Privacy Policy

1. Data we collect

When you create an account we collect:

• Email address — for sign-in, account recovery, and important service notices.
• Date of birth — to confirm you meet our 13+ age requirement. We keep the date itself; we do not display it on your profile.
• Username, display name, and city — these appear on your public profile so friends can find you and see what's near you.
• Acceptance record — the version of the Terms and Privacy Policy you agreed to, with a timestamp.

As you use SceneFeed we also collect:

• Content you post (show flyers, comments, photos, RSVPs, hypes).
• Activity within the app (which shows you view, who you follow, friendship requests).
• Device information (push notification tokens, app version) and approximate IP address from request logs.
• Precise location only if you grant permission, and only to detect your city or filter shows nearby. We never store your precise coordinates.

2. How we use it

• To operate and improve the Service (showing you relevant shows, friends, and bands).
• To enforce our Terms — including detecting and responding to abuse, repeat copyright infringement, and underage signups.
• To communicate with you about account changes, safety issues, and material policy updates.
• To comply with legal obligations, including responding to lawful requests from authorities.

We do not sell your personal information. We do not show third-party advertising in SceneFeed.

3. Children under 13

SceneFeed is not directed to children under 13 and we do not knowingly collect personal information from anyone under 13. If a user reports themselves to be under 13 at signup, we immediately delete the associated account and personal information.

To prevent repeated underage signup attempts from the same email address, we retain a one-way hashed form of that email in a blocklist. The hash is computed with a server-side secret and cannot be reversed to the original email. It contains no other personal information.

If you believe a child under 13 has provided us with personal information, please contact us at privacy@scenefeed.app and we will remove it.

4. Who we share data with

• Supabase hosts our database and authentication. Your account data is stored there under our agreement with them.
• Apple if you choose Sign in with Apple. Apple shares an identifier (and, on the first sign-in only, your name) with us.
• Apple Push Notification Service / Firebase Cloud Messaging for delivering push notifications, if you enable them.
• Other users, to the extent you post content publicly or visible to friends.
• Law enforcement when we receive a valid legal request and are required to comply.

5. Your choices

• You can edit your profile (display name, city, avatar, bio) at any time from inside the app.
• You can delete your account at any time. This removes your personal information from active systems, subject to limited retention described in our Terms.
• You can disable push notifications and location access from your device's settings.
• You can block or report other users from inside the app.

6. California residents

If you are a California resident you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what we collect, the right to delete it, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising.

7. Data retention

We keep your account data for as long as your account is active. When you delete your account, we remove your personal information from active systems within 30 days. Some records may persist longer in backups, where they expire on the backup's normal retention cycle, and in our hashed COPPA blocklist as described above.

8. Security

We use industry-standard practices to protect your data, including encryption in transit, password-less authentication, row-level security in our database, and least-privilege access for our operators. No system is perfectly secure; you can help by using a strong, unique email password and reporting suspicious activity to security@scenefeed.app.

9. Changes

We may update this policy. When we make material changes we will bump the version number above and, where appropriate, prompt you to re-consent.

10. Contact