Privacy Policy

The Scene by MYai ("MYai.TheScene," "The Scene," "we," "us," or "our") is operated by MYai. This Privacy Policy describes how we collect, use, share, and protect information when you use The Scene mobile application (iOS & Android), the website at thescene.world, and all related services (collectively, the "Service").

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

1. About The Scene

The Scene is a music-themed social media platform that combines virtual social with reality social. Features include live event discovery & ticketing (TheScene), SuperFan engagement (setlists, tours, music news, artist following), a privacy-focused browser (Clone Wolf), media tools (IME), and a cross-platform social identity (UserVerse).

2. Information We Do Not Collect

We do NOT collect, access, or transmit:

• Your browsing history or activity within Clone Wolf (privacy browser)
• Your photos, videos, or locally stored media files
• Your device contacts or phone-book data
• Precise GPS location (the app does not request location permission)

3. Information We Collect & Process

Certain features require our server ("Source of Truth") to process limited data:

3.1 Account & Identity

• MYai ID — anonymous, device-generated UUID. Identifies your account without collecting personal info. Retained until account deletion.
• Email address (optional — only if you sign in via Apple/Google) — account recovery, receipts. Retained until account deletion or on request.
• Onboarding status flags — resume setup after reinstall. Retained until account deletion.

3.2 Subscriptions & Payments

• Subscription status, plan type, start/end dates — entitlement verification. Retained for duration of subscription + 60 days.
• App Store / Google Play transaction IDs — receipt validation. Retained for duration of subscription + 60 days.

3.3 TheScene (Events & Ticketing)

• Event listings you create (title, date, venue, price) — publish events and sell tickets. Retained until event deletion or 2 years post-event.
• Ticket purchase records — proof of purchase, refunds, check-in. Retained 2 years post-event.
• Check-in timestamps — venue admission verification. Retained 90 days post-event.
• Guest checkout info (name, email for receipt) — issue tickets to non-registered buyers. Retained 2 years post-event.

3.4 Social Media Import (UserVerse)

If you choose to connect a social media account (via Phyllo or direct OAuth), we receive only the data you explicitly authorize: public profile info, follower counts, and post metadata. You can disconnect any social account at any time, and we will delete the associated data within 30 days.

3.5 Background Downloads

The app may download content feed items in the background using OS-scheduled jobs. These requests transmit your IP address and a device token to our server. Downloaded content is cached locally and can be cleared from the app.

4. How We Use Information

• Operate, maintain, and improve the Service
• Process payments and manage subscriptions
• Verify ticket purchases and event check-ins
• Respond to support requests and legal obligations
• Detect and prevent fraud, abuse, or violations of our Terms

We do NOT use your data for targeted advertising, user profiling, or sale to data brokers. We do not serve ads.

5. How We Share Information

We share data only in these limited circumstances:

• Payment Processors: Apple and Google receive payment data necessary to process transactions.
• Phyllo: If you connect social accounts, Phyllo acts as an intermediary to retrieve public profile data.
• Cloud Infrastructure: Our server runs on Google Cloud Platform (US region) under its Data Processing Addendum.
• Legal Requirements: We may disclose data if required by law, subpoena, or court order.

We do NOT sell or rent personal information to anyone.

6. Data Security

We protect data in transit with TLS 1.2+ (HSTS enforced), at rest with GCP-managed encryption, and with application-level rate limiting and anti-abuse controls. Server secrets are stored in Google Cloud Secret Manager. Despite these measures, no system is 100% secure.

7. Data Retention

We retain server-side data only as long as needed for the purpose it was collected or as required by law. When you delete your account, we remove all associated data from our server within 30 days (some backup data may persist for up to 90 days before automatic deletion).

8. Your Rights

All Users: Access, Correction, Deletion, and Portability of your personal data.

EEA (GDPR): Legal basis is contract performance, legitimate interest, or consent. You may withdraw consent at any time and lodge a complaint with your local DPA.

California (CCPA/CPRA): Right to know, delete, opt-out of "sale" (we do not sell data), and non-discrimination.

To exercise any right: Email privacy@myaiuser22.com with your MYai ID or account email. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Our servers are located in the United States (Google Cloud, us-central1). If you use the Service from outside the US, your data may be transferred to, stored in, and processed in the US. We rely on GCP's standard contractual clauses for lawful transfer.

11. Cookies & Tracking

The MYai mobile app does not use cookies or third-party tracking SDKs. Our website does not use analytics cookies or third-party trackers. We do not participate in cross-site tracking or real-time bidding.

12. Third-Party Services

• Apple — App Store purchases, Sign in with Apple, APNs
• Google — Google Play purchases, Google Sign-In, Google Maps, FCM
• Phyllo — Social media account connection
• MusicBrainz — Music metadata (open database, no personal data sent)
• Ticketmaster — Festival/event discovery (public API, no personal data sent)

13. Security Monitoring

The Service performs automated security monitoring including device integrity checks, model integrity verification, security event logging, and silent health check-ins. All monitoring uses pseudonymous identifiers and does not transmit personal content. It is not used for advertising, analytics, or profiling.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and, where feasible, notify you via the app or email. Your continued use constitutes acceptance of the updated policy.

15. Contact Us

For privacy inquiries, data requests, or complaints:

Email: privacy@myaiuser22.com

General Support: support@myaiuser22.com