Scene

Privacy Policy

Last updated: May 31, 2026

Scene (https://joinscene.app) is operated by Scene Inc. This policy describes how we collect, use, and protect your personal data when you use our website, mobile app, and related services (the “Service”).

We are subject to EU GDPR and UK GDPR. References to ‘GDPR’ in this policy apply to both regimes unless otherwise stated.

1. Who We Are

Scene Inc. is the data controller for personal data processed through the Service. You can contact us at support@joinscene.app for any privacy-related queries or to exercise your rights.

2. Information We Collect

  • Account information — email address, phone number, and password (hashed).
  • Profile information — display name, date of birth, photos, gender, sexuality, relationship style, preferences, and other fields you choose to complete.
  • Messages and content — messages, photos, audio, and other content you send through the Service.
  • Location data — approximate location to calculate proximity for discovery (with your permission). We never share your precise coordinates with other users.
  • Device and usage data — device type, OS version, app version, crash reports, and feature usage needed to operate and improve the Service.
  • Verification data — processed by Stripe Identity on our behalf (see Section 5).

3. Special Category Data

Information about your sexuality, sexual preferences, and related profile fields is “special category” personal data under GDPR Article 9. We process this data only on the basis of your explicit consent, which you give when you create your profile and agree to these terms. You may withdraw consent at any time by deleting your account.

4. Lawful Basis for Processing

  • Explicit consent (Article 6(1)(a) and Article 9(2)(a)) — processing your profile data, special category data, and location.
  • Contract (Article 6(1)(b)) — processing necessary to provide the Service, including account management, message delivery, and verification.
  • Legitimate interests (Article 6(1)(f)) — detecting abuse, preventing fraud, improving the Service, and keeping users safe, where these interests are not overridden by your rights.
  • Legal obligation (Article 6(1)(c)) — complying with applicable laws, court orders, and law enforcement requests.

5. Identity Verification

Verification is required to use the Service. It is carried out by Stripe Identity, acting as our data processor. Stripe processes your government-issued ID and selfie directly. We receive only a pass/fail result and your date of birth for age confirmation. We do not store your ID documents. Stripe's privacy practices are described at stripe.com/privacy.

6. How We Use Your Data

  • To create and manage your account.
  • To show your profile in discovery and enable messaging.
  • To verify your identity and age.
  • To detect abuse, enforce our policies, and keep users safe.
  • To send OTP codes, account notices, and important service updates.
  • To analyse usage and improve the Service.
  • To comply with legal obligations.

We do not sell your personal data. We do not use it for advertising.

7. International Data Transfers

Some of our service providers are based outside the UK and EEA. Where we transfer your data internationally, we ensure appropriate safeguards are in place:

  • Stripe (USA) — identity verification and payments. Covered by Standard Contractual Clauses (SCCs).
  • Cloudflare (USA) — photo and media storage (R2). Covered by SCCs.
  • Twilio (USA) — SMS delivery. Covered by SCCs.
  • Resend (USA) — email delivery. Covered by SCCs.
  • Expo (USA) — push notifications. Covered by SCCs.

You may request a copy of the relevant safeguards by contacting us at support@joinscene.app.

8. Data Retention

  • Active accounts — retained for as long as your account is open.
  • Deleted accounts — profile and personal data deleted within 30 days, except where retention is required by law.
  • Messages — may remain visible to recipients after you delete your account. Message records deleted within 30 days of account deletion.
  • Verification records — retained for up to 12 months after account deletion for legal compliance.
  • Backup copies — may persist for up to 90 days in encrypted backups before being overwritten.

9. Your Rights

Under GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data (“right to be forgotten”), subject to legal retention requirements.
  • Restriction — ask us to pause processing of your data in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — withdraw consent for special category data at any time by deleting your account.

To exercise any of these rights, email support@joinscene.app. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority — the CPDP (cpdp.bg) if you are in the EU, or the ICO (ico.org.uk) if you are in the UK.

10. Photos and Media

Photos and media you upload are stored on Cloudflare R2. Profile photos are visible according to your privacy settings. Private album photos are only visible to users you explicitly share them with. Deleted photos are removed from our servers within 30 days.

11. Security

We use industry-standard measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay. If you suspect your account has been compromised, contact us immediately at support@joinscene.app.

12. Children

The Service is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover a user is under 18, we immediately terminate their account and delete their data.

13. Cookies and Tracking

Our website (https://joinscene.app) may use cookies to maintain sessions. The mobile app does not use cookies. We do not use third-party advertising trackers or sell data to advertisers.

14. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will notify you via email or in-app notice before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

15. Contact and Supervisory Authority

Data controller: Scene — support@joinscene.app

EU lead supervisory authority: Commission for Personal Data Protection (CPDP) — cpdp.bg

UK supervisory authority: Information Commissioner's Office (ICO) — ico.org.uk

← Back to home