🍪 Tracking

Cookie & Tracking Policy

SceneHai is a mobile app — we don't use browser cookies. But we do use local storage and server-side tokens. Here's exactly what, why, and how to control it.

📅 Effective: July 14, 2026 📱 Mobile App — No Browser Cookies
QUICK SUMMARY

We use local device storage to keep you logged in and save your preferences. We use push tokens to send notifications. We do NOT track you across other apps or websites. We do NOT sell tracking data.

What We Use Instead of Cookies

📱

AsyncStorage

Device-local key-value storage — like cookies, but stored only on your phone. Used for session tokens and preferences. Never leaves your device.

🔔

Push Tokens

A device-specific token registered with Expo/FCM/APNs. Stored server-side to deliver push notifications to your device. Deleted when you disable notifications.

📍

Location Cache

Approximate location stored server-side for proximity scene alerts. Optional — you control it. Removed on account deletion.

📊

Analytics Events

Anonymized usage events (which features you use) to improve the app. No personal identifiers attached.

Complete Tracker Inventory

Name Purpose Storage Location Retention Opt-Out
Session Token Keeps you logged in between sessions AsyncStorage (local) Until logout or expiry Required
User Preferences Dark mode, notification settings, filter preferences AsyncStorage (local) Until account deletion Required
Push Token Delivers push notifications to your device Server (encrypted) Until notifications disabled Optional
Last Known Location Approximate location for proximity alerts Server (encrypted) Updated on app open; deleted on account deletion Optional
Analytics Events Understand feature usage; improve app Server (anonymized) 90 days rolling Optional
Error & Crash Logs Diagnose bugs; pseudonymized data only Server (pseudonymized) 90 days Required

Third-Party Services

Supabase

Database and authentication provider. Processes user data in accordance with their privacy policy. May use server-side session management. supabase.com/privacy

Expo / Firebase Cloud Messaging / APNs

Push notification infrastructure. Stores a device push token associated with your account. Governed by their respective privacy policies.

OpenStreetMap / Photon API

Venue search API. Only search query text is transmitted — no personal data. No account required, no tracking.

Google OAuth (optional sign-in)

If you sign in with Google, Google processes your authentication. Governed by Google's Privacy Policy.

Managing Your Preferences

Changes to This Policy

If we introduce new tracking mechanisms, we will update this policy and notify you in the app before the change takes effect. You will have the opportunity to opt out of any new optional tracking.

QUESTIONS?

For any questions about tracking or data, contact privacy@scenehai.com