as sensitive (“special category”) data, process it only to provide the service and only with your consent, and never for advertising or sale.
Usage data
- Device and browser information, app version
- Session and screen‑view analytics (first‑party only)
- Error and crash diagnostics
- Token usage events (timestamped)
We do not collect location data, your contacts, or biometric data, and we don’t access your photos unless you deliberately upload an image.
How We Use Your Information
- Provide the service: authenticate your account, store and sync your content, process Feedback Assistant requests, and maintain token balances.
- Improve the app: debug errors, understand which features are used, and address performance issues (first‑party analytics only).
- Communicate: important service updates and responses to your support requests.
- Legal & security: prevent fraud and abuse, comply with law, and enforce our Terms.
We do not sell your personal data, use your scene plans or reflections for advertising, or share your content with anyone without your permission.
AI Feedback Processing
When you use the Feedback Assistant, the text you submit (plus any profile context you opt in to) is sent server‑side — from our Firebase Cloud Function, not from your device — to OpenAI’s API for processing in the United States.
What OpenAI receives: only the content necessary to generate feedback. Your email, display name, user ID, tokens, and device metadata are not included.
Training: OpenAI states that content submitted through its API is not used to train its models by default and may be retained briefly for abuse monitoring before deletion. SceneSync does not opt into any program that would allow training on your content. We don’t control, and can’t guarantee, third‑party retention practices, which may change.
Data Storage & Security
SceneSync uses Google Firebase (Google Cloud) for authentication, database (Firestore), cloud functions, and storage. Your data resides in Google Cloud data centers, generally in the United States.
- All network traffic is encrypted with HTTPS/TLS.
- Data is encrypted at rest with Google‑managed encryption.
- Firebase Security Rules and App Check restrict unauthorized and unauthenticated access.
Firebase Security Rules prevent other users from accessing your data. Authorized administrators (backend only) can technically access stored data, as with any cloud backend; we do so only when necessary — to provide support, investigate abuse or security concerns, or comply with law. No system is 100% secure; we recommend using device security and avoiding shared devices for sensitive content.
Data Retention & Deletion
Your data remains while your account is active — simply not using the app does not delete anything. You can export your data and permanently delete your account yourself, any time, from Privacy Settings in the app.
On deletion, your content and account are removed from active storage (generally within about 30 days), and profile data is anonymized. Google Cloud’s encrypted backups may retain data for a limited period afterward under Google’s standard policies. We retain limited consent, financial, and security‑audit records where required by law.
Third‑Party Services
- Google Firebase — authentication, database, functions, storage. Policy
- OpenAI — generates Feedback Assistant responses; receives only the text you submit. Policy
- Stripe — processes payments for subscriptions and token packs. Policy
- EmailJS — sends transactional/system emails. Policy
Your Privacy Rights
You have the right to access, correct, delete, and export your data, to restrict or object to certain processing, and to withdraw consent for non‑essential processing. You can export and delete directly in the app under Privacy Settings. For other requests, email support@scenesync.app with subject “Data Request” and your account email. We respond within 30 days for standard requests (up to 90 days for complex ones; within 24 hours for urgent security issues). We do not sell or share your personal information for behavioral advertising.
International Data Transfers
Your data may be processed in the United States. Google relies on Standard Contractual Clauses and the EU–US Data Privacy Framework to support GDPR‑compliant transfers.
Children’s Privacy
SceneSync is for adults 18 and older only. We do not knowingly collect information from anyone under 18; discovered underage accounts are deleted. Report concerns to support@scenesync.app.
Data Breach Notification
If a breach may affect your personal information, we will notify you without undue delay, and generally within 72 hours where legally required.
Changes to This Policy
We may update this policy as the app evolves or laws change. The “Last Updated” date will change, and material changes will be communicated in‑app or by email.