Terms of Service — VaultKey

Please read these Terms of Service carefully before using VaultKey. By downloading, installing, accessing, or using VaultKey ("the App" or "the Service"), you agree to be bound by these terms. If you do not agree, do not use the Service.

1. Acceptance of Terms

By downloading, installing, or using VaultKey in any form (web application, Android application, or any future platform), you confirm that: • You are at least 13 years of age (or 16 in the EEA). • You have read, understood, and agree to be bound by these Terms of Service. • You agree to our Privacy Policy, which is incorporated into these Terms by reference. If you are using VaultKey on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

2. Description of Service

VaultKey is a password management service that allows you to securely store, organise, and retrieve your credentials across devices. The Service uses: • AES-256-GCM client-side encryption to protect your credential data. • Google Firebase for authentication and encrypted cloud storage. • Biometric authentication (Android only) for device-level vault unlock. The Service is provided free of charge. We reserve the right to introduce optional paid features in the future.

3. Licence Grant

Subject to these Terms, we grant you a limited, personal, non-exclusive, non-transferable, revocable licence to access and use VaultKey for your personal, non-commercial purposes. You may NOT: • Copy, modify, adapt, translate, or create derivative works of the Service. • Reverse-engineer, decompile, disassemble, or attempt to extract the source code. • Sell, resell, sublicense, or commercially exploit the Service. • Use the Service for any unlawful or unauthorised purpose. • Remove, alter, or obscure any proprietary notices or labels. • Scrape, crawl, or systematically extract data from the Service using automated means.

4. Your Account & Data

You are solely responsible for: • Maintaining the confidentiality of your Google account credentials and master password. • All activity that occurs under your account. • The accuracy and legality of any data you store in the Service. Critical: VaultKey uses zero-knowledge encryption. We cannot access, read, recover, or reset your encrypted vault or master password under any circumstances. If you lose your master password, your encrypted data cannot be recovered. You are solely responsible for keeping your master password secure and backed up.

Important: Losing your master password means permanent, irrecoverable loss of access to your encrypted vault. Store your master password securely (e.g., written down in a physically secure location).

5. Acceptable Use

You agree not to use VaultKey to: • Store credentials for illegal services, platforms, or activities. • Circumvent, disable, or interfere with security features of the Service. • Attempt to gain unauthorised access to any other user's vault or account. • Upload malicious code, viruses, or any software intended to damage or disrupt the Service. • Violate any applicable local, national, or international law or regulation. • Impersonate any person or entity, or misrepresent your affiliation with any person or entity. We reserve the right to suspend or terminate accounts found to be in violation of these terms without prior notice.

6. Security

While VaultKey employs strong security measures including AES-256-GCM encryption, PBKDF2 key derivation, and Android Keystore hardware protection, no security system is infallible. You acknowledge that: • You use the Service at your own risk. • We cannot guarantee protection against all possible threats (e.g., device theft, operating system vulnerabilities, or side-channel attacks). • You are encouraged to use a strong, unique master password and keep your Google account and device software up to date. • Enabling two-factor authentication on your Google account is strongly recommended. If you discover a security vulnerability in VaultKey, please report it responsibly to support@vaultkey.app.

7. Subscriptions & Payments

VaultKey is currently provided free of charge. All core features are available at no cost. If we introduce paid features or subscription plans in the future: • They will be clearly disclosed and distinguished from free features before any payment is required. • Pricing, billing cycles, and refund policies will be detailed at the point of purchase. • Payments processed through Google Play will be governed by Google Play's payment terms. • We will provide reasonable notice (at least 30 days) before any change to pricing affects existing users.

8. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTY OF ANY KIND.

WE EXPRESSLY DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO: (A) WARRANTIES OF MERCHANTABILITY; (B) FITNESS FOR A PARTICULAR PURPOSE; (C) NON-INFRINGEMENT; (D) THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS; OR (E) THAT THE SERVICE WILL MEET YOUR REQUIREMENTS.

Use of the Service is at your sole risk. We do not warrant the accuracy, completeness, or usefulness of any information provided through the Service.

9. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL VAULTKEY, ITS DEVELOPERS, OFFICERS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY:

INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO: LOSS OF DATA; LOSS OF PASSWORDS OR CREDENTIALS; LOSS OF PROFITS OR REVENUE; LOSS OF GOODWILL; BUSINESS INTERRUPTION; OR ANY OTHER INTANGIBLE LOSSES — ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Our total aggregate liability to you for any claim arising from or relating to these Terms or the Service shall not exceed the total amount paid by you (if any) for the Service in the 12 months immediately preceding the claim.

10. Termination

You may stop using the Service at any time. To delete your account and associated data, contact us at support@vaultkey.app. We may suspend or terminate your access to the Service at any time, without prior notice, if: • You violate any provision of these Terms. • We are required to do so by law. • We determine that continuing to provide the Service to you would cause harm. Upon termination: • Your right to use the Service ceases immediately. • Encrypted data stored in Firebase will be retained according to our data retention policy (see Privacy Policy §4) unless you request deletion. • Provisions of these Terms that by their nature should survive termination will survive, including Sections 8, 9, and 11.

11. Governing Law & Disputes

These Terms of Service shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions. Any dispute, controversy, or claim arising out of or relating to these Terms or the use of the Service that cannot be resolved informally shall be subject to the exclusive jurisdiction of the courts located in Tamil Nadu, India. Before initiating formal legal proceedings, you agree to first contact us at support@vaultkey.app to attempt informal resolution. We will make a good-faith effort to resolve disputes within 30 days.

12. Changes to Terms

We reserve the right to modify these Terms at any time. When we make material changes, we will: • Update the "Last updated" date at the top of this page. • Post a notice within the application. • For significant changes, provide at least 14 days' advance notice via in-app notification. Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of the changes. If you do not agree to the new Terms, you must stop using the Service before they take effect.

13. Contact

For questions about these Terms, please contact us: Email: support@vaultkey.app Subject line: "Terms Enquiry" We will respond within 30 days.