In short: AYLEEN is currently a preview. There is no registration, no login, no forms, no cookies and no analytics or advertising services.
1. Controller
The controller is THE RED ROSE MEDIA LLC, 1621 Central Ave, Cheyenne, WY 82001, USA, email: hello@therose.media.
2. Accessing the app
The app and its interface are delivered via the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When the app is accessed, Cloudflare processes technically necessary connection data – in particular the IP address and information on traffic routing and the requesting system – in order to deliver the pages and protect them against attacks. The legal basis is the legitimate interest in secure and functional delivery (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework.
3. No cookies, no analytics, no third-party content
AYLEEN does not set cookies and does not use any analytics, advertising or tracking services. Fonts and icons are loaded from AYLEEN’s own server; no third-party content is loaded when the app is accessed.
4. Storage on the device
So that AYLEEN starts like an app, a service worker stores the app’s program files (pages, design, script, fonts and icons) in the browser’s storage. These files contain no personal data. They can be deleted at any time via the browser settings (“clear site data”) or by removing the app.
The selected language is stored as a code (for example “en”) in the browser’s local storage so that AYLEEN opens in this language next time. The code contains no personal data and is deleted together with the site data.
5. Interface
The development interface at /v1 currently does not accept any personal data. All protected functions – registration, identity and parental verification, posts, chats, media, calls and LIVE – are locked and respond with a refusal without a verified session.
6. Children and young people
AYLEEN is planned as a social platform for 6- to 15-year-olds (from 16: AYLEEN Next). As long as identity, age, parental and device verification are not connected and independently audited, no accounts can be created and no data is collected from children or young people. Before launch, this policy will be supplemented with the processing that will then take place.
7. Rights of data subjects
Data subjects have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). For persons in Switzerland, the rights under the Federal Act on Data Protection (FADP) apply. Requests go to hello@therose.media.
Last updated: 26 September 2026
The German version is authoritative.