Privacy Policy — Sleepy Whisper
Last updated: 8 October 2026
Sleepy Whisper is a baby monitor made by TAIO Labs. This policy covers both apps that carry the name:
- The Android app, published on Google Play as
com.taio.sleepywhisper. It can be the nursery unit, which films and listens to the room, or the parent unit, which watches it. It includes a Wear OS watch app, which reaches the nursery only through your phone. - The iPhone app of the same name. It is a parent unit only: it watches a nursery phone running the Android app. It includes an Apple Watch app, which reaches the nursery only through your iPhone.
Everything below applies to both apps unless a section says otherwise.
This policy is short because the apps do very little that a privacy policy normally has to describe.
We do not collect anything
Sleepy Whisper has no servers of its own. There is no account, no sign-in, and no identifier that reaches us. We do not receive your video, your audio, your alerts, your device information, your location, or usage analytics, because there is nowhere for any of it to go.
On your own network that is the whole story. If you buy Sleepy Whisper Plus and watch away from home, two Google services help your phones find each other; what they see is described exactly under "If you watch away from home" below.
Specifically, neither app contains:
- Any analytics or telemetry library.
- Any crash-reporting library.
- Any advertising library or advertising identifier.
- Any analytics, advertising or tracking SDK. The only third-party code that handles video and audio is open source and runs on your own devices: the WebRTC library, and for playing a Tapo camera's stream if you add one, Google's Media3 player on Android and VideoLAN's VLCKit on iPhone. None of them sends anything to anyone.
- Any TURN relay server. At home the list of ICE servers is empty. Away from home (Plus) it holds only Google's public STUN servers, which help your phones find each other and never carry video or audio.
What stays on your devices
Video and audio are live only. They are never recorded and never written to storage, on your phone or anywhere else. When you close the stream, nothing remains of it.
The following are stored on your own device and are never transmitted to us:
| Stored on your device | Why | Which app |
|---|---|---|
| Pairing keys and tokens | So paired devices reconnect without you re-entering a code | Android and iPhone |
| The away-from-home key, derived from the pairing key | So a paired phone can reach the nursery away from home (Plus) | Android |
| Whether you have Plus, and the last purchase record a parent phone showed the nursery | So Plus features keep working offline, and one purchase covers the household | Android |
| When the nursery phone last said your household has Plus | So a parent phone that did not buy Plus itself keeps it for seven days, including away from home | Android and iPhone |
| Alert history (times and types) | So you can see what happened overnight | Android and iPhone |
| Noise threshold from calibration | So the app does not have to relearn your room every night | Android |
| Appearance and mounting settings | So the app looks and points the way you left it | Android |
| Tapo cameras you add: name, address, and camera account login. Encrypted with a key held by Android's keystore | So the app can play and control your camera without asking each time | Android |
| Wi-Fi cameras you add (Tapo or another brand): name, brand, address, stream path and login. In the iPhone's Keychain, on this device only | So the app can play your camera without asking each time | iPhone |
| Mute, volume, the last address you typed, and whether to keep listening when locked | So the app is set up the way you left it | iPhone |
| Latest status: the nursery's name, its battery, and tonight's alerts | So the widget and Lock Screen can show it. Kept in storage shared only with the app's own widget | iPhone |
| The same latest status, plus mute and volume, and the name, status and preset names of a Wi-Fi camera your iPhone is listening to (never its address or login) | So the watch app and its complications can show it. Kept on the watch, in storage shared only with its own complications | Apple Watch |
| The same latest status, plus mute and volume, and the name, status and preset names of a Wi-Fi camera your phone is listening to (never its address or login) | So the watch app, its tile and its complications can show it. Kept on the watch, in the app's own storage | Wear OS watch |
The Apple Watch app gets everything it shows from your iPhone, over Apple's direct link between a paired iPhone and Watch, which uses Bluetooth or your own Wi-Fi. While you look at the camera on the watch, the iPhone sends it a small still picture about once a second; while you listen or talk on the watch, it relays the audio, and while you listen to a Wi-Fi camera on the watch, it relays that camera's sound the same way. Turning the camera from the watch asks the iPhone to do it; the camera's login stays on the iPhone. None of it is recorded or kept: each picture replaces the last, and the audio is played and discarded. The watch uses its microphone only while you hold its talk button.
The Wear OS watch app works the same way, through your Android phone, over Google Play services' link between a phone and its paired watch. Pictures, sound and the watch's controls go only to a watch that is near the phone, on Bluetooth or the same Wi-Fi; if the watch is anywhere else, the phone sends it none of them. That includes a Wi-Fi camera's picture while its page is on the watch, taken from the frames the phone already reads for movement alerts, and its sound while you listen to it; turning the camera from the watch asks the phone to do it, and the camera's login stays on the phone. The latest status (the nursery's name, battery and tonight's alerts, and the camera's name and status) is a few hundred bytes that Play services delivers however it can, which can include through Google's servers when the watch is not near the phone, as it does for any app's watch data.
On Android, the one file the app writes is an image of your pairing QR code, and only at the moment you choose to share it. It is placed in the app's own cache directory, and the permission granted to the app you share it with expires with that share. The iPhone app never shows or shares a pairing code; it only scans one.
Deleting what is stored
On Android, uninstalling the app deletes all of it.
On iPhone, the pairing is kept in the Keychain, which iOS can keep even after an app is deleted. To remove it, tap Forget this nursery in the app before deleting the app. Deleting the app removes everything else.
On both, you can clear the alert history from within the app at any time.
How your devices talk to each other
At home, video and audio travel directly between your own devices over your own local network, encrypted in transit using WebRTC's DTLS-SRTP. The phone in the nursery acts as the server. Nothing passes through us or through any third party.
Access is protected by a six-digit code that changes every five minutes, and a device must be paired before it can view the stream.
On Android, the app requires the INTERNET permission. On Android that permission governs all network access, including connections between two devices on the same Wi-Fi network. At home that is the only thing this app uses it for, and it does not contact any remote service. Away from home it also reaches the two Google services described below.
On iPhone, the app asks for Local Network access and uses it to find and reach the nursery phone on your Wi-Fi. At home it does not contact any remote service. Away from home it also reaches the two Google services described below.
If you watch away from home (Sleepy Whisper Plus)
Watching from another network, another Wi-Fi or mobile data, is part of Sleepy Whisper Plus. It is available in both the Android and the iPhone app, and is off unless you have Plus. Some networks, often at offices, schools and hotels, block a direct connection between phones, and from those watching away from home may not connect. When it is on:
- Setup messages go through Google Firebase. To find each other, your two phones exchange a handful of short messages per connection (a greeting, and the technical details each phone needs to reach the other) through Google's Firebase Firestore database. Each message is encrypted on your phone with a key that only your paired phones hold, so Google stores text it cannot read, at an address it cannot link to you. Each message is deleted as soon as the other phone reads it. A message that is never read, for example because a connection was abandoned halfway, can stay in Firestore, still sealed and unreadable to Google.
- Firebase signs your phone in anonymously. The sign-in has no name, email or other detail about you, and nothing else is stored with it; it only lets Firebase limit misuse. Firebase keeps it, and the app reuses it for as long as the app stays installed.
- Google's STUN servers see your network addresses. Your phones ask Google's public STUN servers for their own internet address, which is what lets them connect directly.
- Video and audio go directly between your phones, encrypted end to end with DTLS-SRTP, exactly as at home. They never pass through Firebase, the STUN servers, or anything of ours, and are never recorded.
- After the phones connect, alerts, battery status and controls travel on that same direct, encrypted connection, not through Firebase.
Google processes the setup messages, sign-in and network addresses under its Firebase privacy and security terms, at firebase.google.com/support/privacy. Google can see that a phone used the service, from which internet address and when; it cannot read the messages. The nursery phone stays connected to Firebase, waiting for you, only while Plus is active.
Buying Plus
Sleepy Whisper Plus is a one-time purchase, not a subscription, bought through Google Play on Android and through the App Store on iPhone. Google or Apple handles the payment; we never see your card or payment details. Each app checks your purchase on the phone itself, with no server of ours involved.
Everything that keeps your baby safe is free and stays free: the monitor on your own Wi-Fi, with video, sound, talk-back and every alert, and the live picture from a Wi-Fi camera. Plus adds watching and alerts away from home, a Wi-Fi camera's sound, alerts and overnight listening, and more than one camera.
So that one purchase covers your family, the parent phone that bought it shows the nursery phone the purchase record Google Play or the App Store signed, over your own connection between the two. The nursery checks the signature and remembers for seven days that your household has Plus. The record contains the purchase time and an order or transaction reference from Google or Apple; it is kept only on your nursery phone and is never sent to us.
The nursery phone then tells every phone paired with it that your household has Plus, over the same connection. Each of those phones remembers when it was last told, and keeps Plus for seven days from then. Only that time is stored; no purchase record is passed on.
If you add a Tapo camera
This is optional. You can add a Tapo camera (or another camera that offers RTSP and ONVIF) and watch it directly, on Android or iPhone, or let an Android nursery phone use it as its picture. On iPhone this also covers other brands of RTSP camera, such as Reolink, Hikvision, Dahua, Amcrest, Imou and EZVIZ, and the same applies to them, with that camera's maker in place of TP-Link. When you do:
- The app talks only to the camera, at the address you type, on your own network. Nothing goes to us or to TP-Link through the app.
- The camera's video and sound stream (RTSP) is not encrypted on your network: the camera does not offer an encrypted version. Anyone already on your Wi-Fi with the camera's login could watch it, just as with the Tapo app's own local viewing. The login itself is sent as a digest, never in plain text.
- Pan/tilt and the camera's own motion and person detection (Android) use ONVIF, also unencrypted on your network. To receive the camera's detection events, the app runs a small listener on your phone that only accepts messages carrying a random code it gave the camera.
- The camera itself is a TP-Link product with its own cloud connection and its own privacy policy. This app does not change what the camera sends to TP-Link. To keep it off the internet entirely, block it at your router; it keeps working with this app.
Permissions on Android
| Permission | Why |
|---|---|
| Camera | To show you the nursery |
| Microphone | To hear the room, detect noise, and let you talk back |
| Notifications | To alert you when something stirs, or when the monitor needs attention |
| Foreground service (camera, microphone, data sync, media playback) | So monitoring continues with the screen off, which is the entire purpose. Media playback is for hearing a Tapo camera with the screen off |
| Wake lock, exact alarms, ignore battery optimisations | So the monitor is not killed overnight by power management |
| Run at startup | So monitoring comes back by itself if the phone restarts overnight |
| Internet and network state | To find and reach your other device on your Wi-Fi, and with Plus to reach it away from home |
Permissions on iPhone
| Permission | Why |
|---|---|
| Local Network | To find and reach the nursery phone on your Wi-Fi. It is never used to reach the internet |
| Camera | Only to scan the pairing code shown on the nursery phone |
| Microphone | So the nursery can hear you while you hold the talk button. Nothing is sent until you hold it |
| Notifications | To alert you when something stirs, or when the monitor needs attention |
| Background audio | So the nursery stays audible, and alerts keep arriving, with the phone locked |
The iPhone's widget, Live Activity and Lock Screen controls are drawn on the device from the same local data. Nothing is sent to Apple's push service or anywhere else.
Children
The apps are used by adults to watch over their own children. They collect no personal information from anyone, including children. Video and audio of the nursery are never sent to us or stored by anyone.
Changes
If a future version of either app ever sends anything off your devices, this policy will be updated before that version is released, and the change will be described in the app itself rather than only here.
Contact
Questions about this policy, or about anything either app does with your data:
TAIO Labs taioappsdevelopment@gmail.com
You do not need an account, a reference number, or anything from inside the app to ask. There is no account to look up, because we hold nothing about you.