Privacy Policy

SceneWise
Privacy Policy
Compliant with COPPA (2025 Rule), PIPEDA, and US State Privacy Laws.scenewise.app/privacy | [email protected]
Effective Date: June 11, 2026 | Last Updated: June 11, 2026
17119984 Canada Inc. | Ontario, Canada | BN: 7870402371. About This Policy & Who It Applies To
This Privacy Policy applies to all users of the SceneWise mobile application and website (scenewise.app), operated by 17119984 Canada Inc., a federally incorporated Canadian corporation (Corporation No. 17119984, BN: 787040237), headquartered in Ontario, Canada.
SceneWise is directed at adults aged 18 and over who are parents or legal guardians. It is not directed at children. However, because parents use SceneWise to manage content for their children, we collect limited information about children as described in Section 4.
By using SceneWise, you confirm you are at least 18 years old and agree to this Privacy Policy. If you do not agree, do not use the app.2. Two Laws That Govern This App
Because we are a Canadian corporation serving primarily American users, two legal frameworks apply simultaneously:
PIPEDA (Canada)
The Personal Information Protection and Electronic Documents Act governs how we collect, use, and disclose personal information in Canada. PIPEDA is based on 10 fair information principles including accountability, consent, limiting collection, accuracy, safeguards, and individual access. We are accountable for all personal information under our control, including information transferred to third-party processors.
COPPA (United States — 2025 Amended Rule)
The Children's Online Privacy Protection Act, as amended by the FTC's 2025 Rule (effective June 23, 2025, compliance date April 22, 2026), applies because our app involves information about children under 13. Key requirements of the 2025 Rule that we comply with:
• We do not condition participation on collecting more personal information from children than is reasonably necessary
• We maintain data retention and deletion protocols for children's information
• We do not use children's information for targeted advertising or behavioral profiling
• We provide parents the right to review, correct, and delete their child's information
• We provide a separate, direct notice to parents regarding children's data practicesUS State Privacy Laws
Multiple US states have enacted children's privacy laws beyond federal COPPA, including Utah's App Store Accountability Act (in effect May 2026), with Louisiana (July 2026) and California (January 2027) following. We monitor these developments and will update our practices as required. Our current practices are designed to meet or exceed these emerging state standards.3. What Information We Collect
3.1 Information You Provide Directly
• Email address — required to create an account
• Password — stored as a one-way cryptographic hash; we never have access to your actual password
• Children's first names and ages — used solely to personalize the app experience for that child within your account
• Streaming platform preferences — which services your family subscribes to
• Content filter settings — your tolerance thresholds per content category per child
• Content decisions — titles you mark as Approved, Not Yet, or Maybe for a specific child3.2 Information Collected Automatically
• Device type and operating system version — for compatibility
• App session and feature usage data — aggregate, non-identifiable, used to improve the app
• Crash reports and error logs — to identify and fix technical issues
We do NOT collect: precise geolocation, contacts, photos, camera, microphone, device identifiers for advertising, or biometric data of any kind.3.3 Information From Third Parties
We use the following third-party service providers. Each receives only the minimum information necessary:
• Supabase (database) — stores your account and app data. Supabase is SOC 2 Type II certified and processes data in accordance with PIPEDA-equivalent standards.
• The Movie Database / TMDB (content data) — we send title and year of content to retrieve publicly available movie/TV information. No personal information is shared with TMDB.
• Anthropic / Claude AI (content analysis) — we send only the title, year, and content type. No personal information, no children's names or ages, is ever transmitted to Anthropic.
• Stripe (payment processing) — handles all payment transactions. We never receive or store your credit card number, CVV, or full card details. Stripe is PCI-DSS Level 1 certified.
• Apple App Store / Google Play — if you subscribe through these platforms, their privacy policies also apply to the transaction.4. Children's Privacy — Enhanced Protections
This section is the most important in this policy. Please read it carefully.4.1 Our Position Under COPPA
SceneWise is not directed at children. It is a tool for parents. However, we collect children's first names and ages as part of the app's core functionality — parents enter this information to set up child profiles. This makes us subject to COPPA's requirements regarding children's personal information.
The FTC has confirmed that an app used by adults but that collects information about children under 13 is subject to COPPA. We take this seriously.4.2 What We Collect About Children
We collect only two pieces of information about children: their first name (or nickname — a real name is not required) and their age. Nothing else.
We do NOT collect children's: email addresses, photos, voice, location, device identifiers, behavioral data, or any other information.4.3 How Children's Information Is Used
Children's names and ages are used exclusively to:
• Display the correct child's profile within your account
• Apply appropriate content filters based on the child's age
• Build a personalized Ready to Watch list
• Label saved content decisions with the correct child's name
Children's information is NEVER used for: advertising, marketing, analytics, profiling, sharing with third parties, or any purpose beyond the above.4.4 Parental Rights Under COPPA
As the parent or guardian of a child whose information appears in SceneWise, you have the right to:
• Review the personal information we hold about your child
• Correct inaccurate information
• Request deletion of your child's information at any time
• Refuse further collection or use of your child's information
To exercise any of these rights, email [email protected]. We will respond within 5 business days. Deletion requests will be processed within 48 hours.4.5 Data Minimization and Retention for Children
Consistent with the 2025 COPPA Rule's data minimization requirements, we retain children's information only for as long as your account is active. Upon account deletion, all children's information is permanently deleted within 48 hours. We do not retain any archive or backup of children's names or ages after account deletion.5. Legal Basis for Processing
Under PIPEDA, we process personal information based on meaningful consent. When you create an account and enter information about your children, you are providing explicit consent for us to use that information as described in this policy. You may withdraw consent at any time by deleting your account.
For US users, we process data as necessary to fulfill the service you have contracted for (your subscription or free account), and to comply with applicable law.6. Data Security
• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• Passwords are stored using bcrypt hashing — we cannot recover your password
• Database access is protected by Row Level Security — only your account can access your data
• Payment data is handled entirely by Stripe (PCI-DSS Level 1) — we never touch card details
• Our infrastructure provider (Supabase) maintains SOC 2 Type II certification
• We conduct security reviews before major app updates
In the event of a data breach that creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada within 72 hours of becoming aware, in compliance with PIPEDA's mandatory breach notification requirements.7. Cross-Border Data Transfers
As a Canadian corporation, we are subject to PIPEDA's requirements for cross-border data transfers. Your information may be processed by our service providers (Supabase, Stripe, Anthropic) in the United States. Under PIPEDA, we remain accountable for personal information transferred to third parties for processing, and we have contractual protections in place with each provider.
By using SceneWise, you acknowledge that your information may be transferred to and processed in Canada and the United States.8. Your Rights
Canadian Users (PIPEDA)
• Right to access your personal information
• Right to correct inaccurate information
• Right to withdraw consent (subject to legal and contractual restrictions)
• Right to file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.caUS Users
• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights
To exercise any right, email [email protected]. We respond within 10 business days.9. Data Retention
We retain your personal information for as long as your account is active. Upon account deletion:
• Your email address: deleted within 30 days
• Children's names and ages: deleted within 48 hours
• Content decisions and watchlists: deleted within 48 hours
• Payment records: retained for 7 years as required by tax law (held by Stripe, not by us)
• Anonymized, non-personal usage statistics: may be retained indefinitely10. Changes to This Policy
We will notify you of material changes to this policy by email at least 30 days before they take effect. For minor changes, we will update the Effective Date. Your continued use of SceneWise after the effective date of changes constitutes acceptance.11. Contact & Complaints
Privacy Officer: 17119984 Canada Inc.
Email: [email protected]
Website: scenewise.app/privacyFor unresolved privacy concerns, you may contact:
• Office of the Privacy Commissioner of Canada: priv.gc.ca | 1-800-282-1376
• US Federal Trade Commission (COPPA): ftc.gov/coppa | [email protected]

SceneWise | scenewise.app | 17119984 Canada Inc.

These terms were last reviewed June 2026 and will be updated as the service evolves.