Kapal Privacy Policy

Effective Date: November 6, 2026

JudeWorks LLC ("JudeWorks," "we," "us," or "our") operates Kapal and its related services. This policy covers the Kapal app, its widgets and Apple Watch companion, and our camera notification service.

Summary

• You do not need a JudeWorks account to use Kapal.
• Camera video, recordings and snapshots come from your Frigate server. We do not operate a cloud archive of your footage.
• Optional notifications pass through our relay and Apple's push notification service.
• Kapal does not use your location. Home detection for notifications happens on your device by checking whether it can reach your own Frigate server.
• We receive limited information needed for notification delivery, purchase verification, app operation and support.
• We do not sell personal information, use advertising networks, or share information for targeted advertising.

Your Frigate Server and Devices

Kapal connects to the Frigate server addresses you provide to display cameras, recordings, events and settings. Your connection information is stored on your device, with passwords and connection secrets protected using Apple's Keychain.

Widgets may store camera snapshots and connection information locally. The Apple Watch companion may receive images, event information and temporary credentials needed for live viewing.

Configuration backups stay on your device unless you export them. These backups may include the complete Frigate configuration, including passwords, tokens and camera addresses.

If you use two-way talk, microphone audio is sent through your Frigate connection to the selected camera. Connection services operated by Cloudflare or Google may process network information to help establish remote connections.

Photos you select for recognition training go to your Frigate server. If you use Frigate's AI features, your server may send prompts, images and event information to the AI provider configured by its administrator. That provider's policies apply to its processing.

Optional Camera Notifications

When you enable alerts, your Frigate server sends notifications to a relay we operate on Cloudflare. The relay prepares them for delivery through Apple Push Notification service.

The flow is:

Frigate → Kapal notification relay → Apple → your device

Alert text can include camera names, detected objects, event identifiers, zones and other descriptions supplied by Frigate. Depending on your server's configuration, this could include recognized names, license plates or AI-generated descriptions.

The relay decrypts incoming alerts in memory, applies delivery settings, and encrypts the alert details for your device. Apple receives generic notification wording and encrypted details, which your device decrypts for display.

The relay can read alert text while processing it. This is not end-to-end encryption directly from Frigate to your device. We do not maintain a plaintext alert-history database.

The current relay does not receive camera video, recordings or snapshot attachments.

Grouping repeated alerts

When one camera sends several alerts in a short time, the relay groups them so your device can update a single notification instead of showing many. To do this, the relay keeps a short-lived record for each camera containing a keyed, one-way hash of the camera name and the times of its recent alerts. It does not store the camera name or alert text in this record. These records expire ten minutes after the camera's last alert.

Home detection, quiet hours and Always alert

Kapal can make notifications silent while you are home and play sound while you are away. Kapal does not use your location for this. When an alert arrives, Kapal on your device tries to connect directly to the home address of your Frigate server that you chose during setup, and checks that server's security certificate. If it reaches your own server, you are treated as home. This check goes only to your Frigate server. It does not contact JudeWorks, and its result is not sent to us. This feature uses the Local Network permission, which you can turn off in your device settings.

Your home address and certificate fingerprint, quiet hours schedule, the cameras you choose to always alert, and a small on-device record of recent delivery decisions are stored only on your device. They are used on your device to decide whether a notification makes sound, and are not sent to the relay.

Notification Registration and Verification

To deliver and manage alerts, the relay stores:

• Your device's Apple push token and random registration identifiers.
• Public keys, protected delivery keys and your Frigate server's public push-verification key.
• Your notification preferences and limited delivery, timing and abuse-prevention records.
• Short-lived alert-grouping records, as described above.
• Device-verification information and purchase references used to confirm Kapal+ access.

Sensitive registration information is encrypted at rest. Alert setup does not send your saved Frigate address, password or sign-in cookie to the relay. However, alert text may contain information supplied by your server.

We use Apple's App Attest and purchase-verification services to help confirm that requests come from the genuine app and that paid access remains valid.

Limited Operational Data

Kapal sends basic operational information to JudeWorks app services to support announcements, roadmap updates, feedback features and app reliability.

This may include a random installation identifier, app and build version, platform, SDK version, activity dates, device category and basic feature interactions. The installation identifier can associate activity from the same installation.

We use this information to understand app use, maintain services, troubleshoot problems and improve Kapal. We do not use it for advertising or tracking across other companies' apps or websites.

Support and Information You Submit

If you send feedback, submit a suggestion, vote, answer a survey or contact support, we receive the information you provide.

Support messages may include your email address, attachments and app or device diagnostics. You can review and edit support email drafts before sending them.

Exporting or sharing footage, configuration files or reports sends that information to the destination you choose. Please avoid sending passwords, private keys or other unnecessary secrets.

Purchases

Apple processes App Store purchases. We do not receive your payment-card details.

Kapal and its services may process signed purchase proofs, product and transaction identifiers, purchase status, and refund or revocation information to unlock features, restore access and prevent abuse.

Kapal+ is a one-time purchase.

Service Providers and Sharing

We use Apple for purchases, device verification and notification delivery, and Cloudflare for notification hosting, storage, queues and network protection. Other providers help operate JudeWorks app services and support email.

These providers process information needed to perform their services, including network metadata such as IP addresses, request times and connection details.

We may disclose information when required by law, to investigate abuse, protect users and services, or carry out a request you authorize.

See Apple's privacy policy and Cloudflare's privacy policy.

Retention

We retain information for the time needed to operate the relevant feature, provide support, maintain security and meet legal obligations.

For notifications:

• Delivery registrations remain until removed or invalidated. Pausing alerts does not delete the registration.
• Delivery attempts expire after five minutes. Encrypted delivery data may remain temporarily in delivery or failed-delivery queues, each configured with a 24-hour retention period.
• Alert-grouping records expire ten minutes after a camera's last alert.
• Temporary setup, replay-prevention and security records expire according to their purpose.
• Raw device-attestation receipts are retained for 30 days. Related verification and purchase records remain while needed for active connections and subsequent cleanup. Hashed revocation records may remain to prevent reuse of invalid purchase proofs.
• Expired records are removed through service cleanup. Hosting-provider backups and security records may have separate retention periods.

Settings and records kept only on your device, such as home detection, quiet hours and recent delivery decisions, remain until you change them, remove alerts or delete Kapal.

Local configuration backups follow their own retention settings. Your Frigate server, exported files and information sent to other recipients have separate retention rules.

Your Choices

You can manage notification, microphone and local-network permissions in your device settings.

In Kapal, you can pause alerts or use the alert-removal option to revoke this device's notification connection. Remove alerts before deleting a saved server or uninstalling Kapal; those actions alone do not guarantee immediate removal of relay records.

Removing Kapal data does not delete recordings, recognition data or configuration stored on your Frigate server.

To request access, correction or deletion of information held by JudeWorks, contact us. Depending on where you live, additional privacy rights may apply. We may need information to verify your request and locate the relevant records.

Security and International Processing

We use safeguards designed to protect information, including encryption and restricted access. No service can guarantee absolute security.

JudeWorks is based in the United States. Information may be processed in countries where we and our service providers operate.

Children

Kapal is not directed to children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where required.

Changes

We may update this policy as Kapal and its services change. We will update the effective date and provide additional notice when required.

Contact

JudeWorks LLC
Email: [support@judeworks.app](mailto:support@judeworks.app)
Support: judeworks.app/support