Sound Master: Kids Music Game
Last updated 23 August 2026
Sound Master: Kids Music Game is made by HYM. It is a music game for young children, roughly ages 3 to 8, and this page is written for the grown-up who installs it. This policy describes version 1.0.0 of the app, dated 23 August 2026. In that version the app collects nothing about you or your child, shows no advertising, contains no analytics or tracking code, and makes no network requests of its own. Game progress is saved on the device itself and is not sent to us: there is no code in the app that sends it, and we run no server that could receive it. The one thing we ever receive is an email you choose to send us, and IF YOU EMAIL US says exactly what happens to it. This page describes the version named above. It is a description of what that version does, not a promise about versions that do not exist yet; CHANGES TO THIS POLICY sets out the rule we hold ourselves to for anything later.
This policy covers the Sound Master app on iPhone, iPad and Android, the support website you are reading it on, and the email address at the end of this page.
Everything written here describes version 1.0.0 of the app, dated at the top. Where a sentence says "this version", it means that build and no other. Apps change; when this one does, this page changes with it, and CHANGES TO THIS POLICY explains in what order.
It does not cover the App Store, Google Play, or your device's operating system. Those are run by Apple and Google under their own privacy policies, and they handle things such as installing the app and delivering updates.
The app is developed and published by HYM ("we"). For the version described here, HYM is the only operator of the app and the only data controller for it: no other company receives information from the app, and no other company has code inside it that collects data.
Two companies are involved in the two things around the app rather than in the app itself: Google, which runs the Gmail mailbox behind our support address, and Vercel, which hosts this website. Both are described below, under IF YOU EMAIL US and ABOUT THIS WEBSITE.
If a future version ever includes a third party that collects anything from the app — an advertising network, for example — that company is an operator too, and its name, postal address, telephone number and email will be listed in this section before that version is released.
How to reach us: HYM, by email at webhym@gmail.com. That address reaches a person, and it is the address to use for anything on this page.
Nothing. This version of the app does not collect, receive, transmit or share any information about a child or an adult. There is no account to make, nothing to sign up for and nothing to log in to.
In detail: no name, no email address, no phone number, no birthday, no photo, no voice recording, no contacts, no location. There is nowhere in the game to type a personal detail even if you wanted to. The app does not read, create or transmit any persistent identifier — no advertising identifier (IDFA on iPhone and iPad, or the advertising ID on Android), no device ID, no hardware serial number, no identifier derived from an IP address, and no storage entry that identifies anyone. That last point matters: under the United States Children's Online Privacy Protection Act a persistent identifier counts on its own as a child's personal information, and this version reads none.
This version does no profiling. Nothing about how your child plays is used to build a picture of them or to target anything at them. We do not sell personal information and we do not share it for advertising: in this version there is nothing to sell and no one to sell it to.
Because the app collects nothing, our privacy declarations for this version report the same thing: no data collected and no data shared, on Apple's App Privacy questionnaire and on Google Play's Data safety form. If you ever find a store listing and this page disagreeing, treat the stricter of the two as correct and tell us at webhym@gmail.com.
The app saves your child's progress so they can carry on where they left off. It is kept in the app's own storage on the device, and it is only game state. Here is the whole list: which levels are unlocked, the stars earned in each level, the total number of stars, the best endless-mode score, the chosen instrument, which instruments have been played, the achievements earned, the sound volume, whether visual cues are switched on, and the chosen language.
That is all of it. There is no name, no age, no identifier, no timestamp, no location and no typed text in it. Nothing in it points back to your child.
The app is a small web app running in its own window, so this is written to that window's local storage — the same mechanism a web page uses for a cookie, but private to the app, readable by nothing else, and never sent to a website. Exactly three entries are written and no others: the save, a spare copy of the previous save, and, only if a save is ever found unreadable, the unreadable text itself, kept so that a damaged save is not thrown away. The European rules on storing information on a device allow this without asking you, because it does only the one thing your child asked the app to do: continue the game.
Whenever the app has no supported language saved, it reads the language your device is set to, so the game starts in a language your child understands, and it saves that choice with the settings above. That reading happens on the device and goes nowhere.
None of this reaches us. The app contains no code that transmits it, and we run no server that could receive it. We cannot see it, and we could not retrieve it if we wanted to.
Uninstalling the app removes all three entries described above, and everything in them. There is nothing about your child on our side to delete, because nothing about your child ever reaches us; if you have emailed us, see IF YOU EMAIL US.
Inside the app, Reset Progress sits behind a parent gate and returns the game to its starting state, keeping only the language setting.
One caveat we would rather state than hide: a reset writes a fresh starting state, it does not wipe the storage. The spare copy still holds the pre-reset progress until the next save replaces it, and if an unreadable save was ever set aside, that third copy is not replaced by play at all and stays until the app is removed. Nothing inside the app deletes these entries outright. If you want the progress gone rather than replaced, uninstall the app.
One more: if your device backs itself up, to iCloud or to Google for example, a backup made before you uninstalled may still contain the save. That copy is governed by your backup's own settings, not by the app.
This version of the app contains no advertising. There are no banners, no interstitial or video ads, no rewarded ads, no ad network, no mediation software and no advertising identifier.
It contains no analytics either. Nothing measures which buttons your child taps, how long they play or how often they open the game — beyond the progress list above, which stays on the device. There is no crash or performance reporting, no attribution or measurement tool, no social network integration and no third-party component of any sort that collects data.
In this version, every sound is generated by the app on the device as it plays: no music or sound file is ever downloaded. The pictures and the lettering are inside the app package rather than fetched from an image service or a font service.
If we ever share information with a third party, we will name that party on this page before the version that does so is released, and we will require in writing that it protects the information at least as strongly as this policy then requires, including the specific limits that apply to apps made for children. Today no third party receives anything from the app.
The app is built with Capacitor, an open-source framework that wraps the game as a phone and tablet app, and it uses one Capacitor plugin, for start-up and back-button handling. On iPhone and iPad that framework also carries a compatibility layer called Cordova; on Android the app includes three of Google's standard AndroidX interface libraries that ship with almost any Android app; and the build tool adds a small start-up helper to the code. None of these is an advertising, analytics or tracking component, and none is configured with any server address.
We should be straight about the limit of what we can check. Capacitor's own iOS code is fetched from its public repository when the app is built, so we cannot inspect its runtime behaviour in our own files. What we can say is what we do: our code never asks it to contact a server, and the app registers none of its networking features. The framework and the build tool each include a general-purpose helper capable of making a request; nothing in the game ever calls either one.
Apple and Google run the stores the app is downloaded from, and the download and any update go through them, as they do for every app. They give us summary reports about the app — how many people installed it, in which countries and on which kinds of device, and reports about crashes — along with any review a person chooses to write publicly. None of it identifies your child to us. What Apple and Google themselves collect is covered by their own privacy policies.
We do not handle payments and we do not see card details.
This version of the app makes no network requests of its own. It does not need an internet connection: every level, sound and picture is inside the app, and it plays the same with the device offline or in airplane mode. There is no server it was built to talk to, ours or anyone else's, and no address in the game to connect to — the only web address anywhere in the app's code sits inside a licence notice in the framework's comments, and nothing opens it.
Three footnotes, because they are the things a technically-minded parent will find. First, your device and the app stores still do their own work over the network — installing the app, downloading updates, and whatever your operating system does on its own — under Apple's and Google's policies rather than ours.
Second, the Android package declares the standard network permission that comes with the framework the app is built on. It is granted automatically at install and the app never uses it.
Third, the iOS package still contains a legacy compatibility file from the framework's project template carrying a blanket "allow any origin" network line. It has no effect here: the plugin system it belongs to is not installed and its two support files are empty. We would rather name it than have you find it, and we intend to remove it in a future build.
This version asks for no permission that you have to approve, and it cannot show a permission prompt, because it declares no use of the camera, the microphone, the photo library, location, contacts, the calendar, motion sensors, Bluetooth, the local network or speech recognition. A phone or tablet makes an app ask you before it can reach any of those, and this app has no such request built into it. (The Android package declares the framework's standard network permission, which is granted automatically and which the app never uses; see INTERNET USE.)
On iPhone and iPad the app also declares no tracking. There is no App Tracking Transparency prompt, because there is nothing to track. The app's iOS privacy manifest declares no tracking, no tracking domains and no collected data types; the single system feature it declares is the app's own settings store, which the framework reads for its own configuration inside the app.
The things the app does do with the device need no permission and reveal nothing about the device or the person holding it: it plays sound through the ordinary audio output, set so the music can still be heard when the ringer switch is silent, and this version records nothing. It reads the device language setting as described above, and it notices when it is put into the background so it can pause. It also asks the device for a short buzz on some taps; iPhones and iPads ignore that request, and the Android build does not hold the vibration permission, so in practice this version produces no buzz at all.
This version has no payment step, so no payment details are entered in the app and none reach us. If a purchase is ever added, it would run through Apple's or Google's own payment system, we would never see or hold your card details, and this page would say so before that version is released.
The app is made for young children, so we treat everyone who uses it as a child and design to the strictest rule that applies. There is no age question and no attempt to work out anybody's age, because the answer would change nothing about how this version behaves.
We build the app to meet the rules that govern apps made for children: the United States Children's Online Privacy Protection Act (COPPA), including its 2025 amendments; the GDPR, including Article 8 and the European rules on storing or reading information on a device; the UK Children's Code; and Apple's and Google's own requirements for apps whose audience is children.
COPPA requires a parent's verifiable consent before an app aimed at children collects a child's personal information, including a persistent identifier such as an advertising ID. This version collects none, so no consent is being sought from you and none is required. Nothing about a child is disclosed to anyone, because nothing leaves the device. There is no behavioural or targeted advertising and no profiling — in this version there is no advertising at all. The only information stored is the game state described above, kept on the device to do the one thing your child asked the app to do: continue the game.
This version has no chat, no messaging, no accounts, no user-generated content and no social features, so nothing your child does in the game can be seen by another person. Nothing in the game opens a web page, a store page or another app.
Reset Progress — the one control that clears saved progress — sits behind a parent gate: a short multiplication question that a young child is not expected to answer. It is there so that a three-year-old cannot wipe their own stars by tapping around. It is a convenience control for parents rather than a security measure, and an older child who can do the sum will get past it.
The ordinary settings — volume, visual cues, language and the chosen instrument — are not behind the gate. They change how the game plays, not what your child has earned.
Nothing that costs money or leads out of the app sits behind this gate in this version, because there is nothing of that kind in the app. If that ever changes, we will build a stronger gate for it rather than reuse this one.
As a parent or guardian you have the right to review any personal information collected from your child, to have it deleted, and to refuse to allow any further collection. Those rights stand whatever the app does; for this version they are unusually easy to exercise, because we hold nothing.
You can see what the app has saved, because it is on the screen in front of you: the unlocked levels, the stars, the achievements and the settings are the save. The two recovery copies described above hold earlier versions of that same list and nothing else, and they are not shown on screen. There is no category of information about your child that is kept from you.
You can delete it yourself, at any time, without asking us. Uninstalling the app is the action that removes all three copies; Reset Progress, behind the parent gate, replaces the visible save and leaves the recovery copies in place until they are overwritten or the app is removed.
There is no collection by us to refuse, because this version collects nothing. If that ever changes, this page will state how to refuse before the new version is released, and you can always write to webhym@gmail.com to refuse.
We hold no account, no record and no file about your child. The only thing we ever hold is an email you choose to send us and our reply; ask us and we will tell you what the mailbox holds about you, correct it, or delete it. Write to webhym@gmail.com, and we will answer within one month, as the GDPR requires. If you are in the UK or the European Economic Area, you may also complain to your national data protection authority.
The app collects nothing. An email you send us is different: it is information you hand over on purpose, and this is what happens to it. If you write to webhym@gmail.com we receive your email address and whatever you put in the message. We use it only to answer you and to fix problems in the app. We do not use it for marketing, we do not add it to any list, and we do not sell it or hand it to anyone for their own purposes.
Our legal basis under the GDPR is our legitimate interest in replying to people who contact us. You can object to that at any time — say so and we will stop and delete the message. You can also ask for a copy of what the mailbox holds about you, ask us to correct it, restrict it or delete it, and we will answer within one month.
The mailbox is a Gmail account, so Google stores and carries the message on our behalf as our email provider, on Google's systems, including outside the UK and the European Economic Area, under Google's own terms.
Please do not include a child's personal details in a support email. We do not need them; a description of the problem is enough.
One point worth stating plainly: a "Data Not Collected" declaration on the App Store describes what the app collects. It does not cover a message you choose to send us by email, which is why that message is described here instead.
This page is hosted for us by Vercel. Like any web host, its servers receive the technical details of each request — the IP address of the device that opened the page, the browser type and the page asked for — and hold them in ordinary operational logs for a short period, for security and reliability. We do not export those logs, and we do not use them to identify anyone or to build a picture of anyone.
The site has no analytics, no cookies, no trackers and no fonts or images loaded from anywhere else, and it stores nothing on your device.
This is our retention policy. No personal information is collected from children through the app, so none is retained by us. There is no server, no database, no backup and no log at our end holding anything about a child from the app.
The game data on the device is kept for one purpose only — letting your child continue their game — and only for as long as the app is installed. The visible save stays until it is replaced by play or by a reset; the spare copy is replaced the next time the game saves; the unreadable-save copy, if one was ever created, stays until the app is uninstalled. Uninstalling removes all three. We keep no copy of any of it anywhere.
Emails sent to the address below are deleted within twelve months of the question being answered, and sooner if you ask.
Our website host keeps its own request logs for a short period under its own arrangements, as described above; we keep no copies of them.
If a future version collects anything, the purposes, the reason we need it and the timetable for deleting it will be written into this section before that version is released.
This version transmits nothing, and we hold no children's information from it, so there is no database of ours holding your child's data that could be breached. Information that was never collected cannot be stolen from us. That is a statement about how the app is built, not a guarantee about the world.
The game data on the device is protected by the device's own protections, the same as every other app's data, which means anyone who can unlock the device — or restore its backup — can see the levels, stars and settings stored on it. Since that is all the data is, the practical stakes are low, but keeping the device updated and locked with a passcode is still the sensible thing to do. No security anywhere is perfect, and we would rather write that plainly than promise something nobody can promise.
If we ever hold information collected from children, we will put in place, and describe on this page, the written security programme that the rules for child-directed apps require.
Each released version of the app is described here, labelled with the version number and the date at the top of this page. Version 1.0.0 is the first release, so there is no earlier description to keep yet. From the next version onward, the page this one replaces stays online, dated and labelled with the app version it describes, and is linked at the foot of this page, so you can always read the description that matches the copy installed on your device.
If a future version adds anything that collects, transmits or shares information — advertising and its identifiers included — this page will be rewritten to describe it, and every store declaration will be updated to match, before that version starts reaching devices: Apple's App Privacy answers, Google Play's Data safety form, Google Play's Ads declaration, which puts a "Contains ads" label on the store listing, and Google Play's Target audience and content section. Releases roll out over several days, so during that period the previous description still applies to the copy on your device until it updates.
Where a change of that kind would require a parent's verifiable consent, or would be limited by the rules for child-directed apps set out under CHILDREN'S PRIVACY, we will meet those requirements before collecting anything, not afterwards.
Changing this page does not change what an app already installed on your device does. A version that behaves differently is a new version, and it arrives through the App Store or Google Play. Automatic updates are switched on by default on both, so a new version will usually install without asking you — which is why this page and the store release notes, not a prompt on your device, are where to see what changed. We will also not use remote configuration to switch on data collection or advertising inside a version already installed: a change of that kind arrives as a new version, described here first.
This page describes the version named at the top. It does not promise that future versions will behave the same way; it promises that this page will describe them first.
Sound Master: Kids Music Game is made and published by HYM. HYM is the data controller for this app.
HYM. Email: webhym@gmail.com.
The current version of this policy is published at https://sound-master-support.vercel.app/privacy.html. Questions from parents about anything on this page are welcome.