Privacy Policy

01Who we are

Scenetic is operated by [Company legal name], [Company address] (“we”, “us”). We are the controller of the personal data described here. This policy explains what we collect when you use the Scenetic website, web app and iPhone and Android apps, why, how long we keep it and the choices you have. Questions: see Contact below.

02What we collect

We collect only what Scenetic needs to work:

• Account data: your email address, display name and sign-in methods (email and password, Google, Apple). Passwords are stored only as a salted hash. Google may also give us a link to your profile photo; Apple may give us a private relay address instead of your email. When you sign in with Apple, we keep an encrypted token from Apple so we can revoke the link when you delete your account.
• Your content: productions, sets, shots, objects, marks, notes and settings you create, so they sync across your devices. This can include other people’s names if you add them (see “Other people in your plans”).
• Subscription data: your plan, its status and renewal dates, the identifiers of your purchases from Stripe, the App Store or Google Play, and a random account token we pass to the App Store or Google Play so a purchase can be linked to your account. Web payments are handled by Stripe; we never receive your card number.
• Session and security data: for each signed-in session, the IP address and browser or device it was created from (you can see and end sessions in Settings → Account); hashed email and IP addresses in short-lived rate-limit counters; and sign-in codes, stored only as hashes.
• App integrity checks: when you create an account or ask for an email code in the iPhone or Android app, the app asks Apple App Attest or Google Play Integrity to confirm the request comes from a genuine copy of Scenetic. We receive Apple’s or Google’s verdict (for example, whether the app is genuine and was installed from Google Play) and, on iPhone, a public key that App Attest creates for that installation of the app. We do not receive advertising identifiers or hardware identifiers.
• Website security checks: on the web, account creation and email-code requests are checked by Cloudflare Turnstile, which looks at technical signals from your browser to tell people from automated traffic.
• Technical logs: when your device talks to our servers, our hosting provider records request details such as the time, the address requested, the response, errors, your IP address and the app version. We use them to keep Scenetic running and to fix problems.
• Messages you send us, such as support emails.

03What we do not do

We do not sell your personal data or share it for cross-context behavioural advertising. We show no ads and use no analytics, advertising or tracking tools, in the apps or on the web, and we do not track you across other companies’ apps or websites. We do not use your productions to train AI models. We do not send marketing email.

04Why we use it

Where the law requires a legal basis (for example in the EU and UK), it is given after each purpose:

• To provide your account, store and sync your work, and unlock the plan you pay for — performance of our contract with you.
• To send the emails Scenetic needs: sign-up and sign-in codes, password resets and security notices, such as a message to your old address when your email changes — our contract with you and our legitimate interest in keeping accounts secure. Receipts for web purchases come from Stripe; for App Store and Google Play purchases they come from Apple or Google.
• To keep Scenetic secure and prevent abuse with rate limits, Turnstile and app integrity checks — our legitimate interest in protecting Scenetic and its users.
• To fix problems and answer support requests — our contract with you and our legitimate interest in running a reliable service.
• To keep records the law requires, such as tax and accounting records — legal obligation.

05Automated checks

We make no decisions about you based solely on automated processing that have legal or similarly significant effects. If an automated security check fails (for example, an app integrity check), Scenetic may send fewer emails to that request’s source for a while. Contact us if this stops you from signing in.

06Other people in your plans

If you add other people’s details to a plan — for example cast or crew names in notes — you are responsible for having the right to do so. We process them only to provide Scenetic to you. Your display name appears on crew packets you export (“Prepared by”).

07Service providers

We use these providers to run Scenetic and share with them only what they need:

• Cloudflare — hosting (Scenetic runs on Cloudflare’s network in data centres around the world), request logs and Turnstile.
• Neon — our database.
• Amazon Web Services (Amazon Simple Email Service) — sending our emails.
• Stripe — web checkout, subscriptions and the customer portal.
• Apple — Sign in with Apple, App Store purchases and App Attest.
• Google — Google sign-in, Google Play purchases and Play Integrity.

08How providers handle your data

Cloudflare, Neon and Amazon Web Services process data on our behalf under data processing terms. Stripe, Apple and Google also use the data they receive for their own purposes, such as fraud prevention and their own legal obligations, under their own privacy policies. We may also disclose data when the law requires it, to protect someone’s safety or our rights, or to a company that takes over Scenetic — in that case we will tell you first.

09Cookies and storage on your device

The website and web app use only strictly necessary cookies: the session cookies that keep you signed in, and short-lived security cookies while you sign in with Google or Apple. We use no advertising or analytics cookies.

The web app keeps a copy of your productions and unsynced changes in your browser’s storage (IndexedDB) so it works offline, remembers the account last signed in on that browser (its id, email address and name) so it can open offline, and stores small preferences such as your theme in local storage. The iPhone and Android apps keep a copy of your productions on the device and your sign-in token in the device’s secure storage. When you sign out you can remove your data from that device; deleting your account removes it from the device you delete it on.

10How long we keep it

We keep data only as long as we need it:

• Account data, content and settings: while your account exists. An account whose email address is never confirmed is deleted 7 days after sign-up.
• Items you delete go to Trash and are removed for good after 30 days by an automatic daily cleanup (“Delete forever” removes them sooner). Only an empty placeholder with the item’s id remains, so your devices stay in step.
• Signed-in sessions: until you sign out, end the session in Settings, or 30 days after it was last used. Expired session records, with their IP address and device, are deleted within 2 days.
• Sign-in codes expire after 10 minutes and are deleted within 2 days. Rate-limit counters are deleted within 2 days. Records of payment and store notifications are deleted after 90 days.
• App Attest keys: while that installation of the app uses them; keys unused for 90 days are deleted. Integrity verdicts are used for the request they came with and are not stored in our database; when a check fails, a summary of the verdict (such as whether the app is genuine and the device’s integrity labels, without your name or email) can appear in the request logs described below.
• Request logs at our hosting provider: deleted automatically within 7 days.
• Our database provider’s recovery history: overwritten within 7 days, so deleted data can remain there for up to 7 days.
• Support emails: as long as we need them to help you and to keep a record of what we agreed.
• When you delete your account, we delete your data as described on the account deletion page. Subscription records are then kept without your name, email or any link to your account, for as long as we need them to handle store notifications and for tax and accounting.

11Your rights

You can see and export your data yourself (Settings → Sync & backup → Export my account data, and Download all productions), correct your name, email and password in Settings → Account, and delete your account at any time. Ask us for a copy of anything else we hold about you.

Depending on where you live, you may also have the right to object to or restrict our use of your data, to data portability, and to complain to your data protection authority. Residents of US states with privacy laws (such as California) have the right to know, correct and delete their personal information; we do not sell or share it for cross-context behavioural advertising, and we will not treat you differently for using your rights.

Contact us to use any of these rights. We reply within one month and may ask you to confirm the request from your account’s email address.

12Security

All connections to Scenetic use HTTPS. Passwords are hashed with bcrypt and a secret key, sign-in codes are stored only as hashes, and tokens from Apple are encrypted. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

13International transfers

Our providers process data in the United States and other countries where they operate. When we transfer personal data from the EU, EEA, UK or Switzerland to a country without an adequacy decision, we rely on the provider’s certification under the EU–US Data Privacy Framework (and its UK and Swiss extensions) or on standard contractual clauses in its data processing terms.

14Children

Scenetic is not directed to children. You must be at least 13, or older where your country sets a higher age for consenting to the use of your data (up to 16 in some EU countries), to create an account. We do not knowingly collect data from children below these ages; if we learn that we have, we delete the account.

15Changes

We will post changes here and update the effective date. If a change is significant, we will tell you in the app or by email before it applies.