Terms of Service

These terms govern your use of Secure Pass — our web app, mobile apps, and the services behind them. By creating an account, you agree to them.

Your account

• You must provide accurate registration details and keep your master password confidential — we cannot reset it for you, because we never receive it.
• You're responsible for activity that happens under your account, including anyone else you allow to access your device while unlocked.
• You must be able to legally form a contract in your jurisdiction to use Secure Pass.

Zero-knowledge encryption — and its trade-off

Every credential you store is encrypted on your device before it reaches us, using a key derived from your master password. This means we cannot read your vault — and it also means we cannot recover it for you if you forget your master password and have no working recovery method set up. Set up account recovery (recovery codes and/or a recovery email or phone) as soon as you create your vault.

Subscriptions & billing

• Secure Pass offers a Free tier and paid Starter, Pro, and Business tiers, billed monthly through Stripe.
• Paid plans renew automatically each billing period until cancelled.
• You can cancel at any time; access continues until the end of the period you've already paid for.
• Prices and included features may change; we'll give notice of material changes before they apply to your next billing cycle.

Acceptable use

You agree not to:

• Use Secure Pass to store or process unlawful content, or to facilitate unlawful activity.
• Attempt to breach, probe, or circumvent the encryption, authentication, or rate-limiting that protects the service, except as part of a disclosed, authorised security review.
• Reverse-engineer, resell, or white-label the service without our written permission.
• Use automated means to create accounts or extract data at scale.

Service availability

We aim to keep Secure Pass available and reliable, but the service is provided "as is" without guarantee of uninterrupted availability. Local, offline access to a previously synced vault may still work during an outage on the mobile app; the web app requires connectivity.

Termination

You may stop using Secure Pass and close your account at any time. We may suspend or terminate accounts that violate these terms, with notice where practical.

Liability

Secure Pass is provided without warranties of any kind, to the maximum extent permitted by law. We are not liable for indirect, incidental, or consequential damages arising from your use of the service, including loss of access to vault data caused by a forgotten master password with no recovery method configured.

Changes to these terms

We may update these terms from time to time. Continued use of Secure Pass after an update constitutes acceptance of the revised terms.

Contact

Questions about these terms can be sent to support@securepassvault.app.

This document is a plain-language reference reflecting how Secure Pass actually operates. It has not been reviewed by a lawyer — have it reviewed by qualified counsel for your jurisdiction before relying on it as a binding contract.