Privacy Policy

Last Updated: October 6th, 2025

Overview

SceneSync (“we,” “our,” “us”) operates the SceneSync mobile application. This Privacy Policy explains how we collect, use, protect, and handle your personal information.

By using SceneSync, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create a SceneSync account, we collect:
– Email address (for authentication and communication)
– Display name (optional)
– Account credentials (securely encrypted)

Content You Create

– Scene plans you write
– Reflections you document
– Feedback requests you submit
– Survey responses during beta testing

Usage Data

We automatically collect certain information when you use SceneSync:
– Device information (type, operating system version, unique device identifiers)
– App version and build number
– Usage statistics (features accessed, session duration, screen views)
– Error logs and crash reports (to improve app stability)
– Token usage records (types of tokens consumed, timestamps)

Analytics Events

We track anonymized usage patterns to improve SceneSync:
– Feature adoption rates
– User flow patterns
– Performance metrics
– Token consumption patterns

We do NOT collect:
– Location data
– Contacts or address book
– Photos or media (unless you explicitly upload)
– Payment card details (handled by Stripe)

How We Use Your Information

We use collected information to:

Provide Core Services

– Authenticate your account
– Store and sync your scene plans and reflections
– Generate personalized feedback for your content
– Track token balances and consumption
– Process payments through Stripe

Improve SceneSync

– Analyze usage patterns to identify needed features
– Debug technical issues and crashes
– Optimize app performance
– Test new features with beta users

Communicate With You

– Send important service notifications
– Share beta testing updates (during beta period)
– Respond to support requests
– Send tier reward notifications

Legal Compliance

– Comply with applicable laws and regulations
– Enforce our Terms of Service
– Protect against fraud or abuse

We will NEVER:

– Sell your data to third parties
– Use your scene plans or reflections for advertising
– Share your content with anyone without your permission
– Send promotional emails (beyond beta testing communications)

Data Storage and Security

Where Your Data Lives

Primary Infrastructure:
– Backend: Google Firebase (Firestore database, Authentication)
– Feedback Generation: Meta Llama 3.3 70B Instruct Turbo model served through Together AI (api.together.xyz), proxied via Firebase Functions
– Payment Processing: Stripe (handles all payment information)
– Email Communications: EmailJS (beta testing notifications only)

Geographic Location:
– Data stored on Google Cloud Platform servers (multi-region for reliability)
– Subject to Google’s data residency and security policies

Security Measures

We implement industry-standard security practices:

– All data encrypted in transit via HTTPS using TLS 1.3 (or newer)
– All data encrypted at rest (AES-256)
– Secure authentication tokens with automatic expiration
– Firebase security rules enforce user-specific access
– Only you can read your scene plans and reflections
– No SceneSync employee can access your content without explicit authorization
– Regular security audits, automatic security updates, firewall protection, and DDoS mitigation

Despite our best efforts, no method of transmission or storage is 100 % secure. We cannot guarantee absolute security.

Data Retention

Active Accounts

Your data is retained as long as your account remains active.

Deleted Accounts

When you delete your account:
– Immediate deletion: All scene plans, reflections, and personal data are permanently removed
– 30-day grace period: Backups are purged within 30 days
– Token records: Retained for accounting purposes (anonymized after 90 days)
– Analytics data: Anonymized and aggregated (no personal identifiers)

Beta Testing Data

During beta testing:
– Survey responses: Retained for product development (anonymized after 90 days)
– Feedback patterns: Aggregated and anonymized for analysis
– Tester activity: Tracked for tier reward eligibility (deleted 90 days post-beta)

Third-Party Services

SceneSync uses the following third-party services. Each has its own privacy policy governing how they handle data.

Google Firebase (Backend Infrastructure)
What they do: Authentication, database, cloud functions, hosting
Data shared: Account info, app content, usage statistics
Policy: firebase.google.com/support/privacy
Why we use them: Industry-leading security, GDPR compliance, reliable infrastructure

Together AI / Meta Llama 3.3 (Feedback Generation)
What they do: Process your scene plans and reflections to generate personalized feedback
Data shared: Only the content you explicitly request feedback on
Policies: together.ai/privacy | llama.meta.com/license | llama.meta.com/use-policy
Why we use them: Reliable, high-performance model hosting with clear privacy options
Important: Together AI states that prompts and responses are not used to train models without explicit user opt-in. Limited logs may be retained briefly for reliability and abuse prevention.

Stripe (Payment Processing)
What they do: Process subscription and token pack purchases
Data shared: Email address, payment information
Policy: stripe.com/privacy
Why we use them: PCI-DSS compliant, industry standard for secure payments
Important: We never see or store your payment card details


EmailJS (Automated Communications)
What they do: Send automated email notifications
Data shared: Email address, name
Policy: emailjs.com/legal/privacy-policy
Why we use them: Reliable email delivery for communications

Your Privacy Rights

You have the following rights regarding your personal data:

Right to Access

Request a copy of all data we hold about you.
We’ll provide your data in a structured, commonly used format (JSON or CSV).

Right to Delete

Permanently delete your account and all associated data.
Deletion is immediate and irreversible. All scene plans, reflections, and personal information will be permanently removed.

Right to Export (Data Portability)

Download your scene plans and reflections.
Available in-app: Settings → Data Export → Download your data as JSON

Right to Correct

Update inaccurate or incomplete information.
You can edit your profile, email, and display name directly in the app.

Right to Restrict Processing

Limit how we use your data.
You can opt out of analytics tracking in Settings → Privacy → Analytics

Right to Withdraw Consent

Revoke permissions at any time.
Changes take effect immediately. Note: Some features may become unavailable.

Right to Object

Object to certain data processing activities.
Contact us at privacy@scenesync.app to discuss your concerns.

Right to Lodge a Complaint

File a complaint with a data protection authority.
If you’re in the EU: Contact your local Data Protection Authority
If you’re in California: Contact the California Attorney General

How to Exercise Your Rights

To request any of the above:

Email: support@scenesync.app
Subject Line: Data Request – [Your Request Type]
Include: Your registered email address and specific request

Response Time:
– We respond to all requests within 30 days
– Complex requests may take up to 90 days (we’ll notify you of any delays)
– Identity verification required for security purposes

No Cost:
– Exercising your privacy rights is completely free
– We may charge a reasonable fee for excessive or repetitive requests

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional protections under GDPR.

Legal Basis for Processing:
– Consent: You explicitly agree to our data practices by using SceneSync
– Contract Performance: Necessary to provide the services you requested
– Legitimate Interests: Improve app functionality, prevent fraud, ensure security

Data Transfers:
– Your data may be transferred to and processed in the United States
– We rely on Google’s Standard Contractual Clauses for GDPR-compliant transfers

Data Protection Officer:
– Contact: privacy@scenesync.app
– Response within 30 days to GDPR-related inquiries

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA).

Right to Know:
– What personal information we collect
– Sources of that information
– Purposes for collecting it
– Categories of third parties we share it with

Right to Delete:
– Request deletion of personal information (with certain exceptions)

Right to Opt-Out:
– We do NOT sell personal information (you have nothing to opt out of)

Right to Non-Discrimination:
– We will not discriminate against you for exercising your CCPA rights

To Exercise California Rights:
– Email: privacy@scenesync.app
– Subject: CCPA Request
– Include: Proof of California residency

Children’s Privacy

SceneSync is intended ONLY for users 18 years of age or older.

We do not knowingly collect information from anyone under 18. If you are under 18, do not use SceneSync or provide any personal information.

If we discover a user is under 18:
1. We will immediately delete their account
2. All associated data will be permanently removed
3. We will notify the email address on file

If you believe a minor has provided information to SceneSync:
– Report immediately: privacy@scenesync.app
– Include: Any identifying information you have
– We will investigate and take appropriate action within 48 hours

Cookies and Tracking

SceneSync App (Mobile)

The SceneSync mobile app does NOT use cookies. However, we do use:
– Local device storage: For draft autosave and offline functionality
– Session tokens: For authentication (stored securely, auto-expire)
– Analytics identifiers: For usage tracking (can be disabled in Settings)

SceneSync Website

The scenesync.app website uses minimal cookies:

Essential Cookies (Cannot be disabled):
– Age verification: Remembers you confirmed 18+ (30-day expiration)
– Session management: Keeps you logged in to the website

Optional Cookies (Can be disabled):
– Analytics: Tracks page views and site usage (Google Analytics)
– Disable in browser settings or use privacy extensions

We do NOT use:
– Advertising cookies
– Social media tracking pixels
– Third-party remarketing cookies

International Data Transfers

SceneSync operates globally using cloud infrastructure. Your data may be transferred to and processed in countries other than your own.

Primary Data Locations:
– United States (Google Cloud Platform primary region)
– European Union (Firebase multi-region replication)

Safeguards for International Transfers:
– Google’s Standard Contractual Clauses (GDPR-approved)
– Firebase Privacy Shield certification
– Equivalent data protection standards across all regions

If you’re in the EU:
– Your data may be transferred to the US, but only under GDPR-compliant mechanisms
– You have the right to object to international transfers

Data Breach Notification

In the unlikely event of a data breach that affects your personal information:

We will notify you within 72 hours if:
– The breach involves sensitive data (scene plans, reflections, account credentials)
– There is a risk to your rights and freedoms
– The breach could result in identity theft or harm

Our notification will include:
– Nature of the breach
– Types of data affected
– Steps we’re taking to address it
– Recommendations for protecting yourself

You will be notified via:
– Email to your registered address
– In-app notification
– Website announcement (if widespread)

If you’re in the EU:
– We will also notify the relevant Data Protection Authority within 72 hours

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:
– Changes in our data practices
– New features or services
– Legal or regulatory requirements

When we make changes:
– “Last Updated” date will be revised at the top of this page
– Material changes will be communicated via email or in-app notification
– Continued use of SceneSync after changes indicates acceptance

Your options if you disagree:
– Stop using SceneSync
– Delete your account (Settings → Account → Delete Account)
– Contact us with concerns: privacy@scenesync.app

We will NEVER:
– Make retroactive changes to how we handle your existing data without consent
– Reduce your privacy rights without notification

Contact Us

For privacy-related questions, concerns, or requests:

Email: support@scenesync.app
Website: https://scenesync.appResponse Time:

– General inquiries: Within 3 business days
– Data requests: Within 30 days
– Urgent security concerns: Within 24 hours

SceneSync is committed to protecting your privacy and handling your data responsibly. Your trust is essential to our mission of helping you plan safer, more fulfilling scenes.

Scroll to Top