Privacy Policy

Last updated: October 3, 2026

This policy applies to Tono: White Noise & Sleep Calm (Android package com.tono.baby.sleep; Apple App Store ID 6751115107), published by Illia Shaikov ("Tono", "we", "our" or "us"). For privacy questions and requests, contact tonokids.studio@gmail.com.

1. Overview

Tono helps adult parents, guardians and caregivers play soothing sounds, create mixes, record short custom sounds and optionally use Listen to react to crying. It does not require a Tono account. Built-in sounds and saved recordings can play on the device; internet access supports advertising, subscription verification, analytics and crash reporting.

2. Microphone access and audio

Listen, including background listening

When you choose to start Listen, Tono explains microphone use and asks you to allow the session before requesting operating-system microphone permission or starting microphone access. Listen uses live microphone audio to detect crying-like sounds and automatically play your chosen sound or mix. Processing takes place on the device. Listen does not create a saved audio recording or upload the microphone stream.

An active Listen session can continue when you switch tabs, use another app, lock the phone or turn the screen off. Listen alternates between detection and soothing playback; microphone access can pause during soothing and resume within the same active session. Sessions currently last up to one hour unless stopped earlier. You can use Stop in Tono to end the session. Android also provides an active-service notification you can tap to return to Tono and stop Listen. Operating-system privacy indicators show microphone access when supported.

The app does not start a new Listen session merely because you open it. Stopping Listen ends microphone monitoring. Calls, permission changes, operating-system restrictions or termination of the app can interrupt monitoring. Listen is a convenience feature, not a medical device, emergency monitor or substitute for adult supervision.

Your custom recordings

When you tap Record, Tono requests microphone permission if needed and records up to 10 seconds for a custom sound. The audio file, user-entered name, duration, pitch setting and waveform preview are stored in the app's local storage. Recording ends when you stop it or reach the recording limit; leaving the recording screen ends the recording workflow. These recordings are separate from Listen's live, unsaved audio processing.

You can delete saved recordings from Library. Tono does not provide cloud audio storage or upload these recordings. Only record people when you have appropriate permission. You may decline or revoke microphone access in your device settings; ordinary playback of built-in sounds does not require microphone permission.

3. Information stored locally

• Theme, language and default sound volume.
• Saved mixes, sound identifiers and per-sound volume settings.
• Custom recordings and their local metadata, described above.
• Listen sensitivity and chosen playback target; sleep-timer preferences.
• Temporary rewarded-sound access deadlines and cached Premium status.
• Onboarding completion, initial paywall state, app-launch count and whether the rating invitation has been completed.

These local records are not uploaded as a library or profile. Separate feature-usage events may be sent as described below. Android cloud backup is disabled for Tono. On Apple devices, local app data may be included in a device backup according to your system settings. Such backups are managed by Apple or by you, not received or operated by Tono.

4. Information processed by services

Usage analytics — Google Firebase Analytics

When analytics collection is enabled, events can include app sessions, screen views, built-in sound selections, mix actions and generated mix identifiers, timer actions, onboarding and rating actions, access-gate sources and advertising outcomes. Custom-recording events describe actions, duration and whether pitch was adjusted, not their audio or names.

Listen usage events can include starting or stopping a session, a detection triggering soothing playback, the sensitivity level, selected sound count and stop reason. These events are activity metadata derived from using the feature, not audio recordings or microphone samples. Firebase may also process app-instance identifiers, device and OS information, app version, language and approximate geographic information.

Analytics starts disabled in Tono and is enabled according to the privacy flow's consent or consent-not-required result. Firebase advertising storage, ad-personalization signals and ad-user-data consent are disabled in the app configuration.

Reliability — Google Firebase Crashlytics

Release versions enable crash reporting to diagnose failures. Crashlytics processes crash traces, non-fatal errors, diagnostic messages, timestamps, app and OS versions, device details and installation identifiers. Crash reporting is separate from optional analytics consent. We do not intentionally include recording audio, recording names or waveform previews in diagnostic reports.

Advertising — Clever Ads Solutions (CAS.AI) and mediation partners

Tono offers optional rewarded ads on Android and iOS. A video is displayed only when you choose to watch an ad. For non-Premium users, the advertising SDK can initialize and preload ads after startup, and reload ads after previous requests. Therefore ad-related network processing may occur before you press Watch ad, subject to the SDK's applicable privacy and consent flow.

CAS.AI and the partner supplying an ad may process IP addresses, approximate location inferred from network information, device and OS details, language, app or SDK identifiers, ad requests, impressions, interactions, diagnostics and fraud-prevention information. These support ad delivery, measurement, security and the choices available through the privacy flow. Tono does not provide these partners with microphone audio or custom recordings.

Tono is configured not to request Android's Advertising ID or Apple's Identifier for Advertisers (IDFA), and does not request App Tracking Transparency permission. Other technical or app-instance identifiers can still be processed. This configuration does not remove the other data processing described here.

Mediated networks vary by platform, region and ad availability. The current integrations include networks such as Google Ads, AppLovin, Unity Ads, ironSource, Liftoff Monetize, InMobi, Mintegral, Pangle, Meta Audience Network, CAS Exchange, Maticoo and YsoNetwork. Consult CAS.AI's privacy policy and the vendor information in the in-app privacy flow for the partners and choices relevant to an ad request.

Subscriptions — Apple, Google and RevenueCat

Apple App Store or Google Play processes payments. RevenueCat helps retrieve products, verify transactions, check subscription status and provide or restore Premium access. It processes an app-specific customer identifier, purchase and transaction information, product and entitlement status and technical app/device information needed for these services. Subscription status can be checked at startup even if you do not initiate a new purchase. Tono does not receive your full payment-card number.

Support, store links and sharing

If you email us, we receive your email address, message and any attachments you choose to send. Please do not send recordings or other sensitive information unless needed for your request. Rating actions open the app's store listing; sharing the app uses the system share sheet. The store, email provider or destination you choose applies its own privacy policy. Sharing the app does not automatically share your recordings.

5. Permissions and your choices

• Microphone: for user-started recording and Listen, including background detection during an active Listen session.
• Android notifications and foreground services: to display active Listen status and playback controls, and support microphone use and media playback while the app is not visible.
• Background audio on iOS: for active playback and Listen.
• Wake lock / network access: to support active audio and the online services described in this policy.

Tono does not request camera, contacts, photos or precise-location permission. You can stop Listen, stop a recording, decline rewarded ads, revoke microphone permission or manage notification permission in system settings. Privacy choices for ads and related analytics can be revisited through Settings when the provider's privacy options are available in your region. You can contact us if you need help with those choices.

Manage or cancel a subscription through Apple or Google subscription settings. Deleting app data or uninstalling Tono does not cancel a subscription.

6. Sharing and service providers

We use Firebase for analytics and diagnostics, CAS.AI and its mediation partners for ads, and RevenueCat together with Apple or Google for subscriptions. Data is processed for the purposes described above. Information may also be disclosed when required by law or necessary to protect legal rights, security or prevent fraud. We do not sell your microphone audio or recordings or use them for advertising.

Service providers may process information in countries other than yours. Their applicable terms describe processing locations and safeguards for international transfers. Further information:

• Firebase privacy and security and Google Privacy Policy.
• CAS.AI Privacy Policy.
• RevenueCat Privacy Policy.
• Apple Privacy Policy.

7. Retention, deletion and privacy requests

Local settings and saved content remain until deleted in the app where a deletion control exists, cleared through operating-system app-data controls, or removed by uninstalling the app. Device backups can retain previous copies until managed or deleted through the relevant backup service. Rewarded access expires at its stored deadline.

Firebase Analytics data is retained according to the project's retention settings and Google's applicable terms. Firebase states that Crashlytics retains crash traces and associated identifiers for 90 days before starting removal from live and backup systems. Ad and subscription providers retain their records according to their policies and the needs of providing the service, verifying transactions, preventing fraud and meeting legal obligations. Uninstalling Tono does not itself delete those server records.

Support correspondence is kept as needed to handle your request and any related security or legal obligations. To request access, correction or deletion of personal information associated with you, or to ask about retention, write to tonokids.studio@gmail.com. We may need information sufficient to identify relevant records and verify the request. Please do not send payment-card details or account passwords. We cannot retrieve microphone audio or local recordings that have never been sent to us.

Depending on your location, you may have rights to access, correct, erase or obtain a copy of your personal data, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. Requests are handled subject to applicable law and lawful retention obligations. Tono has no user-account registration, so there is no Tono account to close.

8. Children's privacy and supervision

Tono is operated by adult parents, guardians and caregivers, not intended as a child-operated app. Microphone audio may include a child's voice or crying; that audio is processed locally as described above and is not provided to advertising partners. We do not ask children to create accounts or submit personal information. If you believe personal information about a child was sent to us improperly, contact us so we can investigate and address it. Listen never replaces responsible adult supervision.

9. Security

Local audio is stored within the app's storage area, protected by the operating system's app-storage controls. Online service connections use the providers' transport-security mechanisms. We limit intentional data collection to the functionality described here and use established service providers. No storage or transmission system is completely secure. Keep your device protected and your app and operating system up to date.

10. This website and policy changes

This policy and the Tono website (tonokids.com) are hosted on Render and delivered through Cloudflare's network. Visiting them sends normal web-request information, such as your IP address and browser information, to Render and Cloudflare. The website does not embed advertising, analytics scripts or tracking pixels. See the Render Privacy Policy and the Cloudflare Privacy Policy.

We may update this policy as the app or our practices change. The current version is published on this page with an updated date. Material changes requiring a new explanation or consent will be presented through the relevant app flow as required.