Operator and scope
The operator of the Scena application (Scena) and the playscena.com website is Marharyta Maroz. In this policy the words “we”, “us” and “our” refer to the operator. The policy applies to data processing when using the website, the application, related server functions and support.
For inquiries about personal data, email [email protected]. Apple’s and other independent services’ policies apply to their own data processing, such as payments through the App Store.
Account data and sign‑in
The app may create a guest account and allows linking access using a supported sign‑in method, including Apple, Google or email. Processed data include account identifier, technical sign‑in and session details, email address or Apple private relay address if provided by the chosen sign‑in method. Passwords and payment credentials of third‑party accounts are not required to be entered into a conversation with a character.
A guest account also has a technical identifier. Its existence enables linking stories and purchases to a single user and does not mean that all linked actions are automatically anonymized. The app may store language settings, theme, preferences and progress.
Messages, choices and story memory
To continue stories we process your messages and selected choices, character replies, branches and chapters, pinned memory facts, brief summaries, game events and progress. Preferences may include chosen characters, story paths, name and form of address. These details are used so the story reflects previous events and your decisions.
Some messages and choices may indirectly reveal personal circumstances and preferences. Write only what you want to be used in the story. Do not add document numbers, bank details, passwords, exact addresses or information about other people without a necessary basis.
Photos, voice messages and device access
When you explicitly choose and send a photo or voice message, the app processes the selected file, its type, size, duration and metadata associated with the message. Materials may be stored in private server storage and in a local cache. Camera, microphone and media library are used within the provided system permissions.
In implemented scenarios an image description and voice transcription are prepared on the device, and the text model receives the textual representation and context. This differs from a separate function for creating a portrait from a selfie. System recognition and permission functions are governed by iOS settings. Permissions can be changed in iPhone settings, and the corresponding feature may become unavailable.
AI‑generated replies
For a character’s reply the text prompt and the required story context are transmitted to the server AI provider xAI. Context may include previous lines, a brief event summary, selected options, textual description of attachments and memory facts. The volume depends on the chosen feature.
Characters are fictional and replies are generated automatically. The system composes an artistic continuation and may make mistakes. Story creation is not a professional assessment or a legally binding decision about you. Consents required by applicable law for transfers to third‑party AI must be provided separately from agreeing to the general terms.
Voiceover and synthetic voices
When voiceover is requested the reply text is sent to ElevenLabs to create audio in the character’s voice. This text may contain a name or other details that appeared in the line from the story. The finished audio may be cached and associated with the corresponding message.
Ordinary listening to a character does not require recording your voice or creating its clone. A voice message you send is a separate type of attachment. Retention of prompts and audio at ElevenLabs depends on the applicable contract, product and account settings. We do not assert an unverified zero‑retention mode for that service.
Selfies, portraits and shared scenes
If you choose to create a scene including yourself, the submitted selfie is sent to xAI to check permissibility and create a stylized portrait. The check may assess presence of a face, number of people, visible age cues and suitability of the image for the chosen feature. Submit an image of an adult person whom you are entitled to use.
The original selfie is not stored by our server implementation as a permanent file. The created portrait is used for subsequent scenes and may be stored in private server storage together with accepted joint clips. Therefore the stored portrait and videos may exist both on the device and on the server. Storage by the AI provider is a separate processing. This feature serves creation of an artistic image, not identification of a person by face.
Purchases, subscriptions and in‑game balances
In‑app purchases are processed by Apple through the App Store. The app and server receive data necessary to verify and restore entitlements, including transaction and product identifiers, dates, subscription status, history of spark accrual or spending and purchase verification result. Full bank card details are not transmitted to the operator through this process.
Superwall is used to display offers and related purchase events. To reconcile entitlements and language it may receive account identifier, subscription status, language and events of interaction with the offer screen. Apple processes payment and account data under its own rules.
Technical data, security and diagnostics
To operate and protect the service we may process IP address, request time, app and iOS version, device type, language, session identifiers, app integrity check data, error codes and rate limit information. These details help ensure availability, account for generation costs, detect abuse and troubleshoot failures.
When enabled, Amplitude receives usage events and associated identifiers, and Sentry receives diagnostic error details. In the client Sentry configuration automatic screenshots, view hierarchy and sending of standard personal data are disabled. This does not exclude the presence of technical identifiers or data explicitly included in a request. The actual set depends on app version and configuration.
Purposes and legal bases
Data are used to provide requested stories and media features, save progress, sign in, fulfill purchases, support, security, diagnostics and comply with legal duties.
Where legal bases apply, processing necessary for the requested service relies on performance of the contract or actions at your request. Consent is used for processing that requires a separate choice. Legitimate interest may apply to protect the service and necessary diagnostics, balancing your rights. Legal obligations may require retaining certain records or responding to an authority. One basis does not automatically replace another, and acceptance of terms does not itself constitute universal consent to all processing.
Who can access the data
Data may be accessed by server infrastructure and storage providers, xAI for requested AI functions, ElevenLabs for voiceover, Apple for sign‑in and purchases, Google if sign‑in via Google is chosen, Superwall for offers, and, when enabled, Amplitude and Sentry. The server side uses Supabase technologies and private storage. Actual hosting is determined by the deployed configuration.
Limited access may be granted to the operator and engaged specialists when necessary for support, security or fulfilling obligations. Information may be disclosed on lawful request, to protect rights and investigate abuse or in connection with a transfer of the service subject to applicable requirements. We do not publish your private correspondences as public materials in the normal course of story operations.
The playscena.com website and support
Site pages and ready media are delivered from hosting. For delivery and protection of the site the hosting may receive technical request details, including the IP address and time.
The published site may run its own analytics via Cloudflare D1. It aggregates views, chosen hero, opened chapters of the book, indices of selected reply options, start and end of a call or trailer, scene visibility time, and download button presses. Only daily totals are stored by event, language, screen type, hero, and section. The analytics do not record the text of correspondence, user replies, email, full URL, IP address, visitor identifier, or device fingerprint. Separate hosting security logs may contain technical data.
No cookies or persistent identifier are created for analytics. Do Not Track signals and Global Privacy Control disable collection. You can also disable analytics with the button at the bottom of the site; the browser only stores this preference. Daily totals are deleted after 90 days. The purpose of processing is to assess interest in scenes and improve the site; the legal basis is determined by applicable requirements, in particular the legitimate interest in limited analytics where permitted by law.
The demo correspondence uses prepared stories in the browser. Ready and custom replies are not sent to an AI provider. When contacting support the reply email address, subject, text, language, and technical details are processed to protect the form. The request is forwarded to the operator via email infrastructure, including Cloudflare Email Service if connected. Clicking a mail link also triggers the mail service you selected.
International processing
Infrastructure, AI, voice, analytics and support providers may process data in countries different from your country of residence. The operator’s location does not automatically determine the location of all servers and contractors.
If applicable law requires special safeguards for international transfers, an adequacy decision, standard contractual clauses, other permitted safeguards or an applicable exception are used. Information about the actual mechanism and available guarantees can be requested from the operator. This policy does not assert that all data are stored exclusively in the EU or in any single country.
Retention periods
Account, stories, memory and associated media are retained while they are needed to provide the service and chosen features, or until applicable deletion. Local caches may exist until they are cleared, the app is removed or replaced by the system. Technical logs, support correspondence and security records are retained as necessary to investigate an inquiry, protect the service and meet legal obligations.
When determining retention periods we consider purpose, volume and sensitivity of data, need for recovery or dispute, statutory retention times, backup cycles and provider terms. Isolated backups and logs may be deleted later than active records within their retention cycle. Exact applicable periods or criteria for a specific data type can be requested from the operator. This policy does not set a fixed retention period not confirmed by settings and contracts.
Account and content deletion
Account deletion is available in Scena settings. The implemented process removes its records and server files, including stories, memory and stored media, and terminates access of the previous session. For some individual materials and stories interface actions for deletion or restart are also available.
To protect against repeated purchase restoration limited redemption records may be retained without linking to the deleted game account. Information required by law or necessary for an ongoing dispute may be retained to the extent permitted. Deleting an account does not cancel an Apple subscription. Copies held by an independent provider, in your mail service, on another device or in a backup may have a separate deletion procedure.
Your rights and control
Depending on applicable law you may request access to your data and a copy, rectification, deletion, restriction of processing, portability, information about recipients and international transfers, object to processing based on legitimate interest and withdraw consent. Withdrawal applies prospectively and does not affect the lawfulness of prior processing.
To make a request use the support contact and describe which account and data it concerns. Proportionate verification of ownership may be required to protect the account, without requesting excessive information. A response will be provided within the timeframe required by applicable law. Under GDPR the usual period is one month with lawful possibilities for extension and notification. You may also contact a competent data protection authority, including in your country of habitual residence, if provided by law.
Age and data about other people
Scena is intended for adult users aged 18 and over. It is not intended to collect data of children. If you believe a minor has submitted data or created an account, contact the operator for verification and necessary actions.
Do not send other people’s personal, intimate, identifying or protected information and images without the right to use them. For a personal artistic portrait use your own image. If you notify the operator about processing of your data by another user, the operator will consider the request taking into account your rights and the available information.
Protection and access
Implemented integrations use secure connections, authorized access and private server files. Access to storage and functions is limited by authorization mechanisms and account rights. At the same time, transmitting content to the server or an AI provider means the respective recipient processes it for the chosen feature.
No service can guarantee absolute security. Protect your device and sign‑in means, and do not publish links and materials that must remain private. If you suspect unauthorized access, contact support and secure the associated Apple, Google or email account.
Policy changes
The edition date is stated at the top of the document. The policy may be updated when functions, providers or applicable requirements change. Significant changes will be communicated in a manner appropriate to their nature and the law. If new processing requires separate consent, publication of the changed text does not substitute for that consent.
For questions, complaints and data requests use the support page on playscena.com. The operator is Marharyta Maroz.
Marharyta Maroz · [email protected]