Version: 04.08.2026
Scope: Mobile App "Aumio Kids" (iOS/Android)
1. Controller
Aumio GmbH
Mühlenstraße 8a
14167 Berlin
Germany
This privacy policy is also available online at:
https://kids.aumio.com/de/datenschutz
2. Data Protection Officer
External Data Protection Officer (DPO): Graham Reilly (Workstreet)
E-Mail: graham.reilly@workstreet.com
Internal Data Protection Coordinator: Steffen Scherf (Aumio GmbH)
E-Mail: datenschutz@aumio.de
3. General Information on Data Processing
We process personal data to provide the app "Aumio Kids". "Aumio Kids" is an audio app for children featuring bedtime stories, meditations, soundscapes and other relaxation content to promote sleep and wellbeing.
Processing is based on the following legal bases, depending on the function:
4. Consent
The consent screen is located in the onboarding. Services (analytics/tracking/third-party SDKs) are only started after consent has been given.
Consent is given in accordance with GDPR / TTDSG only by the legal guardian.
Consent can be withdrawn at any time with effect for the future (via app settings or by email to datenschutz@aumio.de).
5. Target Audience / Age Restriction
"Aumio Kids" is aimed at children aged approx. 0–14 years and their parents and legal guardians. Registration and account management is performed by a legal guardian.
The app does not collect data that enables identification of the child beyond what is required for the provision of content.
Aumio Kids is listed in the kidSAFE program.
6. What Data We Process
6.1 Account and Profile Data
Purposes: Providing user account, onboarding, app functionality.
Legal basis: Art. 6(1)(b) GDPR.
6.2 Usage Data
Purposes: Providing app functionality, personalization, optimization.
Legal basis: Art. 6(1)(b) GDPR (where required for provision); Art. 6(1)(f) GDPR (legitimate interest in product improvement).
6.3 Device and Technical Data
Purposes: Operation, security, error analysis, push delivery, stability.
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.
6.4 Analytics Data (only after consent)
Depending on integration, we process events related to usage and stability of the app, e.g.:
Purposes: Product improvement, stability, bug fixing, campaign measurement.
Legal basis: Art. 6(1)(a) GDPR (consent).
Note: Analytics/tracking services are only started after consent.
6.5 Payment Data
Subscriptions and payments are handled through App Store (Apple) / Play Store (Google). We receive billing/transaction information but no complete payment data (e.g. no credit card numbers).
Purposes: Subscription management, activation of premium features.
Legal basis: Art. 6(1)(b) GDPR.
6.6 Contact Form / Support
When contacting us (e.g. by email or contact form), we process:
For forms, we use services from Typeform (TYPEFORM S.L., Barcelona, Spain). Typeform collects usage data when the form is used (e.g. IP address, browser type, operating system).
Purposes: Processing inquiries and bug reports.
Legal basis: Art. 6(1)(a) GDPR (consent for contact forms); Art. 6(1)(b) GDPR (contract/support).
7. App Access Permissions
To provide the service, the app requires the following access permissions. Which permissions are specifically requested depends on the operating system, OS version and functions used. Permissions can be granted or withdrawn at any time in the system settings.
7.1 Android
7.2 iOS
Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(f) GDPR (legitimate interest).
8. Recipients / Data Processors
We use service providers as data processors. Relevant recipients:
Advertising/Ads: No advertising or ads SDKs for displaying personalized advertising are used. The app is ad-free.
9. Third Country Transfers
For transfers to third countries, appropriate safeguards pursuant to Art. 46 GDPR are used, in particular EU Standard Contractual Clauses (SCC).
Where providers are certified under the EU-US Data Privacy Framework, the transfer is based on this framework.
The following services may involve data transfers to third countries (in particular the USA):
10. Storage & Retention Periods
11. Push Notifications
Technology: Firebase Cloud Messaging (FCM) and Apple Push Notification Service (APNs); additionally CleverTap Push/in-app messages.
Content: Reminders, notifications about new content, app-relevant information.
Opt-in/Opt-out: Via operating system settings and app settings.
12. Rights of Data Subjects
Data subjects have – where applicable – the following rights:
Requests can be directed to datenschutz@aumio.de.
12a. Automated Decisions
No automated decision-making with legal or similarly significant effect within the meaning of Art. 22 GDPR takes place.
13. Deletion & Data Export
Account deletion: Users can request deletion of their account and associated data by email to datenschutz@aumio.de.
Processing period: We process deletion and access requests typically within 30 days.
Identity verification: To prevent misuse, it may be necessary to appropriately verify account association (e.g. confirmation via registered email address).
Data export / access: A data export or access request can also be made by email. Data is provided in a common electronic format.
14. Security Measures
We implement technical and organizational measures to protect data, including:
15. Newsletter
Newsletters can be subscribed to with consent. We use the double opt-in procedure for sign-ups.
Required information: email address. Consent can be withdrawn at any time (unsubscribe link in every email or by email to datenschutz@aumio.de).
We may analyze user behavior in the newsletter (opens, clicks) for optimization. This tracking can be objected to at any time.
Legal basis: Art. 6(1)(a) GDPR (consent).
16. Changes
The current version is always available in the app and online.
Follow us
.png)