Privacy · Brumm Kids

Short, and in full.

Who is responsible

The person in the Impressum (the legal notice, in German), reachable at hello@brumm.ai. The same person as for the rest of brumm.ai; the grown-up pages have their own privacy page. This page is the English version of the German one at brumm.ai/de/kids/privacy; both say the same.

Visiting the pages

The pages and the app are served by a server of Render Services, Inc. (San Francisco, USA) in its Frankfurt region. Like every web server it receives your network address, the time, the page and your browser's identifier with every request and keeps them briefly in its logs to run the service and detect abuse; to protect against abuse it also keeps your address in memory for up to an hour. Render is a processor; where data is processed in the USA this rests on the EU standard contractual clauses or the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR.

For the count, the server writes one line per page it serves: the time, the page, the website you came from (never the full address), whether the request looks like a program (a search engine, a link preview), and the country your network address points to (looked up in a copy of the free country database by DB-IP on our server; IP Geolocation by DB-IP). The address itself is not stored. To tell one person from ten, the server forms a 12-character code per visit from the address and the browser identifier, with a key that lives only in the server's memory and is replaced every night: the same code on the same day, a different one the next, after that traceable by nobody. Legal basis: Art. 6 (1) (f) GDPR, our interest in knowing how many people use this and from where, without cookies and without a tracking service. Two things a page fetches from the server along the way are counted the same way, once per person, page and day, so we see how far people get: the first sound (Play was pressed) and a link that was made (something was shared); on a tool page also the part that reads the humming and only loads on the first tap. Nothing runs on the phone for this.

The app

Melodies, songs and settings live in the browser's storage on the phone; that storage is needed for the app to work at all and holds nothing for anyone else (§ 25 (2) TDDDG, the German law on storage on devices). The recording made while humming becomes notes on the phone; it does not leave it unless a grown-up shares a song (below). There is no usage log and nothing about the device is sent. There are no cookies.

A shared link

When a grown-up makes a link behind the gate, the app sends the running track to the server: the melodies as notes, sounds and settings, how it was played (which shapes and dot moves were heard longest; read on the phone from a log that never leaves the phone), and the recordings of the melodies that play as a voice. If a voice is among them, the grown-up confirms first that they are the parent or guardian and agree (Art. 6 (1) (a) and Art. 8 GDPR, the consent of the holder of parental responsibility). Optional: a title and a first name or nickname for the line the recipient reads, and the language the link was made in. Nothing about the phone. The server stores this at Render in Frankfurt, apart from everything else; it flows into no analysis and no AI tool and is not listed. Whoever has the link can listen to the track; the link's page is blocked for search engines. The link stays until you delete it: under Share are all links made on this phone, each with Delete; then it is gone from the server at once, the voice too, and only an empty marker remains that the link existed. For this the phone keeps a random key for every link in the browser's storage (§ 25 (2) TDDDG: only for the deletion you ask for). If the browser data has been cleared, send us the link and we delete it. This is how consent can be withdrawn at any time.

If you write to us

Mail to hello@brumm.ai goes through ImprovMX (improvmx.com), a forwarding service, and lands in a Gmail mailbox (Google). We keep what you write only as long as the conversation needs it. Legal basis: Art. 6 (1) (b) and (f) GDPR.

Your rights

Access, rectification, erasure, restriction, objection and withdrawal of consent (Art. 7 (3), Art. 15 to 21 GDPR) by mail to hello@brumm.ai. For the count we cannot find anyone, because we have nothing to find them with (Art. 11). Complaints: the Berlin Commissioner for Data Protection and Freedom of Information.

As of 2026-10-21. This page changes when the app changes, and then says what is new.