Privacy Policy

Last updated: February 5, 2026

Introduction

The Disposable (“we”, “us”, “our”) operates the iOS application (SCENE) and web application at scenedisposable.com. This Privacy Policy describes how we collect, use, store, and protect your information when you use our disposable camera app for events.

By using The Disposable, you agree to the collection and use of information in accordance with this policy. If you have any questions, please contact us at dragonitelab@gmail.com.

Information We Collect

Information You Provide

  • Display name (optional) — A name you can provide when joining events as a guest. This name is displayed alongside your photos in the event gallery.
  • Email address (optional) — Only collected if you choose to sign in via Apple Sign-In or Google Sign-In. You can use the app without signing in.
  • Photos — Images you capture using the in-app camera during events. Photos are stored on your device and uploaded to our servers to be shared with other event participants.

Information Collected Automatically

  • Device identifier — On iOS, we use the Identifier for Vendor (IDFV) to create anonymous device sessions. This identifier is unique to your device and our app and cannot be used to track you across other apps.
  • Device information — Device model and operating system version, included with photo metadata.
  • Usage information — Photo upload timestamps, the type of photo filter applied (Original, Classic Chrome, Nostalgic Negative, or Acros styles), and records of which events you have participated in.

Information We Do NOT Collect

We are committed to collecting only the minimum information necessary. We do NOT collect:

  • Precise or coarse location data (no location permissions are requested)
  • Advertising identifiers (IDFA) or any data for targeted advertising
  • Analytics or crash reporting data via third-party services
  • Financial or payment card information (in-app purchases are processed entirely by Apple and Google; we never see your payment details)
  • Health, fitness, or wellness data
  • Contacts, calendars, or browsing history

How We Use Your Information

We use the information we collect for the following purposes:

  • Provide the core service: capturing, storing, and revealing event photos at the host-set reveal time.
  • Manage anonymous device sessions so you can access your events across app launches without requiring login credentials.
  • Upload your photos from your device to the shared event gallery.
  • Display your chosen display name alongside your photos in the event gallery.
  • Enable event hosts to manage their events and galleries.
  • Improve and maintain the service by analyzing aggregated, anonymized usage patterns.

We do not use your information for advertising, marketing to third parties, or any purpose unrelated to providing The Disposable service.

How We Store Your Information

On Your Device (iOS)

  • iOS Keychain — Device identifier and authentication tokens are stored securely in the iOS Keychain, which is encrypted by the operating system.
  • App Documents directory — Captured JPEG photos and metadata are stored locally in the app's Documents directory.
  • UserDefaults — Upload queue state is stored to manage background photo uploads.
  • App Group container — Event cover images are stored in a shared container to enable display in iOS Live Activities.

On Your Device (Web)

  • IndexedDB — Offline photo data and metadata for offline photo capture.
  • Service Worker cache — Application assets cached for offline access and performance.

In the Cloud

  • Supabase PostgreSQL database — Event data, photo metadata, and session records.
  • Supabase Storage — Uploaded photo files, each assigned a unique identifier and accessible only to verified event participants.

All data transmitted between your device and our servers is encrypted using HTTPS/TLS. Data stored in our cloud infrastructure is encrypted at rest.

Third-Party Services

We use the following third-party services:

  • Supabase — Cloud database and file storage for event data and photos. See Supabase Privacy Policy.
  • Apple Sign-In — Optional authentication via Apple's AuthenticationServices framework. Only your email and name are shared if you choose this method. See Apple Privacy Policy.
  • Google Sign-In — Optional authentication. Only your email and name are shared if you choose this method. See Google Privacy Policy.
  • RevenueCat — In-app purchase management and receipt validation. RevenueCat processes anonymous transaction data to verify purchases. No payment card information is shared with us or RevenueCat; all payments are handled by Apple's App Store or Google Play. See RevenueCat Privacy Policy.

We do not use any advertising networks, analytics SDKs, or crash reporting services.

Data Sharing

Photos you capture are shared with other participants of the same event after the host-set reveal time. Your display name (if provided) is shown alongside your photos in the event gallery.

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. We may disclose information if required by law, legal process, or to protect the rights, property, or safety of our users or the public.

Data Retention

Event photos and associated data are retained for as long as the event exists on the platform. Event hosts can delete their events and all associated photos at any time. Individual users can delete their own photos from within the app or web interface.

Your Rights and Data Deletion

You have several options to manage and delete your data:

  • Delete individual photos — Remove photos you captured from within the app or web interface at any time.
  • Delete events — If you are an event host, delete your entire event and all associated photos and data.
  • Log out — Clear authentication tokens, session data, and upload queue from your device.
  • Uninstall the app — Remove all locally stored photos, metadata, and preferences from your device.
  • Request complete data deletion — Contact us at dragonitelab@gmail.com to request removal of all your data from our servers. We will process deletion requests within 30 days.

Children's Privacy

The Disposable is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at dragonitelab@gmail.com.

Security

We implement reasonable security measures to protect your information:

  • All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
  • Authentication tokens and device identifiers are stored securely in the iOS Keychain.
  • Photos are stored with unique identifiers and are only accessible to verified event participants.
  • Row Level Security (RLS) policies enforce data access controls in our database.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Your continued use of The Disposable after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: