Terms of Service — archived draft

Developer Locker API — private-preview Terms of Service Version: 2026-11-08-us13-preview-locker-2 Application: Prospectively upon valid acceptance of this version. Key points — read the full agreement: - Your agreement is with Developer Locker LLC, identified in Section 1. - A working local vault requires online access to its bound account. Supported complete backups can recover vault contents into an authenticated, empty destination vault, including under a new account. A backup file alone does not provide offline recovery or bypass required authentication. - Play subscriptions renew unless cancelled. Refunds and cancellation follow applicable Google Play policies, law, purchase terms and continuing prior rights. - Warranty and liability limitations, with important exceptions, appear in Sections 13 and 14. Replacement Terms require affirmative agreement for the identified new actions; existing-data exit and cancellation rights are preserved. CURRENT PRIVATE-PREVIEW RESTRICTIONS This version governs the current private preview. Only synthetic test credentials, passwords and notes may be entered until genuine-data use is separately approved for the exact release. Purchases remain disabled. Company formation, these Terms and a signed APK do not establish security approval, Google approval, completion of device testing or independent review. The commercial offer described below is not available in a build with purchases disabled. 1. OPERATOR, ELIGIBILITY AND AGREEMENT Developer Locker API is provided by Developer Locker LLC, a limited liability company organized under the laws of South Carolina, United States ("we," "us" and "our"). "Developer Locker API" is the product name. Developer Locker LLC is the contracting service provider. Support and billing: aiprobldr@devlockapi.com. Privacy and private security reports: aiprobldr@devlockapi.com. Formal legal notices: aiprobldr@devlockapi.com. This agreement is between you and Developer Locker LLC. A member, manager, worker, relative or property owner does not become an individual contracting party or guarantor merely because of that relationship, a shared address or ownership of premises. This does not release a separate guarantee, earlier obligation, responsibility for one's own legally actionable conduct or any other liability imposed by applicable law. The app, account services and directory features are the "Service." These Terms govern your use when you validly agree to them. Public directory browsing is available without an account; visiting it or displaying a link to these Terms does not by itself record agreement. The Privacy Notice describes applicable data handling whether or not a visitor has agreed to these Terms. The intended audience is users in the United States aged 13 or older. Users under 13 may not create an account or use account/vault features. An agreement must be made by a person with the legal capacity and authority to make it, including a valid representative arrangement where applicable. Any consent required by applicable law or applicable platform rules remains necessary. This paragraph does not waive a minor's mandatory rights or authorize unlawful use. You agree by selecting the identified acceptance control and completing the associated action after an opportunity to read and save the stated version. Viewing or downloading the Terms does not record agreement. General agreement is not marketing consent, a purchase authorization or a substitute for separate consent required by law or Google Play. Section 16 explains replacement versions. 2. SERVICE SCOPE AND RECORDS Public directory browsing is free. Creating or editing free directory lists and Favorites requires a signed-in account, but no subscription, vault or authenticator enrollment. These lists are unencrypted, shared within that browser/app profile, not synchronized to our cloud, and separate from encrypted vault backups. They may remain after sign-out or account deletion. Do not put secrets in free lists. The Android vault stores supported records encrypted in private device storage without new Developer Locker API cloud-vault synchronization. Record types differ: a fingerprint-only or organization-only record does not retain a recoverable secret. Supported saved-value records, older encrypted records and compatible imports or backups may retain encrypted values. A fingerprint cannot recreate a value that was never retained. Passwords and plain-text notes are supported; images and document attachments are not. Device storage and technical size limits apply. Account authentication, verification email, security, agreement and applicable billing records are separate online services. Installing this revision does not erase legacy hosted records or historical backups; their handling is addressed in the Privacy Notice and retention schedule. Builds labeled private preview or test remain subject to their synthetic-data restrictions. These Terms, a successful app signature and a production package name do not establish security certification or permission to disregard a build's restrictions. 3. ACCOUNTS, CUSTOMER CONTENT AND PERMITTED USE Provide accurate account information. Protect your device, screen lock, account password, authenticator and recovery material. Do not share an account in a way that defeats its protections. Promptly report suspected unauthorized access through the private contact above. Never send support API secrets, passwords, recovery words/passphrases, authenticator seeds, one-time codes or signing keys. As between you and us, you retain your rights in your content. You authorize only the processing reasonably necessary to provide the Service as described in the Privacy Notice. This does not transfer ownership, authorize sale of vault contents or give us access to decryption material the Service does not otherwise receive. Manage only credentials and information you are authorized to use. Follow applicable provider and employer rules, choose appropriate permissions and spending limits, and revoke or rotate exposed credentials with their issuers. Deleting a Developer Locker API record or account does not revoke a provider credential. Do not access another person's account or data, attack or disrupt services, introduce malicious code, infringe rights, or use credentials without permission. Do not bypass technical protections or reverse engineer except as applicable law or an applicable open-source license permits. Security testing requires applicable authorization; these Terms do not authorize testing third-party providers. You are responsible for your own authorized actions and legally attributable misuse. This does not make you responsible for our own breach or excuse duties that law imposes on us. 4. INDEPENDENT PROVIDERS AND EXTERNAL OPERATIONS Directory entries, links, prices and check dates are informational. They are not endorsements, affiliation statements, independent security audits or guarantees. Providers may change pricing, eligibility, terms and availability. A check date describes a limited past check, not continuing accuracy or safety. You deal with providers under their own terms. Provider API charges are separate from Developer Locker API subscription fees. We do not execute provider API requests using your saved credentials, guarantee a provider's performance or undertake to repay its charges. Responsibility imposed by law for our own conduct remains intact. User-requested external operations are described before use in the applicable notices. These include provider links, supported autofill destination-verification requests and optional password-exposure checks. No general permission to transmit vault contents to third parties is created by these Terms. Selected backup-storage providers process exported files under their own settings and terms. 5. SECURITY SAFEGUARDS AND LIMITS We use reasonable safeguards appropriate to the Service. The Security Notice explains encryption and device key protection. Hardware backing and available device authentication vary; a supported screen-lock credential may be permitted. Account passwords, authenticator codes and passkeys authorize account access. The vault passphrase separately protects the vault encryption key. Supported alternate backup recovery combines locally derived protection from the account password and vault passphrase used when that backup was created with secret output from the original registered, backup-capable passkey. Ordinary account verification alone does not decrypt that backup. No service is completely secure. We do not guarantee uninterrupted availability, compatibility with every device, prevention of every compromise or recovery in every circumstance. Malware, compromised devices and exposed recovery material can defeat protections. We do not claim an independent audit or certification unless a specific completed assessment is accurately identified. Revoking a session, changing a passphrase, forgetting a device or deleting an entry cannot recall copies already made. Rotate potentially exposed provider credentials at their source. We will provide incident notices when required by applicable law. These limits do not waive legally required security/privacy duties or remedies. 6. LOCAL ACCESS, BACKUP AND RECOVERY Complete encrypted backups are optional point-in-time exports to storage you choose. They are not automatic synchronization. A document provider or cloud folder you choose may synchronize the file under its own settings. Developer Locker API does not host that backup. Protect recovery material separately and test restoration with synthetic data before relying on it. Export success confirms the write, not an independent restoration or disconnection of the storage device. Protected operations on a working local vault require online authentication to the account bound to it. Supported complete-backup restoration requires an authenticated destination account, a complete compatible backup, the required recovery material and an empty local vault; it does not merge with or overwrite an existing vault. The destination may be a new account after deletion of the original. Recovery with the backup’s 24 recovery words preserves those words and lets you choose a vault passphrase for the restored vault. Contents are re-encrypted and bound to the destination account. The account identity is not merely an email address. Creating another account with the same email, deleting the original account or switching between staging and production does not preserve the old identity. Supported restoration recovers vault contents, not a deleted account’s login, billing or security history. An authenticated destination and compatible recovery implementation remain necessary. An outage or unavailable destination authentication can prevent restoration; having a file does not establish independent offline recovery or guaranteed access after a backend closes. Verify the complete backup and its supported recovery route before relying on it. The all-three alternative is available only for new backups that explicitly include it and a compatible original registered passkey/provider. It requires the account password and vault passphrase used at backup creation plus that passkey’s required secret output. Ordinary biometric confirmation or a newly registered replacement passkey is not a substitute. Later password/passphrase changes, password resets or new registrations do not update an already exported file. A backup without that alternate envelope still needs its supported recovery-word route. Alternate restoration creates a new set of 24 recovery words for the restored vault, which must be saved and confirmed. Normal recovery-word restoration preserves its existing words, and ordinary locking or sign-in does not generate replacements. Device loss, uninstalling, clearing app data or losing required recovery material can permanently prevent access. Account-password reset does not decrypt a vault; recovery words cannot replace missing contents. Support cannot supply missing decryption material. Fingerprint-only records cannot recover unstored values. Deleting live entries does not erase exported copies; deleting a backup does not delete live contents. No guaranteed remote erasure is provided. 7. SUBSCRIPTION OFFERS AND PURCHASE CONSENT Where purchases are available, the U.S. offer is US$4.99 per month or US$44.99 per year, with a 14-day trial for eligible customers. The monthly plan permits 50 active keys; the yearly plan permits 100 active keys. Expired or inactive keys do not count. No lifetime plan is offered. Google Play displays the actual localized offer, eligibility, billing period, taxes, trial conversion and charge dates before purchase. A trial converts to the disclosed paid subscription unless cancelled in time. An ineligible account may receive a clearly disclosed paid offer without a trial. General Terms acceptance does not authorize a charge; the separate Play purchase confirmation is required. Subscriptions renew for the selected period until cancelled unless the purchase screen expressly provides otherwise. Purchases are processed under applicable Google Play terms. We remain responsible for our Service and express commitments; we do not receive payment-card details. We and Google Play will give required price-change notices and obtain any consent required by law and Play rules. Purchases remain disabled in private-preview builds. No paragraph here activates an unavailable offer or authorizes a payment outside the supported purchase flow. 8. CANCELLATION AND REFUNDS Cancel future renewals through Subscription settings or directly in Google Play under Payments & subscriptions. No call, survey or explanation is required. Uninstalling the app or declining replacement Terms does not itself cancel a subscription. Access and entitlement after cancellation or a refund are determined by the applicable purchase terms, Google Play policies and law. Refund eligibility, amounts, request procedures and processing are governed by applicable Google Play policies, applicable law and the purchase offer that governed the transaction. Use Google Play's applicable refund-request process. Where Google refers a request to the developer or a developer obligation applies, use the support contact in Section 1. Google Play processes Play transactions; this does not transfer our own legally or contractually required refund/support obligations to Google. This version offers no separate voluntary refund guarantee. It does not add an automatic 48-hour refund, a special prorated-refund promise or a separate full- renewal-refund guarantee. Processing and bank-credit times depend on the applicable refund process; no additional completion deadline is promised here. This policy applies prospectively only where this version properly governs the transaction. It does not revoke accrued rights or obligations that continue under an earlier accepted agreement, or reduce mandatory legal/Google Play remedies. Cancellation does not delete encryption keys. Existing local-data access remains subject to actual authentication and the limitations in Section 6. Cancellation, account deletion and provider-credential revocation are separate actions. Required rights to retrieve/delete data and any continuing earlier commitments are preserved. 9. PRIVACY, ACCOUNT DELETION AND RETENTION Our Privacy Notice (/legal/privacy), including its retention disclosures, and Security Notice (/legal/security) describe data handling, safeguards, processors, rights, request channels, storage/transfer details and justified retention periods. Account/billing records are separate from locally encrypted vault contents. Pseudonymous records are not anonymous. These notices do not waive statutory rights. Request account deletion in the app or through the account-deletion page (/delete-account). If sign-in or an authenticator is unavailable, contact the privacy route in Section 1. Requests may require reasonable identity verification consistent with law; verification must not obstruct valid requests. Recording a request does not mean deletion has finished. Handling, deadlines and any exceptions follow applicable law, applicable platform requirements and continuing governing terms. Account deletion can remove authentication for the existing local vault. Review/retrieve needed information and test any backup you wish to retain before deletion. A compatible complete backup and one full supported recovery route described in Section 6 can recover vault contents into an empty vault under a new authenticated destination account. This does not restore the deleted account or bypass destination authentication. Making a backup is not a condition of exercising a legal right to deletion. Verified deletion removes covered active server records and legacy server-side content, subject to applicable lawful retention. Local files, free lists and exported copies are separate. Remaining files or recreating the same email do not guarantee recovery. Account/content deletion and billing reconciliation are separate; pending billing does not excuse a valid deletion obligation. Deletion queues a request to stop linked Play renewals; a queued request is not Google confirmation. Confirm or cancel directly in Play if confirmation is absent. Deletion does not revoke provider credentials or recall user-controlled copies. Any retained billing, security, deletion-suppression or agreement evidence requires a defined lawful purpose, restricted access and disclosed retention. These Terms do not authorize indefinite retention, undisclosed processing or waiver of rights. 10. APP LICENSE AND INTELLECTUAL PROPERTY Subject to applicable platform terms, we grant you a nonexclusive, worldwide license to download, install and use the app on permitted devices and through applicable platform sharing arrangements. App-copy license rights and duration required by the applicable Google Play agreement are preserved. Those rights do not promise a perpetual hosted service, lifetime subscription or continued paid features after entitlement ends. Our original software, design and materials belong to us or our licensors. Provider names and trademarks belong to their owners. Applicable open-source licenses and third-party notices prevail over inconsistent restrictions on their components. You retain your content rights. Feedback may be used to improve the Service without identifying you unless separately authorized or lawfully permitted. 11. SUPPORT, NOTICES AND SERVICE CHANGES Use the contacts in Section 1 for support, billing, privacy, security and formal notices. The built-in help assistant provides on-device guidance; entering a question there does not submit a support ticket or legal notice. Do not submit secrets or sensitive security details through public reports. Response duties and deadlines imposed by applicable law, applicable Google Play agreements or continuing governing commitments remain applicable. No additional voluntary response or resolution deadline is offered by this version. We may maintain or change the Service for reasonable operational, legal or security reasons, subject to applicable law and governing purchase/platform requirements. Any required notice, consent, cancellation opportunity or remedy for a material change follows those requirements and any continuing prior agreement. This version does not add a fixed advance-notice period or separate unused-service refund promise. A change cannot retroactively remove accrued rights or mandatory remedies. Permissible electronic notices remain subject to statutory notice/consent rules. Keep your account contact information current. No clause here permits charging for unprovided service where law, platform rules or the governing purchase terms require another outcome. 12. SUSPENSION, TERMINATION AND SERVICE CLOSURE We may proportionately restrict or terminate access for a material breach, unlawful use, security threat or legal requirement, subject to applicable law. Urgent legal/security restrictions may be immediate. Contact support to request review. We do not promise to bypass verification, supply missing recovery material or unlock another person's vault. For suspension, termination or service discontinuation, any required notice, review, data access/retrieval, prepaid-service remedy and billing action follows applicable law, applicable Google Play requirements and continuing governing agreements. This version adds no fixed closure-notice period, guaranteed export window, continued-authentication guarantee or separate migration undertaking. Mandatory rights and accrued claims remain unaffected. A supported complete encrypted backup does not require the original account to remain active when its required recovery material and an authenticated compatible destination are available. Downloading a file alone is not proof that data will remain usable after closure. Retrieve needed information or verify an actually supported recovery route while required destination authentication remains available. Section 6's limitations apply. No independent offline restore, guaranteed recovery or future migration tool is promised. 13. WARRANTY LIMITATIONS To the extent applicable law permits, the Service is provided "as is" and "as available," without additional implied warranties of merchantability, fitness for a particular purpose, title or non-infringement, or guarantees of uninterrupted operation, universal compatibility or continuing accuracy of third-party data. These limitations do not exclude applicable express commitments, continuing obligations under a governing purchase/earlier agreement, legally required care, or warranties, duties and remedies that cannot lawfully be excluded. We do not guarantee a provider's prices, API entitlement or business practices, or that every error or security incident will be prevented. 14. LIMITATION OF LIABILITY Subject to applicable law and the exceptions below, neither party is liable to the other for indirect, consequential, special, exemplary or punitive losses, including business profits or opportunities to the extent they are indirect losses arising from the Service. Our aggregate liability to you arising from the same event or series of related events connected with the Service or these Terms will not exceed the greater of (a) the amounts you paid for the Developer Locker API Service in the twelve months before the first event giving rise to the claim or (b) US$100. Unrelated provider API charges are not Developer Locker API Service fees. Related claims arising from the same incident or continuing act/omission are considered together; separate legal theories do not multiply that cap. Unrelated incidents are not automatically combined into one lifetime cap. A loss is not automatically excluded because it concerns data, unauthorized access or provider charges. Directly recoverable losses remain subject to law and any lawful cap. These limitations apply regardless of legal theory only to the extent permitted by law. The mutual exclusion of specified losses does not apply to either party's fraud, gross negligence or willful misconduct. Neither that exclusion nor our cap limits our liability for our fraud, gross negligence or willful misconduct; death or personal injury where limitation is prohibited; statutory consumer, privacy or security rights, duties or remedies that cannot lawfully be excluded or capped; or our express refund/payment obligations. Acceptance of these Terms does not make an unlawful exclusion enforceable or release an accrued claim. 15. DISPUTES AND APPLICABLE LAW You may contact the legal-notice route in Section 1 to seek informal resolution. Doing so is not a prerequisite to a claim and does not pause a legal deadline. Urgent relief, regulator complaints and legally available small-claims procedures remain available. These Terms do not shorten the legal period for bringing a claim. Subject to nonwaivable consumer protections, South Carolina law and applicable U.S. federal law govern. To the extent lawful and enforceable, court proceedings are to be brought in South Carolina state or federal courts with proper jurisdiction and venue. You retain any other forum mandatory law provides; either party may seek urgent relief where law permits. These Terms do not impose mandatory arbitration or a class-action waiver. 16. REPLACEMENT TERMS, SUCCESSION AND GENERAL PROVISIONS Material revisions require the notice and agreement applicable law and the governing agreements require. For an account that accepted an earlier version, affirmative agreement to the identified replacement is required before creating a new local vault, adding new local-vault records or password/note documents, or starting a new subscription purchase. Those actions present the applicable agreement requirement. Browsing the directory, signing in, creating/editing free profile-local lists, viewing existing records or restoring a compatible backup does not by itself record replacement agreement. Required cancellation, purchase restoration, support, account deletion and existing-data retrieval/export remain available without replacement assent, subject to actual authentication, compatible recovery and law, and preserving continuing rights under earlier terms. If the app cannot verify the identified text, an update/retry may be needed; no different agreement or consent is silently substituted. Refusal alone does not constitute consent to extra data destruction or waive an existing paid entitlement or mandatory remedy. Declining replacement Terms does not itself cancel Play renewals. Applicable law, Google Play requirements, governing purchase terms and continuing prior commitments determine the handling of existing prepaid access, future renewals and remedies if affected service cannot continue. This version adds no automatic stop-renewal, special full-renewal refund or other voluntary remedy. Contact support concerning a restriction on already-paid features and use Play's cancellation route if you do not wish to renew. Renewal, silence or continued use does not constitute affirmative acceptance of replacement Terms. We may transfer operation as part of a genuine business succession to a company or successor that assumes applicable service obligations, subject to law, required notice and required consent. No transfer retroactively reduces accrued rights or automatically releases earlier conduct/obligations. Developer Locker LLC's formation does not itself release obligations incurred by an individual or another operator before assumption of the Service. Privacy law and applicable notices continue. Events outside reasonable control may excuse only the affected delay, where law permits. They do not excuse legally actionable fault, eliminate mandatory security/ privacy duties or extinguish refund remedies required by governing obligations. These Terms and applicable express purchase terms form the service agreement. Mandatory law and platform rights remain controlling in their proper scope; Google is not made responsible here for operating Developer Locker API. The Privacy Notice explains processing without reducing statutory rights. Nothing here eliminates liability for actionable misrepresentations or overrides applicable open-source licenses. An unenforceable clause is limited or severed only as law permits; delay in enforcement is not a waiver. Accrued rights, lawful retention duties, ownership and necessary liability/dispute provisions survive as permitted by law. Survival does not authorize indefinite retention or guaranteed recovery.