1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you use our website or app. Personal data is any data with which you can be personally identified.
Controller
Responsible for data processing is:
Jörg Zwiener, Eschenweg 27/1, 72144 Dußlingen, Germany.
Email: info@quexiverse.com
2. App Store & Google Play required information
Account deletion
You can permanently delete your user account and all associated data at any time in the app under "Settings" > "Delete account".
Alternatively, you can email us at info@quexiverse.com.
Access permissions
The app requires internet access to load quiz content and provide multiplayer features. Access to photos/files is only required if you want to upload your own avatar.
3. AI-generated content (EU AI Act)
This app uses artificial intelligence (Google Gemini API) to generate quiz questions based on your input (e.g., topics, URLs, or documents).
- Your inputs (prompts, documents) are sent to Google Cloud (Vertex AI).
- According to Google, these data are not used to train its models when using the enterprise API.
- No personal user data is transmitted to the AI, except what you explicitly enter in the quiz topic.
4. Legal basis for processing (Art. 6 GDPR)
We process your personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b) GDPR): registration, quiz creation, saving your game progress
- Consent (Art. 6(1)(a) GDPR): where required, e.g., for storing your cookie preference
- Legitimate interest (Art. 6(1)(f) GDPR): security, error analysis, improvement of the app
5. Cookies & tracking (TTDSG §25)
We use only technically necessary cookies for the functionality of the app:
- Supabase Auth cookie: for secure authentication (session management)
- Cookie consent (localStorage): stores your cookie consent locally in the browser
No tracking: We do not use analytics, advertising, or third-party tracking cookies. No data is transmitted to Google Analytics, Meta, or similar services.
6. Payment processing (Premium subscriptions)
For Premium subscriptions we use Stripe (Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA) as the payment provider.
- Stripe processes payment data (credit card, name, email) in accordance with the PCI DSS standard.
- We do not store any credit card data on our servers.
- Stripe's privacy policy: https://stripe.com/privacy
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
Stored data: We store only the Stripe customer ID and subscription ID to manage your Premium status.
7. Data collection & hosting
Supabase
We use Supabase (Supabase Inc., USA/EU) as a backend provider for databases and authentication. Supabase is GDPR-compliant and stores data in encrypted form.
Hosting
The web version of the app is hosted via Cloudflare Pages. Cloudflare processes technical log data for security purposes.
8. Your rights
You have the right at any time to receive information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to rectification, blocking, or deletion of these data.
9. Contact
If you have questions about the collection, processing, or use of your personal data, please contact: info@quexiverse.com