Privacy Policy

Last updated: September 23, 2026

1. Controller

The controller responsible for data processing through 11 Seconds is:

Kombiverse Labs
Oppelner Str. 3A
33098 Paderborn, Germany
Email: [email protected]

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

  • Email address
  • Display name and username (chosen by you)
  • Avatar selection
  • Preferred language and unit system

If you sign in with Apple or Google, we receive your email address (with Apple, optionally a private relay address) and an account identifier from that provider. You can also play as a guest: we then create an anonymous account without an email address, which you can later turn into a regular account or delete.

2.2 Game Data

While using the app, we collect gameplay data to provide the service:

  • Game scores, answers, and accuracy statistics
  • ELO rating and rank progression
  • Game history (solo, duel, matchmaking, party results)
  • Friends list and social interactions

2.3 Audio Data (Party Mode)

Party Mode uses your device microphone for voice input. Audio is:

  • Processed in real-time for speech-to-text conversion
  • Sent to third-party AI services (Google Gemini, Hugging Face) for processing
  • Not stored permanently on our servers

Microphone access requires your explicit permission and can be revoked at any time in your device settings.

2.4 Subscription Data

Payment processing is handled by Google Play (for Android) and Stripe (for web). We do not store credit card numbers or payment details directly. We receive:

  • Subscription status (active, expired, tier)
  • Transaction identifiers

RevenueCat acts as our subscription management platform, syncing entitlement data across platforms.

2.5 Technical Data

We automatically collect:

  • Device type, operating system, and app version
  • Crash reports and error logs (via Sentry)
  • App usage events such as started and finished games (via Google Firebase Analytics, not linked to your name or email)
  • Push notification tokens (if notifications are enabled), delivered via Google Firebase Cloud Messaging and the Apple Push Notification service

3. How We Use Your Data

We use collected data to:

  • Provide and improve the 11 Seconds game experience
  • Maintain leaderboards and ranking systems
  • Enable multiplayer features (duels, matchmaking, party mode)
  • Process subscriptions and manage feature access
  • Send push notifications (only with your consent)
  • Diagnose technical issues and improve app stability

4. Third-Party Services

We use the following third-party services:

  • Supabase (EU) — Authentication, database, and backend services
  • RevenueCat (US) — Subscription management
  • Stripe (US) — Payment processing
  • Google Play (US) — App distribution and in-app purchases
  • Sentry (US) — Error tracking and crash reporting
  • Google Firebase (US) — App usage analytics and push notification delivery
  • Apple (US) — Sign in with Apple, push notifications on iOS, and App Store distribution
  • Google Gemini API (US) — AI voice hosting in Party Mode
  • Hugging Face (US) — Speech-to-text in Party Mode

Each service has its own privacy policy. Data transferred to US-based services is protected under applicable data transfer mechanisms.

5. Data Retention

Account and game data is retained as long as your account is active. Audio data from Party Mode is processed transiently and not permanently stored. You can delete your account and associated data at any time in the app (Settings > Account > Delete account) or by contacting us.

6. Your Rights (GDPR)

As a user in the EU, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, contact us at [email protected].

7. Children's Privacy

11 Seconds is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided personal data, please contact us for deletion.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top. We encourage you to review this policy periodically.

9. Contact

For questions about this Privacy Policy or your data:

Kombiverse Labs
Oppelner Str. 3A, 33098 Paderborn, Germany
[email protected]