Privacy Policy

Working draft · Last updated July 14, 2026

This is a plain-language draft that reflects how SceneCheck works today. The final, legally reviewed version is being prepared with counsel before launch. Where this draft and the final version differ, the final version will govern from its stated effective date once it is published.

SceneCheck is built so that the safest data is the data we never hold. This draft describes, in plain language, what we collect, what we cannot see, how long we keep things, and how you delete them.

What we collect

  • A phone number, verified once when you sign up, then discarded. We keep only a one-way cryptographic hash of it, which cannot be reversed into your number.
  • The feedback you give and receive. It is stored without any link between an answer and the person who wrote it.
  • Sexual health practices, safety report details, appeal details, and personal limits. These are encrypted at rest with AES-256-GCM and are unreadable without an active decryption key.

We do not collect your legal name or your photos.

What we cannot see

Some protections are structural, so even our own team cannot bypass them:

  • Your phone number. Only the irreversible hash exists.
  • Who left feedback on you. Reviewer identity is never stored with the answers.
  • The contents of encrypted fields, without an active decryption key.

How long we keep it

We keep only what the scoring math needs, and what we keep has an expiration:

Scene records24 months, then anonymized
Health snapshots90 days, then anonymized
Venue check-ins12 months, then deleted
Safety reports36 months, kept for accountability
Phone hashesUntil you delete your account

Other encrypted profile data, such as your personal limits and any appeal details, is kept for as long as the account or record it belongs to and is removed when you delete it. Exact windows for these are being finalized alongside the rest of this draft.

Deleting your data

You can export or delete your data from Settings at any time. Deletion is permanent for everything except the narrow exceptions listed above: safety reports are kept for the accountability window shown, because a trust platform cannot let someone erase a report against them by leaving. Once the retention window passes, that data is gone too, and there is nothing left for us to hand over.

What we never do

We do not run ads and we do not sell your data. There is no searchable directory: you cannot browse or look someone up, and a profile only exists between people who have already met. We publish a warrant canary on our transparency page and update it regularly.

Questions? Reach us at hello@scenecheck.app.

← Back to home