Privacy Policy

SceneStack ("we", "our", or "us") operates the SceneStack website and mobile application. This policy explains what personal data we collect, why we collect it, and how we use it.

By using SceneStack you agree to the collection and use of information described in this policy.

We collect the following information when you use SceneStack:

• Account data — display name, username, email address, hashed password, optional bio, and optional profile picture.
• Watch history — films you log, including date watched, rating, location (cinema / home / other), notes, and any groups you share entries with.
• Wishlist and lists — films you save or organise into custom lists.
• Group activity — groups you create or join, members you invite, and shared activity within those groups.
• Subscription data — whether your account holds an active premium subscription. Payment details are handled entirely by Stripe (web) or Apple / Google (mobile) and are never stored on our servers.
• Device push tokens — if you enable push notifications on the mobile app, we store a push token for your device to deliver group activity and invitation alerts.
• Feedback — any messages you submit through the in-app feedback form.

• To provide and operate the SceneStack service.
• To power AI features (insights, search, recommendations) — your watch history is used as context for these queries.
• To send push notifications you have opted in to.
• To manage your subscription and premium access.
• To respond to feedback and support requests.
• To detect and prevent abuse.

We do not use your data for advertising. We do not sell your data to any third party.

SceneStack uses the following third-party services:

• TMDb (The Movie Database) — movie metadata, posters, and cast information are fetched from the TMDb API. Searches you perform may be sent to TMDb.
• Anthropic (Claude) — AI features (insights, natural language search, recommendations) send relevant context from your watch history to Anthropic's API to generate responses.
• Amazon Web Services (S3) — profile pictures you upload are stored in AWS S3.
• Stripe — handles payment processing for web subscriptions. Stripe's privacy policy applies to any payment data you provide.
• RevenueCat — manages in-app purchase subscriptions on iOS and Android. RevenueCat receives your user ID and subscription state.
• Apple / Google — in-app purchases on the mobile app are processed by Apple (App Store) or Google (Play Store) under their respective terms.
• Sentry — used for error tracking. Sentry may receive anonymised crash reports and stack traces.
• Expo / EAS — the mobile app is built and distributed using Expo's infrastructure. Over-the-air updates may be delivered via Expo Updates.

Your data is retained for as long as your account is active. If you deactivate your account, your data is preserved in case you return — deactivation alone does not schedule deletion.

If you permanently delete your account, it is scheduled for deletion 30 days after your request. During that window you can cancel the deletion by reactivating your account. Once the 30 days have passed, your account is permanently closed and your data will no longer be accessible to you or other users.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your account settings.
• Request permanent deletion of your account from the app settings. Deletion is processed within 30 days of your request.
• Export your data (coming soon).

To exercise any of these rights, contact us at support@scenestack.co.