Fregata Mobile

Privacy Policy

Effective September 10, 2026 · Applies to Fregata Mobile for iOS

In short

  • Fregata Mobile talks directly to the NVR you already run — Frigate, or our own Fregata — there's no cloud in between your cameras and your phone.
  • There's no Fregata account to create — the only sign-in is to your own NVR, and those credentials stay on your device.
  • The only thing that reaches our infrastructure is a push-notification address for your device — never your footage, snapshots, camera names, or NVR address.
  • Notifications are end-to-end encrypted from your NVR to your phone — our relay only ever forwards ciphertext it cannot read.
  • No analytics, no trackers, no third-party SDKs of any kind.

1. What this app is · 2. On your device · 3. iCloud sync · 4. What reaches us · 5. Permissions · 6. Third parties · 7. Children · 8. Retention · 9. Changes · 10. Contact

1. What this app is

Fregata Mobile is a companion app for Frigate, the open-source network video recorder you install and run yourself — typically on a home server or NAS. Fregata (without "Mobile") is our own macOS port of that same NVR software; Fregata Mobile is the iOS client for either one. You give the app the address of a server you already control, and it talks to that server directly to show live cameras, browse recordings, and deliver alerts. Fregata Mobile itself doesn't host, record, or process your video anywhere — your own NVR does that, exactly as it did before you installed this app.

Frigate is a separate, independent open-source project. Fregata Mobile isn't affiliated with, endorsed by, or officially connected to it.

2. What stays on your device and your network

3. What syncs through iCloud

A small set of app preferences — mainly onboarding and notification setup state — is stored using Apple's iCloud key-value storage, so it follows you if you reinstall the app or move to a new device signed into the same Apple ID. That data lives in your personal iCloud account under Apple's own privacy terms; we never receive it or have access to it. You can inspect or clear it the same way as any other app's iCloud data, under Settings → [your name] → iCloud.

4. What reaches our infrastructure

Notification content is end-to-end encrypted and we never see it — the mechanics are below. This is the complete list of what does reach us: to deliver push notifications at all, the app registers three things with a small relay we operate:

That's everything. We never receive your name, email address, location, camera names, event descriptions, recordings, or your NVR's address — there is no path in this system for any of it to reach us. None of it is linked to your identity: there's no Fregata account involved, and your own NVR sign-in (Section 2) never reaches us. None of it is used for tracking either — it's never combined with data from other companies' apps or sites, and we don't use advertising identifiers.

How a notification reaches you without us reading it

Notifications are end-to-end encrypted: when your NVR has something to tell you, it encrypts the message itself, using Web Push encryption (RFC 8291: a P-256 ECDH key exchange feeding AES-GCM) with a key that only your phone holds. It hands the encrypted bytes to our relay, which forwards them to Apple's Push Notification service, which delivers them to your phone. Decryption happens on your device, inside a notification extension that has no network access of its own — our relay and Apple's servers both only ever handle ciphertext, never readable content.

Only the two highlighted endpoints — your NVR and your phone — ever hold the decryption key.

5. Permissions this app requests, and why

Local Network

To connect to your NVR's address on your home network. iOS requires this permission for any direct local-network connection; Fregata Mobile doesn't use it to scan for or discover other devices — you type in your server's address, and the app connects to that address alone.

Photos — Add Only

To save clips and snapshots you explicitly choose to export. This permission can only add files; the app has no way to browse or read your existing photos.

Notifications

To alert you when your NVR detects something — including as a time-sensitive notification, so an alert can break through Focus modes the way a phone call would. The content is end-to-end encrypted the entire way — see Section 4.

6. Third parties

That's the entire list. Fregata Mobile has no analytics SDK, no crash-reporting service, no advertising network, and doesn't sell or share data with data brokers — there's simply nothing collected to share. If you contact us for support and choose to attach something like a diagnostic log from the app's Diagnostics screen, we use it only to help with that request.

7. Children's privacy

Fregata Mobile isn't directed at children, and we don't knowingly collect anything from anyone — of any age — beyond the minimal, non-identifying registration data described in Section 4.

8. Retention and your controls

9. Changes to this policy

If this policy changes, we'll update the effective date at the top of this page and note anything material in the app's release notes.

10. Contact

Questions about this policy, your data, or a request like the one in Section 8 can be posted on our GitHub Discussions board: github.com/3rdBitLabs/Fregata → Discussions → Fregata Mobile. That board is public, so please don't post anything you wouldn't want visible to anyone — say you'd like to reach us, and we'll ask there for any device-specific details we need.

For anything related to your Frigate or Fregata server itself — camera setup, recordings, storage — that's between you and your own NVR. We don't have access to it and can't act on requests about it.