Terms of service

Cryptex Vault and Online Services

The application stores your vault on your device. You can use it without an Online Services account, export your data, create encrypted backups and configure your own synchronization servers. The software licences supplied with the application and its components remain applicable. These terms do not replace them.

Online Services is an optional subscription for managed signaling and STUN/TURN services and encrypted backup storage. Devices must be online at the same time to synchronize. Backup storage does not synchronize changes to offline devices.

Account security and recovery

Keep your recovery information safe and revoke Online Services access for lost devices. Cryptex Industries d.o.o. cannot decrypt your vault or replace missing vault credentials.

An Online Services Recovery Kit lets you retrieve an available encrypted backup. To decrypt it, you need either the vault password with any applicable additional key protection, or the vault recovery code valid for that backup. See the recovery guide.

Do not interfere with the service, bypass access controls or rate limits, access accounts or devices without permission, or store or transmit material unlawfully. Security research is covered by our responsible disclosure policy.

Prices, renewal and cancellation

See the pricing page for monthly and yearly subscription prices, including VAT. Checkout shows the amount, currency, billing interval and any free trial before you subscribe. A subscription renews at that interval until cancelled.

Price increases apply only from a future renewal, after advance notice in the application. They do not change the price of a billing period you have already paid for. You can cancel renewal before the new price takes effect.

For subscriptions bought through Stripe checkout, Link is the merchant of record through Stripe Managed Payments. It handles payment support, receipts, invoices, payment methods and transaction disputes. Purchases are subject to Link's terms. Cryptex Industries d.o.o. provides product support.

For subscriptions bought in the Android app from Google Play, Google Play processes the payment under the Google Play Terms of Service and handles payment support, receipts and payment methods.

To cancel renewal of a Stripe subscription, open Manage billing in your Online Services account. To cancel a Google Play subscription, open Subscriptions in Google Play. Cancellation takes effect at the end of your paid billing period. You retain the paid service until then and will not be charged for another period.

Free trial

Your first Online Services subscription, monthly or yearly, starts with a 14-day free trial. Each account can have one free trial, and only if it has never had a Stripe or Google Play subscription. Google Play also allows one free trial per Google account and may decline a trial on that basis. During the trial you get the same Online Services as a paid subscriber.

You must add a payment method to start the trial. When the trial ends, the subscription becomes a paid subscription at the price and billing interval shown at checkout, and that payment method is charged automatically, unless you cancel before the trial ends. The first paid billing period starts when the trial ends.

To cancel during the trial, follow the same steps as above: Manage billing for a Stripe subscription, or Subscriptions in Google Play for a Google Play subscription. If you cancel during the trial, you keep Online Services until the trial ends, you are not charged, and the subscription then ends.

Refunds and the cooling-off period

Cancelling renewal does not itself refund the current billing period. We do not offer voluntary refunds for non-use or a change of mind beyond refunds available under Link's terms, Google Play's policies or applicable law.

For Stripe purchases, under Link's terms, EU consumers can cancel their purchase within 14 days of receiving access. To use this cooling-off right, contact Link support and give "cooling off period" as the reason for your refund request.

If your subscription starts with a free trial, you receive access when the trial starts. The 14 days under Link's terms therefore run during the trial, and nothing is charged in that time. To end the subscription without paying, cancel before the trial ends.

To request a refund for a Stripe purchase, follow Link's refund instructions. For a Google Play purchase, follow Google Play's refund instructions.

Your statutory consumer rights remain unaffected, including remedies if the service does not meet the contract.

Storage and retention

Each account has 150 MB of backup storage, including pending uploads. Each backup may be up to 10 MB. Uploads that would exceed the allowance are rejected; older backups are not deleted to make room.

Each completed backup is retained for its first 24 hours. After that, we keep the newest backup per UTC day through 30 days, then the newest per calendar month through 366 days. The newest backup from each current root device is protected from routine pruning.

When backup entitlement ends, uploads stop. For 90 days, you can download or delete remaining backups, subject to normal retention. After that, backups are queued for deletion. Deleting your account skips this grace period and queues its backups for deletion.

Keep a separate encrypted backup and the recovery information needed to open it. The Online Services documentation explains upload limits and retention in detail.

Changes to the service or these terms

We may update the application and Online Services to fix faults, address security issues, meet legal requirements or improve the service.

We will notify you in the application before material changes take effect. This includes changes to subscription prices, storage allowances, retention, paid features or these terms. The notice will explain what is changing, when it takes effect, and any cancellation or other rights that apply.

Where the law requires a notice on a durable medium, we will provide it in a form you can save and refer to later. Your statutory rights to end the contract or obtain a refund for qualifying changes remain unaffected.

Availability

Maintenance, network problems and device or server failures can interrupt Online Services. We do not guarantee uninterrupted or error-free availability. This does not exclude liability or remedies that cannot be excluded under applicable law.

Suspension

We may restrict Online Services access to address a security threat, unlawful use, a breach of these terms or a legal requirement. Where possible, we will explain the reason and give notice before restricting access. Urgent security issues or legal restrictions may prevent advance notice.

If you believe a restriction is mistaken, contact [email protected] to ask us to review it. Do not send your vault password, recovery codes or Recovery Kit.

A restriction may interrupt managed connections and backup access. It does not remotely erase your local vault or downloaded backups. The retention rules above and any mandatory consumer remedies still apply, unless a legal requirement prevents us from retaining or providing access to particular data.

If Cryptex Industries d.o.o. closes

This section applies if Cryptex Industries d.o.o. closes or permanently ends Online Services. Your local vault does not depend on Online Services and keeps working after the shutdown.

Notice

We will announce the closure in the application at least 90 days before Online Services stops. The notice gives the shutdown date and explains how to download your managed backups, export your vault and switch to your own servers. We will also publish it on this website.

Service until the shutdown date

From the day we announce the closure, no new subscription or free trial starts and no subscription renews. Every subscription and free trial active on that day keeps full Online Services until the shutdown date, at no further charge. This includes managed signaling, STUN/TURN and backup uploads. A monthly subscription or a trial that would have ended sooner stays active until the shutdown date.

Refunds

If you paid for time after the shutdown date, we refund the unused part pro rata to your original payment method. Your statutory consumer rights remain unaffected.

Managed backups

Backups stored on the day we announce the closure stay available to download or delete until the shutdown date, subject to normal retention. After the shutdown date, we delete hosted backups and Online Services account data. Your local vaults and downloaded backups are not affected.

Funds for the notice period

We keep funds set aside to run Online Services through the full 90-day notice period.

After the shutdown

We will release a final update of the applications. It tells you that Online Services has ended and points you to your backups, data export and self-hosting.

The source code repository will be archived, not deleted. It also holds this website, including the self-hosting and recovery guides, so you can still build the applications, run your own servers and read the guides after this website goes offline.

Sale or transfer

If we sell or transfer the company or Online Services, the new operator must take over these terms, including this section. If it does not, we follow the closure process above before the transfer.

Contact and privacy

The Privacy policy explains how we process data when you use the website and Online Services.

For product support or legal notices, contact [email protected]. Cryptex Industries d.o.o. is based in Croatia. Its Croatian personal identification number, OIB, is 55912170784.