It's a mobile app that polls an endpoint for json, after the user configures it (seemingly with a QR code), that's all. There's no middle-man server, and it's also not push.

Neat idea, low barrier to entry. Can't tell from docs how authz/authn are handled.