Sound Master: Kids Music Game
Last updated 20 September 2026
Sound Master: Kids Music Game is made by HYM. It is a music game for young children, roughly ages 3 to 8, and this page is written for the grown-up who installs it. It describes two versions. The iPhone and iPad version 1.0, dated 23 August 2026, collects nothing about you or your child, shows no advertising, contains no advertising, analytics or tracking software, and makes no network requests of its own. The Android version 1.2, dated 20 September 2026 and distributed through Google Play, the Amazon Appstore and the Galaxy Store, is free and shows an occasional full screen advertisement, delivered by the two advertising partners named below under the strictest child directed settings that Google offers: contextual ads only, no advertising identifier, no profiling and no personalised advertising. Everything those ads involve is listed on this page. Game progress is saved on the device itself and is not sent to us on either platform: there is no code in the app that sends it, and we run no server that could receive it. The one thing we ever receive is an email you choose to send us, and IF YOU EMAIL US says exactly what happens to it.
This policy covers the Sound Master app on iPhone, iPad and Android, the support website you are reading it on, and the email address at the end of this page.
Where a sentence says the iPhone and iPad version, it means version 1.0 of the app for iOS. Where it says the Android version, it means version 1.2 for Android from Google Play, the Amazon Appstore or the Galaxy Store. Apps change; when this one does, this page changes with it, and CHANGES TO THIS POLICY explains in what order. The page that described version 1.0 on both platforms is kept online, unchanged, at https://sound-master-support.vercel.app/privacy-1.0.html and is linked at the foot of this page.
It does not cover the App Store, Google Play, or your device's operating system. Those are run by Apple and Google under their own privacy policies, and they handle things such as installing the app and delivering updates.
The app is developed and published by HYM, the trading name of Hezi Medina, Holland 6, Afula, Israel. Telephone: +972 50 848 1805. Email: webhym@gmail.com. We are the operator responsible for the app and the data controller for it. That email address reaches a person, and it is the address to use for anything on this page.
For the Android version, two advertising companies have software inside the app and may receive the technical information described under WHAT ADS MEAN FOR YOUR CHILD'S DATA whenever they serve an ad. They are operators of the app in the sense of the United States Children's Online Privacy Protection Act, and they are: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, which serves ads through its AdMob service (privacy policy: https://policies.google.com/privacy, and how Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites); and Kidoz Ltd., a children's advertising network whose privacy policy and contact details are at https://www.kidoz.net/privacy-policy. Both are on Google Play's list of self certified advertising partners for apps made for families, and both work under written terms with us: Google under the AdMob terms and its requirements for apps made for families, Kidoz under its publisher agreement and its child directed network rules. As COPPA permits, we list our own full contact details as the operator that answers every question about all of the operators named here; each partner's own contact details are on the pages linked above.
No other company has code inside the app. An ad served by Kidoz may be filled through the advertising companies that Kidoz works with. Those companies are listed by name in the app-ads.txt file published at the developer website shown on our Google Play listing; each of them receives nothing beyond what an ad request carries, as described below, and each is bound by Kidoz's child directed network terms. If a company ever gets code inside the app, it will be named in this section before the version that includes it is released.
Two more companies are involved in the things around the app rather than in the app itself: Google, which runs the Gmail mailbox behind our support address, and Vercel, which hosts this website. Both are described below, under IF YOU EMAIL US and ABOUT THIS WEBSITE.
Version 1.0 for iPhone and iPad does not collect, receive, transmit or share any information about a child or an adult. There is no account to make, nothing to sign up for and nothing to log in to. It contains no advertising, no advertising software, no analytics and no tracking code, and it makes no network requests of its own: every level, sound and picture is inside the app, and it plays the same with the device offline.
In detail: no name, no email address, no phone number, no birthday, no photo, no voice recording, no contacts, no location. The app does not read, create or transmit any persistent identifier: no advertising identifier, no device ID, no hardware serial number, no identifier derived from an IP address, and no storage entry that identifies anyone. It asks for no permission that you have to approve and it declares no tracking, so there is no App Tracking Transparency prompt. Its App Privacy declaration on the App Store says Data Not Collected, and that is exactly right.
Everything this version keeps on the device is the game state described under WHAT THE APP KEEPS ON THE DEVICE, and nothing else.
The Android version is free and supported by advertising. It shows an occasional full screen ad, and only at one moment: a beat after a child has left a level, the endless board or the free play keyboard and come back to the world map by their own tap, once they have stopped touching the screen, and only when enough activities have been finished. An ad is never shown when the app opens, never on the opening screen, never during a level, never on the way to the next level, never over the endless board or the free play keyboard, never inside settings, the sticker album or any other window, never behind the parent gate, never on exit, and never on the first three times the app is opened after installation.
The app also limits how often an ad may appear, on the device and without using any identifier. An activity means a level won, or an endless run with at least one correct round, that lasted at least twenty seconds. Before any ad there must be at least two activities finished in the current sitting and three since the previous ad, at least ninety seconds since the child's first tap in the sitting, and at least four minutes since the previous ad. There are at most two ads per sitting and at most four per day, counted on the device's own calendar. Ads served by Google are static images, text or rich media and never video. Every ad's content is capped at the rating for general audiences, every ad is shown as a separate full screen that is clearly marked as an ad, and the game's volume slider applies to ads too, so a game set to silent shows a silent ad.
The advertisements are served by the third parties named under WHO WE ARE, through their software built into the Android app. We do not sell advertising ourselves and we do not choose individual ads. Which of the two partners serves a given ad is decided by Google's ad mediation settings in our AdMob account and can change from one ad to the next. No partner other than the two named here will be added without this page being updated first.
Version 1.2 of the Android app has been submitted to the Amazon Appstore and to the Galaxy Store, and both of those listings declare the advertising. On Amazon Fire tablets and on Samsung devices, version 1.2 behaves exactly as described on this page for Google Play. On the date at the top of this page each of those two stores is still reviewing it, so the copy on sale there is still version 1.0, which contains no advertising software at all, until that review finishes.
Every ad request from the Android app is tagged as directed to children and as coming from a user below the age of consent, and the ad content is capped at the general audiences rating. As a direct result there is no personalised or interest based advertising, because ads are contextual only; there is no remarketing; and no behavioural profile of your child is built, by us or by our advertising partners. For ads served by Google, Google states that no requests are made to third party ad vendors such as measurement pixels or third party ad servers. An ad served by Kidoz may be filled through the advertising companies named in the app-ads.txt file described under WHO WE ARE.
There is no advertising identifier. The Android app does not request the AD_ID permission, and the Android Advertising ID is not collected or transmitted. Neither are SIM serial, build serial, BSSID, MAC, SSID, IMEI or IMSI. The app also switches off the app scoped identifier that Google would otherwise create in its place.
To deliver an ad, our advertising partners receive the following: the device's IP address, which allows an approximate, city level location to be inferred and is what the ad is transmitted to; in app interaction events such as an app launch or an ad view; diagnostic information about app and advertising software performance; and device identifiers that are not advertising identifiers, such as the App Set ID. This information is used only for delivering and measuring the ad, for capping how often an ad is shown, for aggregated reporting, and for fraud prevention and security. That is what the United States Children's Online Privacy Protection Rule calls support for the internal operations of an online service. These identifiers are not used or disclosed in order to contact any specific individual, to build a profile about any specific individual, for behavioural advertising, or for any other purpose.
Ad requests from the Android app carry no consent string, and the app explicitly requests Google's limited ads serving mode, which does not use cookies or device storage for advertising purposes. The advertising software does store a small amount of information on the device and read it back, including in the storage of the web view that renders an ad, but only for purposes that Google describes as strictly operational: delivering the ad, capping how often an ad is shown, and detecting invalid or fraudulent ad traffic. We disclose this here because no consent dialog is ever shown in this app. Every user is below the age at which consent can validly be given, so the app states that fact to Google rather than asking a child a question they cannot answer.
One more network request belongs to the advertising and is worth naming: when the child taps Start, from the fourth time the app is opened onward, Google's consent software checks with Google whether a consent message is required. It never is, because of the age tag, so nothing is displayed; the check itself sends the device's IP address to Google and stores its answer in a small file on the device.
As in any free app, an ad is displayed by the advertising software, and a tap on it, or on the small AdChoices mark that a Google ad carries, can open the advertiser's page or Google's explanation of the ad in Google Play or in a browser without passing the parent gate. Those are the only ways a child can leave the app on their own. Every ad has a close control. Nothing else in the app opens a web page, a store page or another app, and the support email address in the About window is plain text rather than a link for that reason. Version 1.0 of this page promised a stronger gate for anything that leads out of the app. An ad is drawn by the advertising software and its tap through cannot be gated by us, so that promise is replaced by the limits on ads described above.
The app saves your child's progress so they can carry on where they left off. It is kept in the app's own storage on the device, and it is only game state. Here is the whole list: which levels are unlocked, the stars earned in each level, the total number of stars, the best endless mode score, the chosen instrument, which instruments have been played, the achievements earned, the sound volume, whether visual cues are switched on, and the chosen language. There is no name, no age, no identifier, no timestamp, no location and no typed text in it. Nothing in it points back to your child.
The app is a small web app running in its own window, so this is written to that window's local storage, the same mechanism a web page uses for a cookie, but private to the app, readable by nothing else, and never sent to a website. Three entries are written for the game: the save, a spare copy of the previous save, and, only if a save is ever found unreadable, the unreadable text itself, kept so that a damaged save is not thrown away. The European rules on storing information on a device allow this without asking you, because it does only the one thing your child asked the app to do: continue the game.
The Android version keeps a few more things, in a separate file, for the advertising: a count of launches, the number of activities finished since the last ad, the number of ads shown today and the time of the last ad, so the limits under THE ANDROID VERSION: ADVERTISING can be enforced; the flag that tells the advertising software to use limited ads; and the small file written by Google's consent software. They contain no identifier. They are deliberately left out of Android's backup and device to device transfer, so a new device starts with fresh counters, while the game progress is backed up as before under your device's own backup settings.
Whenever the app has no supported language saved, it reads the language your device is set to, so the game starts in a language your child understands, and it saves that choice with the settings above. That reading happens on the device and goes nowhere. None of this reaches us: the app contains no code that transmits it, and we run no server that could receive it.
Uninstalling the app removes everything described above, on both platforms. There is nothing about your child on our side to delete, because nothing about your child ever reaches us; if you have emailed us, see IF YOU EMAIL US. What our advertising partners hold is covered under PARENTS' RIGHTS.
Inside the app, Reset Progress sits behind a parent gate and returns the game to its starting state, keeping only the language setting. One caveat we would rather state than hide: a reset writes a fresh starting state, it does not wipe the storage. The spare copy still holds the pre reset progress until the next save replaces it, and if an unreadable save was ever set aside, that third copy stays until the app is removed. On Android the advertising counters are not touched by a reset either. If you want it all gone rather than replaced, uninstall the app.
If your device backs itself up, to iCloud or to Google for example, a backup made before you uninstalled may still contain the save. That copy is governed by your backup's own settings, not by the app.
The app has no sign in, no accounts, no in app purchases and no subscriptions, on either platform. We do not collect names, email addresses, photographs, voice recordings, contacts or precise location. We do not handle payments and we do not see card details.
There is no analytics software of our own in either version. Nothing measures which buttons your child taps, how long they play or how often they open the game, beyond the progress list above and, on Android, the advertising counters, both of which stay on the device. There is no crash or performance reporting tool of ours, no attribution tool and no social network integration. Apple and Google give us summary reports about the app, how many people installed it, in which countries and on which kinds of device, and reports about crashes, along with any review a person chooses to write publicly. None of it identifies your child to us.
The iPhone and iPad version makes no network requests of its own and does not need an internet connection. The Android version connects to the internet only for the advertising: to fetch an ad from the advertising partners named above, to report that an ad was shown, to fetch the advertising software's own configuration, and to run the consent check described under WHAT ADS MEAN FOR YOUR CHILD'S DATA, all over encrypted connections. The game itself needs no connection: every level, sound and picture is inside the app, and when the device is offline the game plays exactly the same, without ads.
The app is built with Capacitor, an open source framework that wraps the game as a phone and tablet app. It uses one Capacitor plugin for start up and back button handling, and on Android a second one, written by us, that connects the game to the advertising software described above. On iPhone and iPad the framework also carries an inert compatibility layer called Cordova. Apart from the advertising bridge, none of these is an advertising, analytics or tracking component, and none is configured with any server address.
Your device and the app stores still do their own work over the network, installing the app, downloading updates and whatever your operating system does on its own, under Apple's and Google's policies rather than ours.
The iPhone and iPad version asks for no permission that you have to approve. It declares no use of the camera, the microphone, the photo library, location, contacts, the calendar, motion sensors, Bluetooth, the local network or speech recognition, and it declares no tracking, no tracking domains and no collected data types in its privacy manifest.
The Android version requests two permissions, INTERNET and ACCESS_NETWORK_STATE, which it needs to fetch an ad. Android grants both automatically at install. The advertising software built into the app also declares two standard Android permissions, WAKE_LOCK and FOREGROUND_SERVICE, which its libraries declare for scheduled background work; the app itself never uses them. Neither of them gives access to any personal information, and Android does not ask you to grant them. The app does not request the advertising ID permission, and it removes that permission from the advertising software's own declaration on purpose. It does not request camera, microphone, contacts, location, storage or any other permission that touches your data or your device's sensors. The only other entry in its permission list is a private one, generated by Android's support library, that stops other apps from sending messages to its internal components and grants nothing.
On both platforms the things the app does with the device need no permission and reveal nothing about the device or the person holding it: it plays sound through the ordinary audio output, reads the device language setting as described above, and notices when it is put into the background so it can pause.
The app is made for young children, so we treat everyone who uses it as a child and design to the strictest rule that applies. There is no age question and no attempt to work out anybody's age, because the answer would change nothing about how the app behaves.
We build the app to meet the rules that govern apps made for children: the United States Children's Online Privacy Protection Act, including its 2025 amendments; the GDPR, including Article 8 and the European rules on storing or reading information on a device; the UK Children's Code; and Apple's and Google's own requirements for apps whose audience is children, including Google Play's Families policy and its list of self certified advertising partners.
The app has no chat, no messaging, no accounts, no user generated content and no social features, so nothing your child does in the game can be seen by another person.
The app is directed to children under 13. On iPhone and iPad it collects no personal information at all, so no parental consent is being sought and none is required.
On Android, the only information collected in connection with the app is the persistent and technical information listed under WHAT ADS MEAN FOR YOUR CHILD'S DATA, and it is collected only for support for the internal operations of the service. Those internal operations are, specifically: serving contextual advertising, capping how often an ad is shown, measuring and reporting advertising in the aggregate, and protecting against invalid traffic, fraud and security threats. Because no other personal information is collected, and because these identifiers are never used to contact or profile an individual, verifiable parental consent is not required for this collection under 16 C.F.R. section 312.5(c)(7).
The means we use to ensure that these identifiers are not used or disclosed to contact a specific individual, including through behavioural advertising, or to build a profile are: every ad request is tagged as child directed and as coming from a user under the age of consent; the app does not hold the advertising ID permission, so no advertising identifier exists to transmit; the app requests Google's limited ads mode and disables Google's app scoped publisher identifier; the app keeps no account, no profile and no server; and our partners are bound by their own children's advertising programmes.
Our data retention policy, as COPPA asks us to state it, is set out under HOW LONG THINGS ARE KEPT.
Every user of the app is below the age of digital consent in every EEA member state, so we do not rely on consent as a lawful basis and we do not ask a child to consent to anything. On Android, ad requests are tagged as coming from a user below the age of consent, which suppresses any consent form and restricts serving to limited, non personalised ads. A consent message exists in Google's system for this app, as Google requires, but it is never displayed.
For the processing we cause by requesting an ad, we rely on our legitimate interest in delivering and securing the advertising that funds a free children's app. We have balanced that interest against the interests and rights of the child, as the UK Children's Code asks: the processing is limited to contextual delivery and fraud prevention, it is bounded by the child directed settings described above, and it stops the moment the app is uninstalled. Each advertising partner is an independent controller of what it receives and states its own lawful basis in the policy linked under WHO WE ARE. On iPhone and iPad no personal data is processed at all.
As a parent or guardian you have the right to review any personal information collected from your child, to have it deleted, and to refuse to allow any further collection. Those rights stand whatever the app does.
You can see what the app has saved, because it is on the screen in front of you: the unlocked levels, the stars, the achievements and the settings are the save. The recovery copies described above hold earlier versions of that same list and nothing else, and on Android the advertising counters hold numbers and nothing else. There is no category of information about your child that is kept from you.
You can delete it yourself, at any time, without asking us. Uninstalling the app removes everything it stored. Reset Progress, behind the parent gate, replaces the visible save and leaves the recovery copies and the advertising counters in place until they are overwritten or the app is removed. A parent who wishes to stop all ad related data collection immediately can uninstall the Android app.
To ask what information relating to your child the Android app may have caused our advertising partners to collect, to request its deletion, or to refuse any further collection, write to webhym@gmail.com. We will respond within 30 days. Because we hold no data ourselves, a deletion request will be forwarded to the relevant advertising partner, and we will tell you what we did. We hold no account, no record and no file about your child; the only thing we ever hold is an email you choose to send us and our reply, and IF YOU EMAIL US explains your rights over that. If you are in the UK or the European Economic Area, you may also complain to your national data protection authority.
Reset Progress, the one control that clears saved progress, sits behind a parent gate: a short multiplication question that a young child is not expected to answer. It is there so that a three year old cannot wipe their own stars by tapping around. It is a convenience control for parents rather than a security measure, and an older child who can do the sum will get past it.
The ordinary settings, volume, visual cues, language and the chosen instrument, are not behind the gate. They change how the game plays, not what your child has earned. Nothing that costs money sits behind this gate, because there is nothing of that kind in the app. The one thing that leads out of the app and does not pass the gate is a tap on an ad on Android, described under A TAP ON AN AD.
An email you send us is information you hand over on purpose, and this is what happens to it. If you write to webhym@gmail.com we receive your email address and whatever you put in the message. We use it only to answer you and to fix problems in the app. We do not use it for marketing, we do not add it to any list, and we do not sell it or hand it to anyone for their own purposes.
Our legal basis under the GDPR is our legitimate interest in replying to people who contact us. You can object to that at any time; say so and we will stop and delete the message. You can also ask for a copy of what the mailbox holds about you, ask us to correct it, restrict it or delete it, and we will answer within one month.
The mailbox is a Gmail account, so Google stores and carries the message on our behalf as our email provider, on Google's systems, including outside the UK and the European Economic Area, under Google's own terms. Please do not include a child's personal details in a support email. We do not need them; a description of the problem is enough.
This page is hosted for us by Vercel. Like any web host, its servers receive the technical details of each request, the IP address of the device that opened the page, the browser type and the page asked for, and hold them in ordinary operational logs for a short period, for security and reliability. We do not export those logs, and we do not use them to identify anyone or to build a picture of anyone.
The site has no analytics, no cookies, no trackers and no fonts or images loaded from anywhere else, and it stores nothing on your device.
This is our retention policy. No personal information is collected from children by us through the app, so none is retained by us. There is no server, no database, no backup and no log at our end holding anything about a child from the app. We keep information only for as long as it is reasonably necessary for the purpose it was collected for, and then delete it.
The technical information that our advertising partners receive to deliver an ad on Android is retained by them under their own published retention policies, linked under WHO WE ARE, and we have no copy of it.
The game data on the device is kept for one purpose only, letting your child continue their game, and only for as long as the app is installed. The visible save stays until it is replaced by play or by a reset; the spare copy is replaced the next time the game saves; the unreadable save copy, if one was ever created, stays until the app is uninstalled. On Android the advertising counters stay until the app is uninstalled. Uninstalling removes all of it. We keep no copy of any of it anywhere.
Emails sent to the address below are deleted within twelve months of the question being answered, and sooner if you ask. Our website host keeps its own request logs for a short period under its own arrangements, as described above; we keep no copies of them.
The app transmits nothing to us, and we hold no children's information from it, so there is no database of ours holding your child's data that could be breached. Information that was never collected cannot be stolen from us. That is a statement about how the app is built, not a guarantee about the world. Ad requests on Android travel over encrypted connections to partners who publish their own security commitments.
The game data on the device is protected by the device's own protections, the same as every other app's data, which means anyone who can unlock the device, or restore its backup, can see the levels, stars and settings stored on it. Since that is all the data is, the practical stakes are low, but keeping the device updated and locked with a passcode is still the sensible thing to do. No security anywhere is perfect, and we would rather write that plainly than promise something nobody can promise.
Each released version of the app is described here, labelled with the version numbers and the date at the top of this page. The page that described version 1.0 on both platforms stays online, unchanged, at https://sound-master-support.vercel.app/privacy-1.0.html, so you can always read the description that matches the copy installed on your device. Releases roll out over several days, so during that period the previous description still applies to a copy that has not updated yet.
If a future version changes what is collected, transmitted or shared, this page will be rewritten to describe it, and every store declaration will be updated to match, before that version starts reaching devices: Apple's App Privacy answers, Google Play's Data safety form, Google Play's Ads declaration and Google Play's Target audience and content section, and the matching declarations in the Amazon Appstore and in the Galaxy Store. Where a change of that kind would require a parent's verifiable consent, or would be limited by the rules for child directed apps, we will meet those requirements before collecting anything, not afterwards.
Changing this page does not change what an app already installed on your device does. A version that behaves differently is a new version, and it arrives through the App Store, Google Play, the Amazon Appstore or the Galaxy Store. We will not use remote configuration to switch on data collection, or to add an advertising partner not named here, inside a version already installed: a change of that kind arrives as a new version, described here first.
Sound Master: Kids Music Game is made and published by HYM. HYM is the data controller for this app.
Hezi Medina, Holland 6, Afula, Israel. Telephone: +972 50 848 1805. Email: webhym@gmail.com.
The current version of this policy is published at https://sound-master-support.vercel.app/privacy.html. Questions from parents about anything on this page are welcome.