Being finished for launch: the parts in square brackets are still to be filled in.

Eleven Eleven — Privacy Policy

Effective date: [DATE] Who we are: Flip LTD, C/o Polaris Corporate Services FZ-LLC, S18W1002, Shed No. 18 - Al Hulaila FZ, Al Hulaila Industrial Free Zone, RAK, United Arab Emirates ("Eleven Eleven", "we", "us"). Contact: [email protected].

Eleven Eleven is a daily manifestation companion built on numerology. It is for inspiration and entertainment. This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have.

1. What we collect

Information you give us

• Your name (the name as it appears on your birth certificate, or just your first name if you choose) — used to compute your Expression number and to address you.
• Your date of birth — used to compute your Life Path and daily numbers.
• If you fix your name or date of birth later (the You tab), your numbers are worked out again from what you enter, and the app uses only the newest. The earlier name and date stay with your account until you delete it. [Counsel: confirm keeping them, or the server can delete the earlier ones when new ones are saved.]
• Your choices in the app — your chosen angel number, your guide voice, what you are calling in (focus areas), your daily notification time.
• Your messages to the guide ("Speak It"), your answers in the Game-Plan, and anything else you type into the app.
• Your voice, if you use it in Speak It (the mic, or talk mode): the iPhone turns what you say into text on the phone itself, using Apple's on-device speech recognition. Your voice stays on your phone; it is not sent to us or to Apple. If a phone can't recognize speech on its own, the app doesn't offer voice on it. The text is sent to the guide like a typed message, and treated the same way. Replies you have read aloud are spoken by the iPhone's own voices, on the phone. Whether "Read replies aloud" is on is kept on your phone. We record only how each message was sent (typed, said into the box, or talk mode), never what you said. The microphone and speech recognition are used only while you are using voice, and only after you allow them. [Counsel: confirm the description of Apple's on-device speech recognition.]
• Your Apple ID identifier if you choose "Sign in with Apple" (a stable, app-specific identifier Apple provides; we do not receive your Apple password; we may receive your email address only if you choose to share it).
• Your vision boards — the words you put on a board, its layout and background, and which goal it is for. The photos on a board stay on your phone; we never receive them. We keep only how many photos a board has, so the app on another phone can say they were added on the first. A photo you take with the camera for a board goes straight onto the board on your phone. Saving a board goes through the iPhone's share sheet ("Save Image"), which asks only to add to your photo library; the app never reads it.
• Your 369 line — the one line you write out in the 369 ritual, the date you set it (for the 33-day counter), and the times you chose for its reminders if you turn them on. What you type in a round stays on your phone; we never receive it. We keep only which rounds of which days you finished, for your tracker.
• Your sightings — the angel numbers you log when you see them (for example 444), each with the date and the time where you were when you logged it. Nothing else: no place and no note.
• The widget, if you add it to your lock screen or home screen — it shows today's number, and today's move while it's open or else today's affirmation. The app hands these to the widget on your phone; nothing new comes to us. Anyone who can see your lock screen can read them. Deleting your account clears the widget's day.
• Your people, if you add someone to see how the two of you work together: their first name and what they are to you (a friend, your partner, family). You enter their date of birth once so we can work out their Life Path; we keep their Life Path, never their date of birth. Only you see your people. Removing someone deletes their name, their Life Path and the read of the two of you; if that read was your free one, we keep only a note that the free read was used (no name, no numbers). The card of the two of you shows your two Life Paths and their words, never a name. [Counsel: confirm the wording for information a user gives us about another person (a first name and a date of birth), and whether the app should ask the user to tell them.]
• Your answers to the story questions, if you give any: the town or city you live in, what fills your days, the people in your life (a first name each, and who they are to you: your sister, a friend, your dog), how you want to feel when what you're calling in is real, and words or topics your stories should never mention, tapped from a list or in your own words. Every one is optional; you can change or clear each one on "What your stories know", and skipping one keeps only that you skipped it. Answers to questions the app no longer asks are deleted. [Counsel: confirm the wording for the first names a user gives us of the people in their life.]
• Your email address, if you join the 11:11 circle, in the You tab or on 1111circle.com: only if you type it in and tick the box. We first send one email asking you to confirm; nothing else is sent until you tap its link. We keep your address, whether you are in, the app it came from, and a record of each request, confirmation and leaving, with the date and the version of the words you agreed to. Joining is optional, and nothing in the app depends on it.
• Sign-up counts, so no one can flood an inbox: when anyone asks for a circle email, we count the confirming emails sent to that inbox and asked for from that network address (IP address). The counts are kept under a one-way code made with a key we hold, never the address itself, and deleting an account doesn't reset them. [Counsel: confirm the wording, and that this anti-abuse count, kept two days, needs nothing more.]

Information created when you use the app

• Your numbers and daily content: the Life Path, Personal Day, Month and Year numbers we compute, the daily alignments, Personal Year deep-dives, Game-Plans and guide replies generated for you, the reads of you and your people, and your stories (each day's story, what it was about, and when you opened it and reached its end).
• Your stories read aloud: the recording of each day's story in the voice that reads your stories, how long it is, and which of the app's voices you picked. The voices are AI voices from Inworld (see §3).
• Your guide's notes: a short running summary of what you are calling in and what you have told the guide, kept so the guide can continue the conversation. You can clear it at any time ("Forget what you know about me" in the You tab).
• Streak and usage records: days you opened the app, messages sent per day, feature use, and app events we use to understand how the product is used (for example "opened the reading", "viewed the paywall"). These events never contain your messages, name or birth date.
• Subscription status: whether you have an active trial or subscription, and which plan, as reported by Apple through our subscription provider. We never see your payment card.
• Push notification token and time zone, if you allow notifications.
• Technical data: device type and OS version, app version, and crash or error reports (with personal data removed before they are sent).

An anonymous account by default. You can use the app without creating an account; we assign a random identifier to your installation. Linking your Apple ID is optional and lets you recover your data on a new device.

Children. The app is not directed to children under 13 (or the minimum age in your region) and we do not knowingly collect their information. [Confirm the App Store age rating with counsel.]

2. How we use it

• To compute your numbers and generate your daily alignment, guide replies and plans. This is the service.
• To personalize that content to what you have told us you are calling in.
• To send the notifications you turned on: the daily one at the time you chose and, if you turn them on, the evening check-in and the 369 reminders (only for a round still open).
• To manage your subscription and free-tier limits.
• To keep the service safe: our safety filters check what the guide says before you see it, and look for signs that someone needs human help.
• To understand and improve the product using aggregated usage events.
• To respond when you contact support.
• If you joined the 11:11 circle, to email you circle news: our new apps, new features before everyone else, and longer trials when we launch something new. Every circle email has an unsubscribe link.

We do not sell your personal information. We do not share it with advertisers, and we do not use it to show you ads. The only marketing we send is circle news by email, and only if you joined the circle and confirmed it. We do not use your messages to train AI models.

3. AI processing — please read this part

The guide you talk to is an AI, not a person. To generate your alignment, guide replies, plans and deep-dives, we send the relevant information — your first name, your computed numbers, your focus areas and chosen number, what you have written in the app (what you are calling in, your actions, your evening notes, your Game-Plan answers and your messages), your guide's notes, the question or request at hand, for your stories your answers to the story questions (the town or city you live in, what fills your days, the first names of the people in your life and who they are to you, how you want to feel, and what your stories should never mention) and, for a read of you and someone you added, their first name, their Life Path and what they are to you — to Anthropic, PBC (the provider of the Claude AI models), which processes it on our behalf and returns the generated text. Your full birth name and your date of birth are not sent to the AI provider; only the numbers computed from them are (and your first name). The dates of birth of people you add are never sent either (we don't keep them). Anthropic processes this data under its commercial terms, which [prohibit training on customer API content — counsel to confirm the current terms at anthropic.com/legal].

We ask first. Before anything is sent, the app shows you what is shared with Anthropic and asks for your permission. If you say no, the AI features (your daily alignment, Speak It, the Game-Plan and the reads) stay off and nothing is sent. You can turn it off at any time in the You tab under "AI and your data"; from then on nothing more is sent, including for the overnight alignment. We keep a record of each answer (yes, no, or turned off), with the date and the version of the notice you saw. [Counsel: confirm this consent language, and what to say about data Anthropic processed before a withdrawal.]

Reading your story aloud. Each story is read aloud by an AI voice from Inworld AI (Inworld), an AI company, and the AI notice above says so. Our own voice worker, which runs with our other servers at Fly.io in the United States, sends Inworld the words of your story one sentence at a time (they can include your first name, your town, the first names of your people and anything else you told us for it) with the narrator's voice to read them in, and nothing else that says who you are: no account, email or birth date. Inworld sends back the speech, and our voice worker puts the recording together. The recording is stored with Cloudflare under a random name and sent to your phone from there. A story is only written, and only sent to Inworld, while your answer to the current AI notice is yes: if you turn the AI off, a story not yet read aloud is not sent. [Owner: we have asked Inworld to turn on zero data retention for our account (its documentation lists it for its TTS-2 voices), so the words it reads are not kept in its logs; confirm Inworld's answer, and whether it covers the Flash model the app uses.] [Counsel: confirm the wording for an AI voice provider, Inworld's data processing terms and where it processes the words (ask Inworld).]

AI-generated content can be wrong. It is not medical, mental-health, legal or financial advice. See the Terms of Use.

4. Who we share it with (our service providers)

We use a small number of providers to run the service. Each receives only what it needs:

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a merger or acquisition (in which case this policy continues to apply until changed with notice).

5. How long we keep it

• Your account data (numbers, alignments, chats, notes, plans, vision boards, your 369 line and the rounds you finished, your sightings, your people and their reads, your stories and your answers to the story questions, streak, settings) is kept while your account exists. Someone you remove is deleted then (see "Your people" in §1).
• [Chat messages older than N months are deleted automatically — decide the retention period; the codebase does not yet enforce one.]
• Your stories read aloud: each recording is deleted automatically 30 days after it is made; the story's words stay with your account. A note of which voice read it and how long it was stays with the story. Deleting your account deletes your recordings too; one that can't be reached at that moment goes by the 30-day rule.
• Usage events are kept in de-identified form after account deletion.
• The 11:11 circle: an address that is never confirmed is deleted about ten days after it was entered (a week after its link expires). If you leave, circle email stops at once; we keep your address with the record of your yes and your no, so we can show that we asked and that you left, and Loops keeps it marked as unsubscribed. [Counsel: confirm how long to keep a record of consent and its withdrawal.] Deleting your account deletes your circle address and its record, and Loops is told to delete it too.
• The circle's sign-up counts (the one-way codes above) are deleted after two days.
• Backups are kept for up to [7] days and then expire.
• If you delete your account, everything attributable to you is deleted from our live database immediately and from backups within [7] days.

6. Your choices and rights

• See your data: the You tab lets you export everything we hold about you (Export my data — [confirm the control is exposed in the UI before publishing; the API endpoint exists]).
• Clear the guide's notes: "Forget what you know about me" in You.
• Turn off AI: "AI and your data" in You. Nothing more is sent to the AI provider; the AI features stay paused until you agree again.
• Delete a vision board: "Delete this board" on the board. Its words leave our servers and its photos leave your phone. Deleting your account deletes every board, and the board photos on that phone.
• Your 369 line and reminders: change the line or stop the reminders on the 369 screen. Deleting your account deletes the line, the rounds you finished and the reminders.
• Your sightings: take one out with Undo or Remove on the sightings screen. Deleting your account deletes them all.
• Your people: remove someone on their screen. Their name, their Life Path and the read of the two of you are deleted. Deleting your account deletes all of your people.
• Delete your account: "Delete my account" in You. This is immediate and permanent. Deleting your account does not cancel an active subscription — cancel it in your Apple ID settings first.
• Notifications: change the time or turn them off in You, or in iOS Settings.
• The 11:11 circle: leave in the You tab ("Leave the circle") or from the unsubscribe link in any circle email. To have your address deleted entirely, including one you entered on the website, email us.
• Subscription: manage or cancel in your Apple ID settings (Settings → Apple ID → Subscriptions).
• Depending on where you live (for example California, the EU/UK), you may have additional rights to access, correct, delete, port, or restrict the use of your information, and to complain to a regulator. Contact us at [email protected] and we will respond within the time the law requires. [Counsel: decide launch geography; if EU/UK users are in scope, add the lawful-basis table, international-transfer language (SCCs), and a representative where required.]

7. Security

Data travels over encrypted connections (TLS). Access tokens are random, stored only as hashes on our servers, and rotate regularly. Your name and date of birth are removed from your device as soon as our server has computed your numbers. Sign-in tokens are kept in your device's secure keychain. Our servers run on Fly.io with encrypted storage and automatic backups. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as the law requires.

8. Changes

We will post changes here and update the effective date. For material changes we will notify you in the app before they take effect.

9. Contact

Flip LTD, C/o Polaris Corporate Services FZ-LLC, S18W1002, Shed No. 18 - Al Hulaila FZ, Al Hulaila Industrial Free Zone, RAK, United Arab Emirates. Email: [email protected].