Privacy Policy

A. Account Information • Full name and display name • Email address (for registration and account recovery) • Profile photo / avatar • Gender (used for safety filtering and gender-restricted scenes) • Age (verified at sign-up — you must be 18+) • Bio, vibe tags, social battery level, dietary preferences, languages spoken • Prompt questions and answers (icebreaker content) B. Location Information • Your city name (stored in your profile — e.g., "Bangalore") • Precise GPS coordinates collected at runtime when you create or join a scene (NOT stored permanently) • Last-known approximate location (for proximity alerts — optional, stored only when you enable this feature) C. Content You Create • Scenes you post (title, venue, time, description, category) • Messages in Scene Chat and Direct Messages • Join requests and vibe answers • Reliability score events D. Social & Friendship Data • Your Inner Circle connections • Friend requests sent and received • Block and report actions E. Device & Technical Data • Push notification token (Expo / FCM / APNs) • Device OS and version • App version • Error/crash logs • Anonymized analytics F. Third-Party Sign-In • Google OAuth: name, email, profile picture (not your password)

We use your data to power the platform and keep it safe — nothing more.

What we collect at runtime (not stored permanently): • Precise GPS when you create a scene or search nearby • Used only to calculate distance and show your scene to the right people What is stored in your profile: • City name only (e.g., "Bangalore") — text, no coordinates Proximity alerts (optional feature): • If you enable this, an approximate location is stored server-side • Updated on each app open • Removed when you disable the feature or delete your account What other users see: • Only your city name and the approximate distance to a scene's venue • Never your precise location or home/work address You can revoke location permission anytime via device Settings → SceneHai → Location.

A. With Other Users (by design of the platform) Your name, profile photo, bio, vibe tags, and Reliability Score are visible to other users. Messages are visible only to recipients. B. With Service Providers (processors acting on our behalf) • Supabase — database, authentication, real-time messaging • Expo / Firebase / APNs — push notification delivery • OpenStreetMap / Photon — venue search (no personal data transmitted) • Anonymized analytics and error tracking providers C. For Legal Compliance • When required by Indian law or court order • To protect user safety • To enforce our Terms of Service D. Business Transfers In a merger or acquisition, user data may transfer. We will notify you in advance. We do NOT sell, rent, or trade your personal data. Ever.

• All data in transit encrypted via TLS/HTTPS
• Row Level Security (RLS) on all database tables — users only access their own data
• Industry-standard JWT authentication via Supabase Auth
• API credentials in environment variables — never hardcoded
• Production access restricted to authorized personnel only
• Regular security audits and code reviews

When we make material changes to this policy: • We will notify you via push notification and in-app banner • We will update the Effective Date at the top • If changes significantly affect your rights, we will require re-acknowledgement Continued use after changes take effect = acceptance of the updated policy.