This policy explains how VersaRepair LLC handles information in the PlainNVR self-hosted server and web interface, the Apple companion distributed through the App Store for iPhone, iPad, and compatible Macs, the Android companion distributed through Google Play, the heavy-beta PlainNVR OS image, and the PlainNVR website and download services.
Information stored on your PlainNVR server
Your installation may store and process:
- Accounts and security data: local usernames, password hashes, sessions, generated stream tokens, login and recorder events, and security or health logs.
- Camera configuration: names, identifiers, RTSP and ONVIF URLs, credentials included in those URLs, device details, media profiles, schedules, retention, audio, rotation, transport, and supported PTZ settings.
- Camera media: live video and audio when enabled, MP4 recording segments, snapshots, recording dates, coverage and storage metadata, and temporary media state.
- Server information: configuration, disk usage, recorder and go2rtc health, compatibility reports, and optional Home Assistant settings or media URLs.
This data stays on the server and storage you administer unless you deliberately expose, export, share, back up, or integrate it with another system. You control the cameras, storage, schedules, retention, users, network routes, backups, and deletion.
PlainNVR apps on Apple and Android devices
The iPhone, iPad, macOS, and Android apps connect directly to the server address you enter. They may process camera names and status, recorder events, disk usage, recording metadata, live video and audio, supported PTZ capabilities, and selected recording clips to provide the features you request.
Saved locally
The Apple apps store the normalized server address in app preferences. A session cookie may be retained in the operating system's shared HTTP cookie storage so an Apple app can stay signed in. The Android app stores the normalized server address and username in its private preferences; its session cookie stays in memory and is discarded when the app process ends. The password field is cleared after successful sign-in and is not intentionally saved by any PlainNVR app.
Temporary files
A selected MP4 clip may be downloaded to the app's temporary directory for playback, sharing, or saving. The app or operating system may remove temporary files over time.
Photos and local network
On iPhone and iPad, add-only Photos permission is requested only when you choose to save a clip. The clip then follows your Photos and iCloud settings. Local-network permission allows an app to reach a PlainNVR server on your private network.
Camera and microphone purpose strings
The Apple apps include camera and microphone purpose descriptions because their WebRTC media library can expose those device capabilities. PlainNVR uses a receive-only WebRTC session: it does not intentionally capture video from your Apple device, record from its microphone, or send device camera or microphone media to PlainNVR or VersaRepair. The audio control mutes or plays audio received from the configured camera stream.
PlainNVR OS heavy beta
PlainNVR OS is pre-release software and is not yet intended for production use. The installer and appliance may store local setup sessions, administrator account and security information, network settings, hostname, time zone and locale, storage and SMB connection settings, SSH settings, update state, service status, logs, and diagnostic reports on the machine where you install it.
That information remains on the appliance unless you export diagnostics, configure backups or integrations, expose the appliance to another network, or choose to share information with support. Diagnostic bundles are designed to redact common secrets, but automated redaction cannot be guaranteed to remove every sensitive value. Review a bundle before sharing it.
Information not collected by VersaRepair during normal app use
PlainNVR does not automatically send VersaRepair your camera streams or recordings, server address, camera URLs, camera credentials, PlainNVR username or password, stored clips, local-network details, or app activity. The current software includes no third-party advertising, VersaRepair analytics, or tracking SDK.
Website and direct downloads
The PlainNVR website and public release downloads use Cloudflare services, including its content-delivery, security, Web Analytics, and R2 object-storage infrastructure. When you visit the site or download a file, Cloudflare and the web server may process standard request information such as your IP address, approximate network location, date and time, requested URL, referrer, browser or download-client details, response status, page-view measurements, and security or caching events. This information may be used to deliver files, understand aggregate site usage, prevent abuse, diagnose failures, and protect the service.
R2 stores public release files such as installers, ISO images, checksums, and torrent metadata. It is not used as storage for your PlainNVR cameras or recordings. PlainNVR does not currently use advertising cookies or cross-site behavioral profiling on its public website.
BitTorrent downloads
BitTorrent is a public peer-to-peer network. If you download a PlainNVR release by torrent, other peers and tracker or discovery services may see your public IP address, torrent client details, connection timing, and transfer activity for that torrent. VersaRepair cannot make a public torrent anonymous. Use the direct HTTPS download instead if you do not want to expose that information to torrent participants.
App distribution and GitHub
Apple distributes PlainNVR Companion through the App Store for iPhone, iPad, and compatible Macs. Google distributes the Android app through Google Play. Apple and Google may process account, device, installation, download, purchase, usage, crash, diagnostic, and review information under their own privacy policies and device settings. PlainNVR source code, issues, and some release information are hosted on GitHub. Activity there follows GitHub's terms and privacy policy.
Optional services you choose
You may connect PlainNVR with Home Assistant, a reverse proxy, VPN, backup provider, NAS platform, or other network and storage services. Information sent to those services follows your configuration and their privacy practices. Treat generated Home Assistant stream URLs as credentials.
Network security
PlainNVR serves HTTP by default for private local deployments. HTTP does not encrypt credentials, session cookies, metadata, or camera media in transit. Use HTTPS through a trusted reverse proxy or a trusted VPN when traffic may cross an untrusted network. Do not expose an unconfigured server, the internal go2rtc API, or an unauthenticated RTSP relay to the public Internet.
Every current PlainNVR user has administrator-level access. Use strong, unique passwords, restrict the server and storage volumes, protect backups, keep the server and clients updated, and grant access only to people authorized to view or control the cameras.
Support information
If you contact VersaRepair through support, GitHub, an app-store review, or another channel, VersaRepair receives the information you choose to provide plus ordinary account and message metadata supplied by that service. Do not send passwords, stream tokens, private camera URLs, or recordings. Share logs or diagnostics only when necessary, after reviewing them for information you do not want to disclose.
Account and data deletion
PlainNVR accounts belong to the self-hosted server you or your server administrator controls; VersaRepair does not hold a matching PlainNVR cloud account. To delete an account, open the server's Users panel while signed in as a different administrator and delete the unwanted username. PlainNVR prevents deletion of the account currently in use and of the server's last remaining account. If necessary, create a replacement administrator, sign in with it, and then delete the old account.
Deleting a server account removes its username, password hash, and associated active server sessions from the active PlainNVR database. Camera configuration, recordings, snapshots, event history, logs, exports, and backups are server data rather than contents of an individual user account and must be removed separately by the administrator. Active-database deletion takes effect when the server completes the action; copies in administrator-managed backups remain until those backups are deleted or expire under the administrator's retention schedule.
For a complete self-hosted installation deletion, stop PlainNVR and remove its data, recording, export, log, and backup locations from the server and storage systems you control. On Android, sign out and uninstall PlainNVR Companion to remove its private app data, including the saved server address and username. For help identifying these locations, visit PlainNVR Support. Do not send passwords, camera URLs, or recordings in a support request.
Retention and deletion details
Server-side retention is controlled by your settings and storage administration. Deleting a camera does not automatically delete its existing recording files. Remove server data, recordings, snapshots, configuration, logs, and backups from the systems where you stored them when no longer needed.
On an Apple or Android device, sign out to end the active app session when that option is available, remove saved clips from Photos if desired, and uninstall the app to remove its app container. PlainNVR OS data, server data, backups, Cloudflare request and analytics records, Apple or Google distribution records, GitHub activity, and support correspondence are managed separately by the systems or providers that hold them. VersaRepair has no PlainNVR cloud account containing your normal camera or app data to delete.
Your choices
- Choose cameras, accounts, audio, schedules, retention, backups, and integrations.
- Choose the server address and private network, HTTPS, reverse proxy, or VPN route used by each client.
- Choose whether to install the heavy-beta OS, submit feedback, share diagnostics or a clip, or save a clip to Photos.
- Choose a direct HTTPS download instead of BitTorrent.
- Remove the app, revoke sessions or tokens, delete recordings, and remove server or appliance data you control.
Children
PlainNVR is a camera-system administration and learning utility intended for users age 13 and older. It is not directed to children under 13. Users ages 13 through 17 should use PlainNVR with permission and appropriate supervision from a parent, guardian, teacher, or other responsible adult, and should not be given access to cameras or recordings they are not authorized to view or control. Camera operators and supervising adults are responsible for lawful camera placement, recording, notice, consent, retention, and access in their jurisdiction.
Changes and contact
This policy may be updated if PlainNVR's server, clients, permissions, distribution, integrations, or data practices change. For privacy or support questions, visit PlainNVR Support.