Scena Privacy Policy
Welcome to Scena. We are committed to protecting your privacy and making sure your personal data is handled safely and responsibly. This Privacy Policy explains how we collect, use, and protect your information, and how you stay in control of it when using our services.
1. Information We Collect
We collect information to provide a better and safer service to all our users:
- Personal Identity Information: Full name, username, email address, phone number, date of birth, and the brewing role you provide when registering.
- Location Information: We request location access for the "Explore" map and for setting product locations in the Marketplace (subject to your Ghost Mode privacy setting). Location access is only active while the app is in use.
- User Content: Photos, videos, captions, and brew recipes you choose to upload. Media is stored on Cloudflare R2 (global CDN) and/or Firebase Storage.
- Camera & Microphone: Scena requests camera and microphone access only to record videos and photos for posts, stories, and the Lounge. Camera/microphone data is never stored beyond the content you choose to upload.
- Usage & Preferences: Time spent in the app, your coffee brewing preferences, and content interactions, used to tune the Feed.
- Device Token (FCM Token): We collect your device's Firebase Cloud Messaging (FCM) token to send push notifications. This token identifies a device, not a person.
- Analytics Data: Firebase Analytics collects usage data (screens visited, session length, device type, OS version) to help us improve app performance.
- Security Data (Intrusion Detection): Device model, operating system version, unique device identifier, and automatic logging of suspicious login activity to protect against hacking.
2. How We Use Information
We use your information to:
- Manage your account and give you access to Scena's features.
- Personalize the Feed so content and Marketplace recommendations match your interests.
- Connect buyers and sellers in the Marketplace via phone/WhatsApp.
- Verify your identity by sending one-time password (OTP) codes.
- Show your position or your products on the map based on the location data you provide.
- Send notifications about account activity, bug reports, or app updates.
- Send confirmation emails and recovery information when your account enters the deletion process.
- Improve system security, prevent fraud, and take action (moderation/blocking) against accounts that violate the community guidelines.
3. Artificial Intelligence Services (Scena AI)
Scena AI runs on Cloudflare Workers AI. When you use AI features (for example, brew recipe suggestions), the text you enter — and coffee bag photos if you upload them — is sent to and processed by Cloudflare's servers in accordance with Cloudflare's Privacy Policy. Cloudflare's AI models are not trained on your data.
To maintain and improve Scena AI, we keep logs of AI conversations: your messages, the conversation history sent to the AI, the AI's replies, and generated recipes. These logs are stored in Cloudflare D1 and linked only to your account ID (no name, profile photo, email, or phone number). Photos you upload to AI features are not stored.
The Scena team may review these logs to assess answer quality. Good answers may be selected as examples — without your account ID or conversation history — so Scena AI answers similar questions better. Scena AI also keeps a memory of your brewing preferences (such as favorite gear and tastes) for personalization.
AI conversation logs and AI memory are kept while your account is active and are deleted when your account is deleted. We recommend that you do not enter sensitive personal information into AI features.
4. Data Storage & Third-Party Infrastructure
Your data is stored using the following infrastructure:
- Google Firebase (Google LLC): Database (Firestore), authentication, and push notifications. Firebase servers are located in the United States and possibly other countries where Google operates. By using Scena, you consent to this cross-border data transfer, which is subject to Google's Privacy Policy.
- Cloudflare R2 (Cloudflare, Inc.): Storage for media such as post photos and videos, on Cloudflare's globally distributed infrastructure.
- Third-party OTP provider: For phone number verification via SMS.
We apply strong industry security standards, real-time monitoring, and encryption (HTTPS/TLS) to protect your data. However, no method of transmission over the internet is 100% secure.
5. Third-Party Services We Use
Scena uses the following third-party SDKs and services, each with its own privacy policy:
- Google Firebase (Auth, Firestore, Storage, Messaging, Analytics, Crashlytics)
- Google Sign-In & Sign in with Apple
- Google Maps & Geocoding API
- Cloudflare Workers AI, D1 & Durable Objects (AI features, Scena AI conversation logs & memory, and Lounge chat)
- Cloudflare R2 (via Cloudflare Workers)
- flutter_local_notifications (local device notifications)
We do not use third-party advertising SDKs (such as AdMob) and do not track your activity outside the Scena app.
6. Sharing Data with Third Parties
Scena does not sell your personal data. We only share information in the following cases:
- Between Users: Your name and phone number are visible to other users if you publish a product in the Marketplace.
- Infrastructure Providers: We use Google Firebase and Cloudflare (R2, D1, Workers AI) solely to operate the app, subject to each provider's privacy policy.
- Legal Compliance: When required by law or an official request from the government authorities of the Republic of Indonesia.
7. Data Retention & Account Deletion
- Active Data: Your data is kept while your account is active and you use Scena.
- Staged Deletion: After you request account deletion, the account enters a 30-day grace period. During this period you can restore the account by logging in again.
- Permanent Deletion: After 30 days, all your personal data — including your profile, content, recipes, and media — is automatically and permanently deleted from all our systems (Firebase, Cloudflare R2, and Cloudflare D1) and cannot be recovered.
- Recovery Email: When deletion is requested, we send a notification email with account recovery information to your registered email address.
- Legal Exceptions: Certain data may be kept longer if required by the laws of the Republic of Indonesia.
8. Your Controls and Rights
Scena gives you full control over your data and privacy, including:
- Access and Update: Change your profile, password, and brewing preferences in Settings.
- Advanced Privacy Controls: Enable "Private Account", hide yourself from the public map with "Ghost Mode", filter sensitive content, and manage your "Block List".
- Permanent Data Deletion: Request account deletion with "Permanently Delete Account" in Settings. The account enters a 30-day grace period before permanent deletion, and you can restore it during that period.
9. Children's Privacy
Scena is not intended for users under 18. We do not knowingly collect personal data from users under that age. If we find or are told that we have collected data from a user under 18, we will promptly delete that information and close the account.
If you are a parent or guardian and learn that your child is using Scena without your knowledge, please contact us at thescenaapp@gmail.com.
10. Marketplace Transactions
Scena is a social platform and an information marketplace. We do not collect or store your credit card or banking information. All financial transactions happen directly between users outside our system (Cash on Delivery or direct transfer arranged via WhatsApp).
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you in the app about significant changes. Continuing to use the app after an update means you accept the new policy.
12. Contact Us
If you have questions, complaints, or need help with this Privacy Policy, contact us via:
- Email: thescenaapp@gmail.com
- Help Center or Report a Problem in the app.