Terms of Service

1. The service & this agreement

These terms govern use of Revault’s website, web cloud, and native apps, provided by the operator identified below. By using the service, you agree to these terms. If you do not agree, do not use it. Mandatory consumer and privacy rights continue to apply.

Revault encrypts and organizes personal files. Native mobile vaults work locally, with optional private-cloud sync. Web-cloud storage, file sharing, and paid features have their own technical limits and availability. The Privacy Policy explains how information is processed.

2. Access & accounts

You must be legally capable of accepting these terms, or have the authorization of a parent or guardian where permitted. You are responsible for lawful use in your location.

iOS and Android do not require creation of a Revault account. Optional native sync uses your Apple or Google account with that provider. The web app uses a separate passkey account. Keep your devices, authenticators, and account access secure. A web sign-in does not unlock encrypted vaults.

3. Encryption keys, backups & Safe Exit

Keep each vault’s recovery key securely and separately from encrypted backups. A recovery key needs the corresponding encrypted vault data; it is not itself a file backup. Test restores before relying on a backup. Clearing app or browser data, uninstalling, losing a device, or losing secrets may make files permanently inaccessible.

We cannot bypass encryption or guarantee recovery. An account or purchase reset does not restore a lost vault key. Changing a device pattern does not revoke every other device, old backup, or previously exposed recovery key. If a vault key is compromised, move the files to a newly keyed vault.

Safe Exit is a local action that can remove other vaults’ keys, cached files, and pending changes. It has no guaranteed undo and does not promise secure forensic erasure. Cloud copies, backups, exports, and other-device copies may remain. Understand its behavior before enabling it.

4. Your content, exports & sharing

You retain ownership of your content. You grant only the permissions needed to store, transmit, replicate, and deliver the encrypted material or shared copies you ask the service to handle. This permission does not transfer ownership of your files.

Only upload or share content you have the right to use. A recipient or anyone holding a complete share link may save a copy. Expiration, revocation, and download controls cannot recall an existing copy. Decrypted exports and files opened in another app are outside Revault’s encrypted storage protections.

Native shares are independently encrypted snapshots, not ongoing access to the source vault. CloudKit sharing requires the relevant Apple accounts. Server shares use a separate invitation and decryption key, expire at the sender’s chosen time within 30 days, may have a separate destruction timer starting at first access, and are subject to capacity and abuse limits. Deleting the source file does not revoke a share. Optional media optimization may change resolution, format and quality for newly imported copies; source files are not modified.

The native clouds and web cloud are separate. Use supported encrypted backup transfers when moving vaults between them. Revault does not open another product’s proprietary encrypted vault merely because both products use encryption.

5. Acceptable use

Do not use the service for unlawful content or activity, to infringe others’ rights, distribute malware, exploit children, threaten or abuse others, or gain unauthorized access. Do not attack infrastructure, evade enforced service limits, impersonate another user, or interfere with other people’s access.

Encryption does not exempt activity from the law. We may investigate abuse using information available to us and restrict hosted services where reasonably necessary. Good-faith security research should avoid access to other users’ data and be reported privately to the operator.

6. Paid features, subscriptions & refunds

The purchase screen identifies the product, price, currency, billing period, and any trial or renewal terms before purchase. Limits and features depend on the selected product and platform. Store purchases do not automatically grant access on another billing platform unless expressly offered.

Recurring subscriptions renew according to the terms shown at purchase until cancelled through the provider that billed you. Manage App Store purchases through Apple, Google Play purchases through Google, and Polar purchases through the web billing portal. Uninstalling an app, deleting a vault, or stopping sync does not cancel a subscription.

Cancellation normally stops future renewals; access continues for the period specified by the provider unless refunded or otherwise ended under applicable rules. Refunds and statutory withdrawal rights are governed by applicable law and the selling provider’s process. Nothing here removes a refund or consumer right that cannot lawfully be excluded.

Payment status may need verification or restoration. Losing a paid entitlement must not prevent unlocking, recovering, or exporting existing vaults; creation or additional uploads may be limited. Native cloud storage charges and capacity are separate from Revault purchases.

7. Availability, changes & third-party services

We aim to provide a reliable service but do not guarantee uninterrupted access, permanent storage, or compatibility with every device, browser, file type, or future operating-system version. Storage can be evicted, networks can fail, and third-party APIs can change. Keep independent backups of important data.

Apple, Google, Polar, infrastructure providers, and any S3-compatible service you choose have their own terms. We do not control their account decisions, storage quotas, outages, or prices. Revault’s encryption does not eliminate their ability to observe operational metadata.

Features and plans may evolve. Where a material paid-service change affects you, we will provide notice and any remedies required by law. See the security model for documented boundaries; no claim of absolute security or independent audit is made.

8. Ending use, deletion & suspension

You can stop using the apps at any time. Export backups first if you need your data later, cancel subscriptions separately, and manage cloud copies using the relevant service’s controls. Local deletion may not erase backups, encrypted revision history, or files on other devices.

We may suspend hosted access for serious violations, legal obligations, or threats to service security. Where lawful and practical, we will provide notice and an opportunity to address the problem. Service discontinuation and paid access remain subject to applicable consumer obligations. We do not have a remote decryption key for your local native vaults.

9. Responsibility, liability & your legal rights

To the extent permitted by law, the service is supplied on an “as available” basis without a promise that it will meet every particular purpose or prevent every loss, attack, or interruption. You are responsible for protecting your secrets, maintaining backups, and deciding whether the service meets your needs.

We are responsible for losses to the extent required by applicable law. These terms do not exclude liability for fraud, deliberate misconduct, death or personal injury caused by negligence, or any other liability that cannot lawfully be limited. They do not waive mandatory warranties, statutory remedies, or your right to bring a claim before a court or authority with jurisdiction.

No mandatory arbitration, class-action waiver, or foreign court requirement is imposed by these terms. Applicable law determines the governing law and forum, including any mandatory protections in your place of residence.

10. Updates & contact

We may revise these terms as the service changes and will update the date above. Material changes will be communicated through an appropriate service notice where practicable. Changes do not retrospectively remove accrued legal rights.

Contact the operator for support, privacy requests, security reports, or questions about these terms. Do not send vault patterns, recovery secrets, or private keys.