Privacy Policy

Version: 2.0 · Effective: 2026-10-15

YourScene (website and mobile app) is operated by Section LLC ("Section," "we," "us," or "our").

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, city signup, and mobile application (together, the "Services").

Summary

• We collect what you give us (account, profile, content, messages), what the app records as you use it (activity, diagnostics), and location only while the app is in use and only if you allow it.
• We do not sell personal information, do not show third-party ads, and do not track you across other companies' apps or websites. YourScene does not use the advertising identifier (IDFA) or App Tracking Transparency.
• Profiles default to limited visibility. Content you make public (public profile, public events, Pulse posts, comments, curated lists) can be seen by other people, including on our website.
• You can delete your account in the app. Section 9 explains exactly what that removes and what it does not.

1. Information we collect

Account and sign-in

• Email address — to create your account, sign you in (magic link or password), and contact you about your account.
• Sign in with Apple / Google — if you choose these, we receive the name and email (or Apple private relay email) the provider shares, and a provider user ID. For Apple accounts we keep a revocation token so we can revoke Apple sign-in when you delete your account.
• Face ID / Touch ID — optional app unlock. Biometric matching happens on your device; we never receive biometric data.

Profile

Display name, username, profile photo, cover image, bio, pronouns, links you add (for example an Instagram handle or website), home and selected city, languages, teams, interests, vibes and other "Fan Passport" or "Scene Passport" fields you choose to fill in, and your privacy settings.

Location

• With your permission, the app uses your device location only while the app is in use. It never collects location in the background.
• We use it to show nearby events, venues, maps, Globe and Pulse activity, Travel Mode results, and to verify that you are at a venue when you check in.
• Check-ins: your coordinates are compared with the venue's location to confirm the check-in. We store the check-in, not your coordinates.
• Maps: map display, search and geocoding are provided by Mapbox, which receives the map area and, when you use location features, your coordinates.
• If you decline location access you can pick a city manually or use Travel Mode. You can change location permission at any time in your device settings.

Activity in the app

RSVPs ("Going"), saved events, check-ins and attendance history, follows of people, venues, organizers and curators, likes, reposts, comments and reactions, event invitations you send or receive, plans, searches and recommendation feedback (for example dismissing a suggestion), and how long the app is open in the foreground.

Content you create

• Events you create or co-host, including title, description, time, place, images and invitation settings.
• Pulse posts, clips, stories and live broadcasts — photos, videos, audio and captions you upload or stream.
• Curated lists, if you are a curator, and organizer or venue pages you claim or manage.
• Reports you submit about content or people.

Automated screening of uploads

Photos and videos you post to public surfaces (Pulse clips, scenes, highlights, comments and event covers) are held privately until an automated check screens them for harmful content such as sexual or child-exploitation imagery. Images are sent to NVIDIA's content-safety service for this check; videos and borderline results are reviewed by our team. Media in direct messages is not screened this way.

Messages

Direct messages and their attachments (text, photos, voice notes and videos) are stored on our servers so they can be delivered and synced across your devices. Messages are encrypted in transit but are not end-to-end encrypted. We access them only to operate the service, to investigate reports, or where required by law.

Live video and audio

When you go live, your camera and microphone stream is transmitted through our real-time video provider (LiveKit) to viewers. We do not record live broadcasts.

Notifications

We store your in-app notifications and notification preferences. If push notifications are enabled in your version of the app and you allow them, we store a device push token so we can deliver them through Apple or Google push services.

Diagnostics and usage analytics

• Error reports: when something fails, the app sends an error report to our own database, including the error, the screen, your device's operating system and version, the app version, and your user ID if you are signed in. We do not use a third-party crash-reporting service.
• App sessions: app version, platform, an app installation ID and the length of foreground sessions.
• Product analytics: where enabled, we use PostHog to measure which features are used. Events are associated with an anonymous ID; we do not send your name, email, precise location or message content to PostHog.
• Server logs: our hosting and database providers record IP address, user agent, timestamps and request metadata.

Website and city signup

When you join a city signup on the website we collect your email, name, launch city, interests, role (fan, venue, promoter and similar), an optional note, campaign attribution (UTM parameters, referrer, landing page) and your browser user agent. If you open a shared link on the website, the page may ask you to open the app or show public content.

Information from public sources and partners

Event listings and venue, organizer and artist information come from organizers, venues, partners and public sources such as official calendars and ticketing sites. This can include names of organizers, performers and venue contacts that they have published.

2. How we use information

• Provide the Services: accounts, profiles, events, maps, Globe, Pulse, messaging, live broadcasts, notifications and invitations
• Personalize discovery for your city, interests and travel
• Verify check-ins and show attendance and social signals according to your settings
• Keep the Services safe: screen public uploads, review reports, enforce our Terms and Community Guidelines, prevent abuse and fraud
• Diagnose errors and improve features
• Send account and service emails (for example sign-in links, deletion confirmations) and, where permitted, product updates you can opt out of
• Comply with law

3. Legal bases (EEA/UK users)

Where applicable, we process data to perform our contract with you, on our legitimate interests (security, safety, analytics, product improvement), with your consent (device location, camera, microphone, photos, push notifications, marketing email), and to meet legal obligations.

4. What other people can see

• Profile visibility: your profile settings control who can see your name, photo and city. Profiles default to limited visibility; only profiles set to public are shown on our website, where search engines may index them.
• Public content: public events, Pulse posts and clips, comments, live broadcasts, curated lists and organizer or venue pages are visible to other users and may appear on our website and in shared links.
• Activity signals: depending on your privacy settings, people may see that you are going to or checked in at an event.
• Events you create are visible according to the visibility you choose. Private events are visible only to hosts and invited guests.
• Blocking and muting: you can block or mute people from their profile. People you block cannot start a conversation with you or send you messages. Manage blocked users in Privacy Settings.

5. How we share information

We do not sell or rent personal information and do not share it for cross-context behavioral advertising. We share it only with:

• Service providers (processors) that run the Services for us:
• Supabase — database, authentication, file storage, server functions
• Mapbox — maps, search and geocoding
• LiveKit — real-time video and audio for live broadcasts
• NVIDIA — automated safety screening of uploaded images
• PostHog — product analytics (where enabled)
• Resend and our email delivery provider — transactional and service email
• Netlify — website hosting
• Apple and Google — Sign in with Apple, Google Sign-In, and push notification delivery
• Slack — internal team alerts about website signups and operations
• Expo — app updates and build services
• Other users, as described in Section 4
• Ticketing and external sites — when you tap a ticket or source link, you leave YourScene and that site's own privacy policy applies
• Professional advisors under confidentiality
• Authorities when required by law, or to protect someone's safety, including reports to the National Center for Missing & Exploited Children
• Business transfers (merger, acquisition or asset sale), with notice where required

6. International processing

Our servers and primary providers are in the United States. If you use YourScene from another country, including while traveling, your information is transferred to and processed in the United States and in other countries where our providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

• Account, profile and activity data: for as long as your account exists, then deleted or anonymized as described in Section 9.
• Messages and uploaded content: until you delete them or delete your account, subject to Section 9.
• Error reports and app-session records: tied to your account until account deletion.
• City signups: until you ask us to remove them.
• Server and provider logs: according to our providers' retention schedules.
• Backups: our database provider keeps backups for a limited period; deleted data can remain in backups until they expire.
• We may keep records longer where the law requires it or to resolve disputes, prevent fraud or enforce our Terms.

8. Your choices and rights

• Privacy settings: Profile → Settings → Legal & Privacy → Privacy Settings (profile visibility, activity signals, blocked users)
• Device permissions: location, camera, microphone, photos and notifications can be changed in your device settings at any time
• Edit or delete content you posted from the app
• Delete your account: Profile → Settings → Account → Delete Account, or our Data Deletion page
• Requests: email privacy@yourscene.app to access, correct, export or delete your data, or to object to or restrict processing. We may need to verify your identity.

California residents have rights under the CCPA/CPRA to know, delete and correct personal information and to not be discriminated against for exercising them. We do not sell or share personal information as those terms are defined. EEA/UK users may also complain to their data protection authority.

9. Account deletion

When you request deletion in the app, your request is queued and processed automatically, usually within a few hours; we aim to complete every request within 30 days. We:

• Replace your profile name and username with "Deleted User" and remove your photo, bio, links, cities and contact hashes
• Delete your RSVPs, saves, check-ins, attendance, follows, likes, comments, reactions, reposts, invitations, notifications, notification preferences and devices, messages you sent, Pulse posts and clips, preferences, error reports and app-session records
• Revoke Sign in with Apple (if you used it) and delete your sign-in account so it can no longer be used
• Email you a confirmation

What is not removed automatically:

• Events you created stay listed without your name, so guests and co-hosts keep them. Ask us at privacy@yourscene.app if you want them removed.
• Organizer, venue and curator pages you manage, and curated lists published under them, are reviewed manually because other people may manage them too.
• Uploaded files (photos, videos and audio) are removed from storage in a separate cleanup step that is currently run manually and may take up to 30 days.
• Messages other people sent you remain in their conversations.
• Backups expire on our provider's schedule.

10. Children

YourScene is not directed to children under 13, and you must meet the minimum age in our Terms of Use to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact privacy@yourscene.app and we will delete it. See also our Child Safety Standards.

11. Security

We use encryption in transit, access controls, row-level security in our database and restricted administrative access. No method of transmission or storage is completely secure.

12. Changes

When we change this policy we publish a new version with a new version number and effective date. For material changes we will give additional notice, for example in the app or by email.

13. Contact

Section LLC privacy@yourscene.app