Privacy
Updated: 2026-11-10 · Tonie Loop
Publisher and contact
This notice describes Tonie Loop by BeerDevLabs. Support and privacy contact: beerdevlabs@gmail.com. Tonie Loop is an independent remote controller for adults with a Toniebox 2 and an existing Tonies account. It is not an official tonies app and does not create an app account.
Sign-in and cloud connection
After you enter your credentials, the app sends your email address and password directly to login.tonies.com over HTTPS for authentication. Your password is not stored persistently. Access and refresh tokens are stored locally using flutter_secure_storage with Android Keystore protection. Device discovery and controls use api.prod.tcs.toys and an encrypted MQTT WebSocket connection to ici.tonie.cloud. Account, household and box identifiers, the box MAC identifier, random connection identifiers and control commands are processed for this purpose. These service providers receive connection information required by networking, such as your IP address.
Tonie and device status
The app receives box names and identifiers, the current Tonie identifier, title and cover, chapter, playback state and position, volume, timer confirmations and battery level where supplied by the Toniecloud. Covers are loaded from the HTTPS address supplied by Tonies; the image provider receives normal connection information. Tonie Loop does not download story audio, record audio or upload microphone recordings. No audio stories are included.
Local storage and background operation
Language, theme, selected box, phone role, daily window, timer and the current repeat session are stored on this phone. Last reported battery values are stored locally. An optional home-screen widget keeps a small local copy of the box name, Tonie title, battery, timestamp and loop status without account tokens. Android displays an ongoing notification for the active device connection. A daily automation window deliberately enabled by you may resume after a phone restart. An online phone must remain powered on. You can end the connection in Settings or the notification. Android app backups are disabled.
Purposes and recipients
Processing is limited to the sign-in, device controls and local repeat automation you request. BeerDevLabs operates no app cloud or analytics server and receives no account or playback information from the app. There are no advertisements, advertising identifiers, analytics SDKs, automatic crash uploads, sales of data or profiling. Required cloud information is sent to the Tonies services you use and the content providers they specify. Tonies' retention, legal bases and possible international transfers are governed by its privacy notice. This app cannot determine Tonies' storage periods or server locations.
Your choices and deletion
You can disconnect, disable automation and use Settings → Delete local data to remove account tokens, app settings, the night session and widget data from this phone. Signing out removes sign-in and local device-related state; it does not delete your Tonies account, content or settings on the box. Uninstalling also removes the local app data. To delete your Tonies account or data held there, use the Tonies account controls at https://my.tonies.com/accounts/details. To request access, correction or deletion of information you voluntarily emailed to BeerDevLabs, contact beerdevlabs@gmail.com. Support emails are processed through the email service and retained only as needed to handle the request or meet applicable obligations.
Retention, permissions and changes
Session tokens and local device state remain until you sign out, erase local data or uninstall. General settings such as language and theme are kept on sign-out and can be removed using Delete local data or by uninstalling; tokens may expire or be revoked by Tonies earlier. Tonie Loop requests no camera, microphone, location, contacts or general storage permission. Internet, network state, notification permission and a foreground service with wake/Wi-Fi locks support the active connection. Android battery settings are opened only at your request. Where the GDPR applies, requested app functions are processed under Article 6(1)(b), and necessary security and support under Article 6(1)(f). Subject to applicable legal conditions, you have rights of access, correction, erasure, restriction, portability and objection, and the right to complain to the competent supervisory authority. Use the contact address above to exercise your rights. Changes to this notice appear with an updated date in the app and the published version.