// Trust & Security Report
Popgun Labs Pty Ltd (trading as Splash / Splash Music)
Consumer AI music-creation and social-gaming products: the Splash Music mobile app (AI beat maker), the Splash on Roblox experience (in-game social music/skate world), and Kaimix / WEMIX ('wemixed') — an AI voice-to-music tool where a user hums, sings, or talks and the product builds a track around it, which supports collaborative 'remixing' of others' tracks.
Certifications held
0
Maturity
Startup
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 8 unconfirmed / not-held certifications
source: splashmusic.comNo public evidence. No trust center, security page, or SOC 2 mention found on splashmusic.com or kaimix.com; the site has no dedicated security/compliance page at all.
source: splashmusic.comNo public evidence. Privacy policy mentions only generic 'SSL certificates and other database security mechanisms', no formal ISO certification referenced.
source: splashmusic.comNo public evidence of an AI-governance certification anywhere on the vendor's site.
source: splashmusic.comNot applicable / no evidence. Splash is a consumer music/gaming product that does not process health data; privacy policy lists gameplay, contact, and device data only, with no HIPAA reference.
source: kaimix.comNo public evidence. Kaimix privacy policy mentions collecting 'financial information including credit card information' but does not state PCI DSS compliance or name a certified payment processor.
source: splashmusic.comPrivacy policy is written under the Australian Privacy Act 1988 and 'Australian Privacy Law'; no GDPR articles, EU representative, or lawful-basis language appear anywhere in the document, despite the app being distributed globally via the App Store, Google Play, and Roblox.
source: splashmusic.comNo public evidence; not applicable to this consumer product category.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
Not specified. Privacy policy states personal information may be disclosed 'outside of Australia to cloud providers' including Microsoft PlayFab, AWS, Google Cloud Platform, and Mailchimp, but does not commit to a specific data-residency region.
No explicit statement was found on whether user-submitted voice/audio (the core input to the Kaimix/WEMIX AI music feature) is used to train models. The company's own AI music tool (kaimix.com / wemixed.com) currently 302-redirects to https://splashmusic.com/maintenance/, indicating that product surface is offline or under maintenance at time of review, which also means its live privacy/terms text could not be directly inspected. This is an unresolved gap, not a confirmed 'no training' posture.
// Security controls
Encryption in transit
Vendor states use of 'SSL certificates and other database security mechanisms'; no further detail (e.g., TLS version, at-rest encryption specifics) is published.
splashmusic.comFormal security/compliance program
Not verified. No trust center, security whitepaper, or subprocessor list is published.
splashmusic.comChildren's privacy / COPPA posture
Not addressed in the privacy policy despite the flagship product being a Roblox experience, a platform with a large population of minor users.
splashmusic.com// Products & data scope
data: Roblox account linkage, gameplay data, chat logs, device/geolocation data (per Roblox platform + Splash privacy policy)
Governed by both Splash's own Terms/Privacy Policy and Roblox's platform-level Terms of Use and Privacy Policy; Roblox terms are separate from and not controlled by Popgun Labs.
data: Account, device ID, monetization info per app store listing; distributed via Apple App Store and Google Play
Listed on app stores under 'Splash Music: Beat Maker'; no separate security documentation found beyond the general splashmusic.com privacy policy.
data: User-submitted voice/audio (humming, singing, talking) used to generate a music track; also names, age, gender, postcode, contact and financial/credit-card info per Kaimix privacy policy
Core AI-generation product. As of this review, kaimix.com and wemixed.com redirect to a maintenance page on splashmusic.com, so current availability and live terms could not be confirmed.
// What to watch
- No SOC 2, ISO 27001, ISO 42001, HIPAA, PCI DSS, or GDPR-specific compliance evidence found anywhere on the vendor's own domain; this is consistent with a small consumer app studio, not an enterprise-grade posture.
- Privacy policy is scoped to Australian Privacy Law only and does not mention GDPR, despite global app-store and Roblox distribution that plausibly reaches EU users — potential compliance gap, not confirmed non-compliance.
- No explicit statement on whether user voice/audio submitted to the Kaimix/WEMIX AI feature is used for AI model training; trains_on_customer_data recorded as null (unresolved), not false.
- The Kaimix/WEMIX AI music product (kaimix.com, wemixed.com) currently redirects to a maintenance page, while the splashmusic.com homepage still actively promotes 'TRY WEMIXED' — a live discrepancy between marketing and current product availability that AIFOXX listing copy should account for.
- Splash's flagship distribution channel is a Roblox game; the privacy policy does not address children's privacy/COPPA despite Roblox's large minor user base — worth a caveat given AIFOXX may be indexed by parents/guardians or education-adjacent buyers.
// At a glance
Pricing model
Not verified from available pages (no pricing page captured; consumer app store listings likely free/freemium, unconfirmed)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Popgun Labs Pty Ltd (trading as Splash / Splash Music)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-09. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
splashmusic.com