Privacy
Nightlisten provides room audio and available camera video to a household’s authorized adult caregivers. Here is how the current system handles information.
Operator and contact
Nightlisten is operated by Danny Neil. For privacy questions, access removal, correction or deletion requests, email support@nightlisten.net.
Room media
Configured room microphones send audio to the cloud host for processing and mixing, then to authorized phones. Caregiver listening uses independent session mixes. Existing owner camera video passes through the household server; video is not currently enabled on the public caregiver gateway. Media can include household members, caregivers and visitors. The iPhone app receives these streams; it does not capture using the phone’s microphone or camera.
Access and controls
Caregiver audio access uses a privately supplied, single-use invitation valid for 24 hours. A redeemed session lasts at most 30 days and expires after 7 days without use. The owner can revoke access. Invited access covers the configured household rooms; separate per-room user permissions are not provided. Installing the app or receiving an App Store link does not grant media access.
Caregiver mute, room gain and sound settings apply to that session and do not change other listeners. The existing owner connection still uses separately authorized Tailscale access; its monitoring and shared controls can affect the system. Caregivers cannot use owner administrative controls. No Tailscale installation is required for the caregiver audio connection.
The server stores an owner-supplied caregiver label, random caregiver identifier, hashed invitation/session verifiers and issuance, expiry, last-use and revocation records. Operator-only invitation files can hold a code for private sharing. A session credential is stored in the iPhone Keychain without synchronization to other devices; media players use authenticated requests and a host-only session cookie where needed. Credentials are not accepted in playback URLs.
Technical information
The service processes room/source labels, microphone identifiers, connection status, signal strength, device chip temperature, stream counters and errors to operate and troubleshoot monitoring. Chip temperature is not room or body temperature. Operational logs can include device identifiers, connection events, network-peer information and request routes.
Storage and retention
Cloud playback uses processing buffers. The household server also writes rolling media segments. Temporary media can remain after faults until it is cleaned up; media is not guaranteed to disappear after a few seconds.
Server settings, caregiver access records and diagnostic records persist. Expired or revoked access records are not automatically deleted; operator-assisted deletion is available. Some household-server logs rotate daily with seven compressed archives, while other records have no application-specific automatic deletion period. There is no single fixed automatic retention limit covering every server record. Phone/player/browser caches and infrastructure backups can also retain information.
Deletion is operator-assisted. Email the operator with the information or access you want removed. Requests are reviewed to identify relevant copies and coordinate safe removal without interrupting other caregivers or deleting another person’s information. Some shared system journals cannot be selectively edited, and backups or provider records may not be immediately removable. The operator will explain any remaining copies or limitations found when handling the request. No immediate deletion or universal backup-expiry deadline is promised.
Providers and safeguards
DigitalOcean hosts the configured cloud service. Tailscale provides private-network connectivity and identity used for access checks. Authorized household listeners receive the streams available to them. Current safeguards include encrypted authenticated caregiver audio access, private owner access, server-side authorization and authenticated encrypted microphone ingest. These measures do not guarantee absolute security or uninterrupted monitoring.
ImprovMX forwards support email to the operator’s Gmail mailbox, so ImprovMX and Google process support correspondence. Infrastructure providers may retain service logs and backups under their own practices. Support correspondence remains in the support mailbox until manually removed; no automatic deletion period is configured for it. Request its deletion at the support address.
No advertising or third-party iOS analytics SDK was identified in the current app. This document site contains no analytics scripts, advertising, form or household media. Hosting and network providers can process technical request information needed to deliver the pages.
Your choices
Contact the operator to withdraw household access, correct configuration or request deletion. Use Sign out to stop local playback and request server-session revocation; if confirmation fails, ask the owner to revoke access. Removing the app does not itself revoke server or separate network authorization, guarantee Keychain erasure, or erase server records and backups. Adult operators should obtain appropriate household consent and limit access to people who need it.
Review diagnostics before sending them. Do not send passwords, private keys, network invitations or unnecessary room recordings in a support request.
Synthetic demo
The labelled demo uses bundled generated sounds and a test video without connecting to the household. Sound-mode examples were processed beforehand. No private recording is bundled, and demo preferences are not saved. This does not establish live hardware or network performance.
Changes
This notice will be updated when Nightlisten’s data handling changes. The effective date identifies the current notice.