Sceni Privacy Policy

Who we are and how to contact us

Sceni is provided by STARWAVE AI INC. (“Sceni,” “we,” “us” or “our”). This Privacy Policy covers our iOS and Android apps, website, account and backend services, AI creative features, purchases, customer support and related operations.

For privacy questions or rights requests, contact [email protected]. This is also our contact for data and account deletion.

Information we process

Account and authentication: a random installation identifier generated by the app, a server-assigned user ID, session and authentication tokens used to establish your guest identity, authenticate requests and associate projects and credits. The current version does not require conventional phone, email and password registration. If additional account or Apple or Google sign-in options are offered and you choose them, we may also process email, nickname, avatar, sign-in method and verification status; we receive the account information that provider returns with your permission.
Creative inputs: story prompts, scripts, chat messages, character names and descriptions, selected universes, casting choices, photographs, reference images, embedded image metadata, video duration, aspect ratio and other generation settings, and media you choose to submit.
Creative outputs and task records: character-reference views, covers, scripts, storyboards, scene videos, final films, editing instructions, work and task IDs, progress, history and media locations.
Credits and any future purchases: credit balances, usage and adjustment records and associated tasks. The current version does not offer in-app credit purchases or auto-renewing subscriptions. If paid services are introduced, relevant records may include store product and transaction IDs, Google Play purchase tokens, verification results, subscription status, credits, refunds, revocations and restoration records. Apple or Google processes your payment credentials; we do not receive your full card number or payment password.
Technical and measurement data: device and app information, platform, app version and build, language, device time zone, store country or region code when available, IP and request information, diagnostic and security logs, interaction events, attribution identifiers, purchase events and permitted advertising identifiers.
Support and safety: emails, feedback, attachments, report details, moderation results, fraud-prevention signals and records needed to resolve a request. Support drafts may prefill your user ID, app version, operating system and device model; you can edit them before sending.
Local settings: session information, installation identifier, language, onboarding status, AI-processing permission, related notice choices and other preferences stored on your device.

A guest identity is associated with server data and does not make all activity anonymous. Device time zone and store region are not precise GPS location. Network requests expose connection information such as an IP address to receiving servers and infrastructure providers.

Why we use this information

We use information to create and secure accounts; provide casting, script and film creation; route and run generation tasks; save and display your projects; manage credits; process any purchases and restore entitlements if paid services are introduced; deliver media; investigate failures; provide support; moderate harmful content; prevent fraud; measure service and campaign performance; and meet legal and platform obligations.

Where privacy law requires a legal basis, processing is based on providing the service you request, your consent, legal obligations or legitimate interests such as security and reliability, subject to the rights and safeguards required by that law.

Photographs, likenesses and permissions

Photographs and camera captures can contain faces, appearance and other personal details. We process the image you choose to use for casting, character references and the scenes you request. A character reference or generated image may reproduce aspects of a person’s appearance. Obtain permission before submitting another person’s photo or likeness.

The current version has no microphone recording or speech-recognition feature and does not request contacts or GPS permissions. We obtain the photos you choose through system selection or camera features, requesting permission where required. Camera access is not permission for background capture. System photo and camera permissions are separate from consent to third-party AI processing. Do not submit identification documents, financial credentials or other sensitive information that is unnecessary for your story.

AI providers, data sharing and consent

AI features use Sceni’s backend and relevant third-party providers. For the requested feature, information may be processed by:

Google AI services: multimodal understanding, content analysis, creative instructions and prompt processing; relevant text, photographs, reference images or other submitted media.
OpenAI: creative assistance, story and prompt processing, multimodal understanding and content organization; relevant text, images and creative context.
Anthropic: text understanding, script and instruction assistance and prompt organization; relevant prompts, scripts, messages and contextual text.
BytePlus: video generation, transformation and related processing; relevant prompts, character-reference images, generation settings, intermediate results and media needed for the requested video.

We send only the information reasonably needed by the provider performing the requested function, not every input to every provider. Before personal content is shared for third-party AI processing, the app identifies the applicable providers and data categories and requests your explicit permission. If you decline, features requiring that processing are unavailable.

You can withdraw consent for future third-party AI processing by turning off AI Content Processing on your profile, or by contacting us. This stops new operations requiring that permission. Withdrawal does not undo processing already lawfully performed, automatically cancel submitted tasks or delete existing data; use the deletion process for removal. Provider-held records are handled under applicable agreements, law and their retention practices.

We require providers acting on our behalf to protect personal information with appropriate safeguards and use it for the contracted service. We do not sell your content to AI providers or authorize its use to build advertising profiles. Provider retention and any model-improvement use depend on the applicable service configuration and terms; this policy does not promise that all providers have zero retention.

Other service providers and disclosures

Firebase Authentication and Google services: sign-in, identity verification and account sessions.
Apple, StoreKit and Google Play Billing: platform sign-in where offered and purchase verification, subscriptions, restoration and refunds if paid services are introduced.
Firebase Analytics: app events, registration, sign-in and purchase measurement.
AppsFlyer: install attribution, campaign and purchase measurement; relevant event, account, device and permitted advertising identifiers.
Meta App Events and Conversions API: campaign and event measurement; relevant app activity, purchase information, network and device information, and account identifiers or hashed email addresses.
Hosting, database, object storage, CDN, moderation and operational providers: service delivery, media storage, security, support and reliability.

We may also disclose information at your direction, for legal obligations, to address abuse or rights complaints, to protect safety and security, or as part of a business transaction with appropriate protections. Providers must use suitable safeguards. We do not sell personal information.

Information transferred in a merger, restructuring or asset transaction remains subject to applicable law and this Policy, with notice where required. Accepting this Policy is not itself separate consent to any activity for which law requires separate permission.

Permissions and advertising choices

Camera access is used when you capture a reference photo. Photo or media access is used for files you select and, where necessary, saving a result. The current version has no microphone recording or speech-recognition feature and does not request contacts or GPS permissions. You can deny or revoke these permissions in device settings; typing and other unrelated features remain available where they do not need that permission.

On iOS, we request App Tracking Transparency permission before accessing IDFA or performing tracking that requires it. Declining does not prevent core creation. On Android, AppsFlyer and related measurement may use the advertising ID when available and permitted. Manage tracking or advertising controls in your device settings. We do not use uploaded photographs, creative inputs or generated films to build advertising profiles.

Storage, retention and deletion

Account information is retained while your account is active. Uploaded photographs, scripts, conversations and generated works are retained while needed to provide your projects and generation history, unless you delete them or request removal. Local preferences, sessions, consent choices, caches and temporary media may also remain on your device.

Verified account deletion requests are completed within 48 hours, subject to necessary identity checks and the limited retention below. Account deletion covers the account and associated creative data, not merely account deactivation. See Delete Account and Delete Data.

Purchase, subscription, refund and credit records may be retained for the period needed for accounting, tax, store compliance, disputes and fraud prevention. Necessary security or legal evidence may be retained for the applicable obligation. Logs and support records are retained only as needed for their stated purpose. Restricted backup copies may persist until the applicable backup cycle expires and are not used to restore deleted content to an active account. Irreversibly anonymized information may be retained.

Retention can differ across these categories and providers. When a legal or security exception affects your deletion request, we explain the relevant category and reason. We delete or anonymize retained personal data when that reason ends. Clearing app storage or uninstalling alone does not delete server-side data or cancel a subscription.

To request deletion in the current app, go to Profile → Settings → Reset app data. This requests deletion of the current server account and associated data. After success, the app clears the current session, generates a new installation identifier and automatically establishes a new guest identity. This does not restore the old account, projects or credits. Uninstalling or clearing local storage may also prevent access to your previous guest identity, and guest mode does not promise cross-device synchronization or recovery after device loss. If a guest identity cannot be verified, we explain the information needed and any processing limitations.

Security and international processing

We use secure transport where applicable, access controls and organizational safeguards appropriate to the information and service. Access is limited to personnel and providers who need it for their work. No online service can guarantee complete security.

Sceni and its providers may process information outside your country, where privacy laws can differ. Where required, we apply contractual or other legally recognized safeguards for international transfers.

We will handle and notify reportable data incidents as applicable law requires.

Your privacy rights

Depending on your location, you may request access, correction, deletion, a copy or portability of personal information; restrict or object to processing; withdraw consent; and complain to a relevant supervisory authority. Contact us from an email address you can access, provide your Sceni user ID if known and explain the request. A registered email is not required for a guest request. We may verify identity using information proportionate to the request. We respond within the applicable legal period, without limiting rights that cannot be waived.

Manage system permissions in device settings, use available in-app privacy controls, and manage subscriptions through your purchasing store. You can request deletion without reinstalling Sceni using our account deletion page.

Children, policy changes and contact

Sceni is not directed to children. Users must meet the applicable minimum age and store age requirements; minors who lack legal capacity must involve a parent or guardian. If you believe a child has supplied personal information without the required permission, contact us so we can investigate and remove it as required.

We update this policy when service features, providers or data practices change. Material changes are notified where required, and new consent is requested before processing that requires it. Privacy contact: STARWAVE AI INC., [email protected].