Terms of Use

Vaulteon is provided by Tarmeeza Digital Solutions (ترميزة للحلول الرقمية), LEGAL FORM, registered at FULL ADDRESS. In these terms, "we", "us" and "our" mean that company. "You" means the person using Vaulteon.

Contact: [email protected]

When you first open Vaulteon it shows you these terms and asks you to accept them. Accepting is a deliberate act and nothing else counts as one. We record which version you accepted and when, so that if we later change them we can tell you what changed from what you actually agreed to.

If you do not agree, do not accept, and do not use Vaulteon.

You must be at least 18 years old to accept these terms. If you are younger than that, you cannot enter into this agreement, and asking someone else to accept it for you does not fix that.

Vaulteon requires an account. You sign in with your email address and a code we send you. Signing in with Google or with Microsoft is planned but not available yet. There is no password.

You are responsible for keeping access to that email address or sign-in account. If you lose access to it, we may not be able to give you your account back, because that address is how we know it is you.

Tell us at [email protected] if you think someone else has got into your account.

Vaulteon Free includes app locking, the encrypted vault, unhiding and exporting your files, local backup and restore, and the break-in log without photographs. It is free.

Vaulteon Pro is a one-time purchase. Not a subscription. There is no recurring charge and no renewal. What it adds is listed on our website and in the app.

We may add features to either tier over time. Two promises about that, and we mean both:

• The free features listed above stay free for you, on any device where you already use them, for as long as you use Vaulteon. If we ever change what a new installation gets, that change does not reach back to you.
• We will not move a feature out of the free tier if doing so would stop you reaching files you have already saved. Getting your own data out of Vaulteon is free, permanently, for everyone.

4.1 Your right to use the software

We give you a personal, non-exclusive, non-transferable right to install and use Vaulteon on devices you own or personally control. Pro adds features to that right; it does not change its nature. The right to keep using what you bought does not end when this agreement does (see section 10), and we may end the agreement itself only on the grounds in that section.

Vaulteon is licensed to you, not sold to you. We keep ownership of the software and everything in it, and anything not given to you here stays with us.

Parts of Vaulteon are open-source software written by other people, used under their own licences. Those licences govern those parts and, where they give you more rights than this section does, they win. The list is at vaulteonlock.com/licences.

4.2 Updates

We will provide security updates for at least 5 years after you buy Pro. That is a floor, not a plan: we intend to support Vaulteon for as long as we are developing it, which we expect to be longer.

Feature updates are separate and are not promised for any period. New features arrive while Vaulteon is being developed, and what you bought keeps working either way. We are saying this plainly because the two are different things: a security update keeps your vault safe, and a new feature is something extra.

We will not let support lapse quietly. If we ever stop, we will publish an end-of-support date and tell you in the app, well before it arrives. That date can never cut short the 5 years of anyone who has already bought Pro. If we could not keep going, we would stop selling Pro before we stopped securing it.

Some updates are needed to keep Vaulteon working as described. If you choose not to install those, Vaulteon may not work as described, and that is not something we can be responsible for.

One licence covers one active installation at a time. You can move it to a new phone whenever you like, from your account page. Moving it deactivates it on the old phone.

If you bought through Google Play, Google's own rules on how many devices your Google account may use also apply.

Additional simultaneous devices can be bought at a discount. A family pack covers five devices under the same rules.

If your phone is lost, broken or wiped, ask us for a replacement code at [email protected]. If the old device has stopped contacting our servers, we will normally issue one free of charge.

We may cancel a licence that we can show was obtained fraudulently, through a reversed payment, or by circumventing payment. We will tell you why. Cancelling a licence never deletes your files and never stops you getting them out. Your vault opens, and every file can be removed from it, permanently and at no cost.

Buying through Google Play: Google Play handles the purchase, and the seller for your country is named on your purchase confirmation. Google's terms and refund policy apply to the transaction.

Buying from our website: Paddle is the seller of record. They take the payment, handle the tax, and their Buyer Terms apply to the transaction. Which Paddle company sells to you depends on where you live, and your receipt names it. We never see your card details.

Prices are shown before you pay and include any tax the seller must collect.

Refunds: ask the seller you bought from. Google's refund policy covers Play purchases; Paddle's covers direct ones.

If the law where you live gives you a right to cancel a purchase of digital content, that right applies and nothing here removes it. In the European Union and several other places that right lasts 14 days and does not depend on anything being wrong with the product. Because Pro is delivered immediately, the checkout may ask you to agree to that immediate delivery and to confirm you are giving up the cancellation right in exchange. If it asks, read it: agreeing is what ends the 14 days. If you would rather keep the right, do not agree, and wait.

Separately from all of the above, and regardless of any deadline: if Pro does not work as described, tell us at [email protected]. That is a different thing from changing your mind, the law treats it differently, and we would rather fix it than argue about which one it was.

7.1 Whose phone it goes on

Install and use Vaulteon only on a device you own or personally control. Do not install it on another person's phone, and do not set it up to watch, photograph, lock or wipe a device that someone else uses, unless they know and agree.

We are saying this plainly because of what the app can do. Vaulteon can see which app is in the foreground, can be made hard to remove, can photograph whoever fails to unlock it, and can be locked or wiped from a website. Every one of those exists to protect the person whose phone it is. Used on somebody else's phone they become something else entirely, and that is not a product we are willing to be.

7.2 The break-in photograph

If you turn on intruder capture, Vaulteon photographs whoever fails to unlock your phone. That photograph is taken by your device, stored on your device, and never sent to us.

The person photographed is not asked and is not told. Where you live may have rules about photographing people without warning them, and you are the one who chooses to switch the feature on, so please make sure you may.

7.2a Making Vaulteon look like something else

Vaulteon can be set to appear on your phone under a different name and icon, and its icon can be hidden from the app list entirely, in which case you open it with a code you dial. This is there for people whose risk is somebody picking up their unlocked phone.

Two things follow from it, and both are yours to manage. If you hide the icon and forget the code, getting back in is harder, so write the code down somewhere that is not the phone. And a disguised app is still an app: your phone's settings will show Vaulteon's real identity to anyone who looks there.

7.3 Please do not

• use Vaulteon to store material that is illegal where you live
• try to break, bypass or reverse engineer the licensing, except where the law expressly gives you that right or where you are doing security research under 7.5
• share, sell or publish activation codes
• attack our servers, or attempt to reach accounts that are not yours
• use our name, logo or branding without asking

If you do any of these, we may suspend your account. We will still not delete your files, and we cannot: they are on your phone, not with us.

7.4 Where you may use it

Vaulteon contains strong encryption, and some countries restrict downloading, using or exporting software like it. You confirm that you are not in a country, and not a person or organisation, that applicable export-control or sanctions rules would forbid us from supplying, and that you will follow the export rules that apply to you.

7.5 If you find a security flaw

Please tell us. Write to [email protected], and give us a reasonable chance to fix it before you tell anyone else.

Good-faith security research reported to us that way is not a breach of these terms, including the parts of 7.3 it would otherwise sit against. Our full policy, including what is in scope and how long we take, is at vaulteonlock.com/security.

Please read this section properly. It is the most important part of this document, and we would rather you knew now than found out later.

8.1 App locking is a deterrent, not a guarantee

Vaulteon can require a PIN before another app opens. This stops the ordinary case: someone picking up your unlocked phone and opening your gallery.

It cannot stop everyone. Android does not give any app total control over the device. Someone who knows your phone's own unlock code has ways around an app lock, and no app on Android can prevent that. Treat app locking as a strong deterrent, not as a wall.

8.2 Your files are encrypted, but the phone is still the phone

Files in the vault are encrypted and are unreadable to other apps and to anyone who takes the phone without your codes.

However: the encryption key is held in your phone's secure hardware. It protects against another app, and against a lost or stolen ordinary phone. It is not designed to defeat someone with full technical control of an unlocked device, such as a rooted phone or a forensic laboratory.

8.3 We cannot recover your vault. Ever.

We do not hold your files. We do not hold your PIN. We do not hold a master key.

The vault on your phone and the backups you make of it are different things, and this section is about both. Nothing we hold can open the vault. The backup key is a separate secret, and there is a way to recover that one, described below.

If you forget your PIN, the app offers a reset code and an emergency process. Those reset the credential. Your files remain.

If you lose your backup key, there are two ways back and one dead end, and it matters which you are in.

• If you still have the phone that made the backup, and the same installation of Vaulteon, it can open its own backups without you entering anything. Reinstalling the app ends this. The ability lives in a key Android holds for that installation, and removing the app removes it, so a reinstall leaves you needing the backup key like anybody else. Do not treat this route as a reason not to save your key.
• We hold a copy of your key, encrypted on your phone with your PIN before it reached us, and you can get it back in the app with Find my key by entering the PIN, pattern or password your phone last used. Changing it on the phone updates our copy. We check each try, and ten wrong tries in a day close the copy for a day. Every account has one; it is not something you switched on, and it is described in section 2.2 of the Privacy Policy. You may also have a second copy in your own cloud account, which is optional and is locked with your PIN alone.
• If you have lost the key, the phone, and your PIN, nobody can open those backups. Not you, not us. We hold nothing that would let us make an exception, and the same property is what stops a stranger opening a backup file they find.

Save your backup key when the app asks you to. That request is not a formality.

8.4 Backups are your responsibility

Uninstalling Vaulteon deletes the vault on that phone. So does a factory reset, and so does clearing the app's data. Losing the phone is different: the vault is still on it, encrypted, and still needs your PIN. What you have lost is your access to it, which is why a backup matters and why remote wipe exists.

Vaulteon gives you free, unlimited local backups and free restore. Whether you use them is up to you. We cannot recreate what was never backed up.

8.5 Remote lock and remote wipe are best-effort

These send a message to your phone. A phone that is switched off, has no signal, or has been disconnected from the internet will not receive it until it reconnects, and may never receive it.

They are useful. They are not a guarantee that a stolen phone has been locked, and you should not delay other steps (changing passwords, contacting your carrier, reporting the theft) on the assumption that they worked.

8.6 Remote wipe deletes your files permanently

If you turn on remote wipe and use it, the vault on that device is erased and cannot be recovered. Backups you made elsewhere are not affected. Check that you have a backup before you use it.

8.7 The service may be unavailable

We run a small service and we do not promise it will always be up. If it is down: your app keeps working, your vault opens, and your Pro features keep working for a long grace period. What will not work while it is down is signing up, buying, and sending remote commands.

What never depends on us being up. Your vault is on your phone and is opened by your PIN, so it opens whether we exist or not. Your backups are files you hold, opened by your backup key, and no check with us stands between you and them. That is a property of how the app is built rather than a promise about our uptime, which is why it is the thing to rely on.

If we ever shut down for good, we will say so in the app and on the website before it happens, and give you time to make a backup and write your key down. The vault and the backups keep working as described above.

8.8 Cloud accounts you connect are not ours

Vaulteon can send your encrypted backups, and a second copy of your backup key, to a Google Drive, OneDrive or Dropbox account that belongs to you. We do not run those services.

• That provider's terms govern your relationship with them, not these terms.
• They can change or end that account, and anyone with access to it can delete what is in it. Some of them put our folder somewhere you can see and tidy up, which is why the app warns you when you choose one of those.
• Files removed at the provider are gone, and we cannot recover them or tell you they went.

The backup key we hold for you (2.2 of the Privacy Policy) is separate and is not affected by any of this.

8.9 It is provided as it is

To the extent the law allows, Vaulteon is provided "as is" and without warranties of any kind.

Except that some warranties cannot be excluded. If you are a consumer, the law where you live gives you rights about whether digital content matches its description, works properly and stays supported. Nothing in this section takes any of those away, and section 4.2 is our own commitment on the last of them.

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else the law does not allow us to limit. If you are a consumer, your statutory rights are unaffected by anything here.

Subject to that, and to the extent the law allows:

• We are not liable for data we were never in a position to save. That means: files you did not back up; files lost because you uninstalled Vaulteon, reset the phone, cleared the app's data or used remote wipe; files lost because a cloud provider you connected removed them; and backups you can no longer open because the key, the phone and the PIN are all gone. Sections 8.3, 8.4 and 8.8 explain each of those, and a backup is the answer to all of them. None of that applies where we caused it. If your files are lost because Vaulteon had a fault, because we were careless, or because a remote command was issued that should not have been, the bullet above does not excuse us. It is about data we were never in a position to save, not about data we destroyed.

• We are not liable for loss we could not reasonably have seen coming when you bought Pro, or for lost profits or lost business.

• Our total liability to you for any claim is limited to the greater of what you have paid us for Pro, or USD 100.

Pro costs far less than USD 100, so that is the figure which will apply to almost everyone. That is deliberate. A cap set at what you paid would hand back the purchase price and call it a remedy, which is not a remedy at all. We would rather write a number that means something and that we can actually pay than a larger one we could not.

Nothing in these terms limits any liability that cannot be limited under the law of the country you live in. Where that law says a limit here does not apply to you, it does not apply to you, and the rest of this section still does.

You can stop at any time: delete your account in the app or on the website, and uninstall. Remember to unhide or back up your files first, because uninstalling erases the vault.

We may end it if you seriously or repeatedly break section 7. We will tell you why and, unless the law prevents us, give you reasonable notice to get your data out first.

A Pro licence you have paid for does not expire because this agreement ends, unless it was obtained fraudulently. Deleting your account does not refund it and does not cancel it, but it does delete the record that proves it is yours, so re-activating Pro afterwards may mean buying it again. Save your purchase confirmation before you delete, and ask us if you get stuck.

We may update these terms, and we will do it for a reason we can state: a change in the law, a change in what Vaulteon does, or a problem with the wording. Each new version gets a new number and date at the top.

If a change materially affects your rights, we will tell you in the app at least 30 days beforehand, and say what changed. If you do not accept it, you may stop using Vaulteon, and if you bought Pro within the previous 90 days you may ask for a refund.

We will not take away paid features you already have. If a change would materially reduce what your Pro purchase gave you, we will either keep an equivalent for you or give you the remedy the law of your country provides. That is not limited to the 90 days above: the 90 days is when a refund is automatic, not when your rights end.

Every previous version stays available at vaulteonlock.com/terms/changes, alongside a note on what changed. You should not have to ask us what you agreed to.

These terms are governed by the law of GOVERNING LAW.

If you are a consumer, that choice cannot take away the protections your own country's law gives you. Where the two differ and your law says its protection applies, your law wins.

Where a dispute is heard:

• If you are a consumer, you may bring a claim either in the courts of JURISDICTION or in the courts of the country you live in, whichever suits you.
• We will bring a claim against you only in the courts of the country you live in.
• If you are not a consumer, the courts of JURISDICTION have exclusive jurisdiction.

Before going to court, please write to us at [email protected]. Most things are easier to fix that way.

• If any part of these terms is found unenforceable, the rest still applies.

• Not enforcing something once does not mean we give up the right to enforce it later.

• You may not transfer your rights under these terms without asking us. We may transfer ours if the business is sold, and we will tell you if that happens.

• These terms are between you and us, and nobody else can enforce them.

• If something outside our control stops us doing our part, such as a war, a natural disaster, a national power or network failure, or a government order, we are not in breach for as long as it lasts. We will tell you, and if it goes on for more than 30 days you may end this agreement. This does not excuse us from anything we could have avoided, and it does not touch section 8.7, which already tells you what happens to your app when our service is down: it keeps working.

• How we reach each other. We write to the email address on your account, so keep it one you can read. You write to us at the addresses in section 14. An email counts as received the next working day, unless it did not arrive: if a message never reached you, we cannot treat you as having been told, and where the law requires notice to be given a particular way, that wins.

• These terms, plus our Privacy Policy, are the whole agreement between us.

Tarmeeza Digital Solutions
ترميزة للحلول الرقمية
FULL ADDRESS
[email protected]

Security flaws: [email protected] (see 7.5)