Using Noviscan from your phone

Who this is for: anyone who wants to check their alerts away from the computer that runs Noviscan. Assumes: Noviscan is running on a computer, at least one source feeds it, and you have an account on that instance. A viewer account is enough to look; naming a person requires an operator account.

The mobile app lets you check alerts and identify faces remotely. Advanced settings, sources, accounts, and groups stay in the web interface.

The mobile app is reserved for Premium licences; to find out where to download it, see the FAQ page of this site. A viewer account is enough to check alerts; an operator or administrator account is required to identify a person. This page applies to Noviscan 1.0.0.

What the mobile app does

On the phone, Noviscan:

• does not keep images durably, and does not send them to Secufor;
• sends neither usage statistics nor crash reports;
• creates no account: yours already exists on your instance, the phone pairs with it;
• leaves face analysis and recognition to your instance.

Pairing the phone with your instance

Pairing is the one moment when both devices must talk to each other for the first time. Do it at home, on your own Wi-Fi, before any use away from it.

1. On the computer, in the web interface: Security → Pair a device. An administrator account is required. A QR code appears — it expires, and it works only once.
2. On the phone, when the app opens: "Scan pairing QR code". Allow the camera if asked — that is all it is used for.
3. Check the addresses shown — the phone says: "Only pair if these addresses are indeed those of YOUR Noviscan instance." This is the only safeguard against a QR code that is not yours, and it is there on purpose.
4. "Device paired" appears, and you land on the dashboard.

If the QR code will not scan, the pairing screen accepts manual entry: instance address, pairing secret, and — if the web interface shows them — the certificate fingerprint and the certificate authority. The web interface displays all four values just below the QR code.

For manual entry, use the copy buttons shown in the web interface. Paste the certificate authority in full, BEGIN CERTIFICATE and END CERTIFICATE lines included.

Always prefer the QR code: it carries all four values at once, the instance confirmation included. With manual entry, the certificate authority is what most often gets pasted incomplete — and that omission, not an impossibility, is the most common cause of an "Instance unreachable" when everything else is correct.

If your instance announces itself on the network, it appears on its own under "Instances discovered on the network" and fills in the address for you.

When pairing fails, what the message means

The four tabs

• Dashboard — the state of monitoring: start or stop it, run a one-off scan, see the detection chart. Tapping a slice of the chart opens that day's alerts.
• Alerts — what called you.
• Review — the faces Noviscan could not name. Nothing here alerted you: this screen is waiting for your opinion, it is not reporting an incident.
• Settings — the instance, appearance, language, lock, roaming.

Looking at an alert

The list filters by period — Today, 7d, All —, by free text search (name, source, file name), and by person. Pull the list down to refresh it.

In the detail of an alert, you can:

• pinch the image to zoom — ⚠️ on iPhone and iPad; this gesture relies on a zoom native to iOS, and nothing is provided for Android in this version;
• swipe left or right to move to the next or previous alert, in the order of the list as you filtered it;
• double-tap the image to play the video, when there is one;
• long-press the image to export or share it — the app then hands over to your phone's own sharing.

The "Zoom on face" button switches between the cropped face and the whole scene. It and video replay belong to the Premium plan; without it, the button says so instead of disappearing.

Putting a name to a face

From an alert as from the review queue, the same gestures:

• 🚩 Suspect — a reserved person name, never whitelistable;
• one of the suggested people, which Noviscan ranks by likeness;
• a free-text name, which creates the person if they do not exist yet;
• Undecided / Decide later — the face leaves the queue unassigned, and turns up in Review the undecided, reachable from the Review tab;
• Skip →, which simply sends the face to the back of the queue, deciding nothing.

⚠️ Naming a face has a lasting consequence: a named face is no longer purged automatically, unlike an anonymous one. Name what you want to keep.

Leaving the local network

By default, the phone only reaches your instance on the same network. To reach it from outside, turn on Settings → Roaming → "Access outside the local network". The link then goes through an encrypted relay that puts the two devices in touch: your images do not travel through it in the clear, and the relay cannot read them.

This section only appears if your instance supplied, at pairing time, what is needed to find it from outside. If it is missing, the pairing did not carry those elements — pair again by QR code, on site.

Below the setting, two lines say what is actually happening: Connection (Local network or Relay) and Real-time (connected or disconnected). They are not decorative: they answer "why is this slow?" without having to guess.

Protecting access on the phone

Settings → Security → "Biometric unlock" requires your face or fingerprint when the app opens and when it returns from the background. The phone asks you to authenticate before turning the setting on — so that a lock you cannot open never gets installed.

This unlock is your phone's own: Noviscan sees neither your face nor your fingerprint, and keeps nothing of either.

Logging out or unpairing the phone

• Logging out closes your session on all your devices. The phone stays paired: you sign back in with your password.
• Unpairing this device forgets the instance on this phone — address, secret, certificate — and first tells the instance to revoke this device's token, which frees its quota slot — your licence bounds how many phones may be paired at the same time, and a device forgotten without revocation goes on occupying one — without an administrator having to step in. This revocation is an attempt bounded to a few seconds: if the instance does not respond within that time, the phone forgets the connection anyway, but the revocation itself does not happen. In that case, open Security → Devices in the web interface and revoke the device by hand.

Unpairing stays possible even when the instance is unreachable, from the "Instance unreachable" screen: a lost device must not remain attached to an instance you can no longer reach.

What stays on the phone, and what does not

In the phone's secure store (Keystore/Keychain), erased on unpairing: the instance address, the pairing secret, the certificate fingerprint, the certificate authority, and the instance name.

In the phone's cache: the images and videos you have viewed are written there so they are not downloaded again. ⚠️ They are not encrypted by the app at that point, and no retention period erases them: their removal is left to your phone's own cache management. An image deleted on the instance may therefore remain on the phone for a while. A phone used to look at alerts should be treated as a device that holds copies of them.

Going further

Installing the app, detection settings, adding a source, managing accounts, and groups of people: they live in the web interface, and in the other pages of this documentation.

---

Applies to Noviscan 1.0.0. The labels quoted are those of this version: if yours differ, you are not using this one.