Terms of Service

Effective Date: 01st April 2026

1. Introduction and Parties

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and the Developer, established in Italy ("we," "us," or "our"), regarding the use of the Keyri mobile application ("App").

2. Acceptance of Terms

By downloading, installing, or using the App, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree with these Terms, you must not use the App. 

3. Description of Service

• Keyri is a password management application that provides the following functionalities:

• Local storage of encrypted credentials, payment card details, personal images, and related information on your device

• Creation and management of entries for various accounts

• Export and import capabilities for encrypted data in JSON format and import capabilities for plain-text data via CSV format

• Optional retrieval of brand icons via the Brandfetch API

• Optional scanning, extraction, and secure local storage of data from barcodes and QR codes

• Optional data breach verification through third-party services

• Optional biometric authentication using device-supported methods

• Automated filling of credentials (Autofill) in compatible third-party apps and websites via the Android Autofill Framework

• Local logging of recent App activities (e.g., entry modifications, password changes) for user review.

• Calculation and display of a general "Security Score" based on local analysis of password strength, duplication, and optional data breach checks.

The App ensures that all sensitive data is securely encrypted before being stored locally on your device. We use ChaCha20-Poly1305, an authenticated encryption algorithm designed to provide both confidentiality and integrity of your data. Your data is encrypted using a key derived from your master password, ensuring that only you can decrypt and access your stored information. Please note that while strong encryption is used, no system is completely immune to brute-force attacks, especially if a weak master password is chosen. Please be aware that if you forget your master password, it cannot be recovered and you will no longer be able to access your data.

While all data within this application is encrypted on your device, please be aware that no encryption method can be guaranteed to be 100% secure. Therefore, we cannot be held responsible for any unauthorized access or tampering with data stored on your device or in any exported JSON files. 

4. User Rights and Responsibilities

4.1 User Rights

In accordance with EU regulations, you have the right to:

• Access and use the App in accordance with these Terms

• Export your data in a structured, commonly used format (JSON)

• Terminate use of the App at any time

• Receive prompt notification of any material changes to these Terms

4.2 User Responsibilities

You are responsible for:

• Maintaining the confidentiality of your master password

• Creating and maintaining backups of your stored data

• Ensuring the security of your device and its biometric authentication systems

• Using the App in compliance with applicable laws and regulations

The security of your stored data relies on the strength of your master password, which is used to derive the encryption key. The App utilizes ChaCha20-Poly1305, a modern symmetric encryption algorithm to protect your data, but if your master password is weak or compromised, it could become easier for unauthorized parties to decrypt or tamper with your stored data. You are solely responsible for choosing a strong and unique master password and keeping it confidential. We do not store or have any access to your master password, and we cannot recover your encrypted data if the master password is lost.

Security of Imported Files: When using the CSV import feature, you acknowledge that the source file (e.g., the Google Chrome export file) contains your credentials in unencrypted, plain text. You are solely responsible for:

1. Ensuring the source file is stored securely before import.

2. Permanently deleting the unencrypted source file from your device immediately after the import process is complete. We are not responsible for any unauthorized access to your data resulting from your failure to delete, secure, or manage these unencrypted files residing on your device storage outside of the App's encrypted container.

4.3 Prohibited Activities

You must not:

• Use the App for any unlawful purposes

• Attempt to circumvent the App's security features

• Reverse engineer, decompile, or modify the App

• Transfer your rights under these Terms to any third party

• Use the App in any manner that could damage or impair its functionality

5. Data Protection and Privacy

The processing of personal data is governed by our Privacy Policy. The Privacy Policy complies with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws. 

6. Intellectual Property Rights

The App, including all content, features, and functionality, is protected by copyright, trademark, and other intellectual property laws of the European Union and Italy. These rights remain exclusively with the Developer.

7. Third-Party Services

7.1 Data Breach Verification Services

The App may integrate with third-party services (XposedOrNot and HaveIBeenPwned) for data breach verification. These services are subject to their own terms and privacy policies. We are not responsible for third-party services' practices or policies.

7.2 Barcode/QR Code Scanning Services

The App integrates Google ML Kit to provide optional barcode and QR code scanning functionalities. While the image decoding process is performed locally on your device, Google ML Kit may collect and transmit telemetry and diagnostic data to Google. By enabling and using this feature, you acknowledge and agree to Google's collection of such telemetry data as governed by Google's Privacy Policy and Terms of Service. 

7.3 Distribution Platform

Your use of the App through Google Play Store is also subject to Google's terms of service and policies.

7.4 Brand Icon Services

The App integrates with the Brandfetch API to allow you to search for and download brand icons. Your use of this feature is subject to Brandfetch's terms and privacy policies. We do not guarantee the availability, accuracy, or quality of the icons provided by Brandfetch, and we are not responsible for their data handling practices.

8. Disclaimer of Warranties

8.1. General Disclaimer:

To the extent permitted by applicable EU law, the App is provided "as is" and "as available." We do not warrant that the App will be uninterrupted or error-free. However, this does not affect your statutory rights as a consumer under EU law.

8.2 Security Score and Recommendations Disclaimer 

The App provides a "Security Score" (0 to 100) and related security suggestions based on automated, algorithmic analysis of factors such as password strength, duplication, and third-party data breach reports. You explicitly acknowledge and agree that:

• This score is provided solely for informational and educational purposes to encourage better digital hygiene.

• It does not constitute professional cybersecurity advice.

• A high score (e.g., 100) is not a guarantee of absolute security, invulnerability, or "unhackability" of your accounts or passwords. No system can be 100% secure.

• Conversely, a low score does not necessarily mean your accounts are currently compromised or completely invalid; it merely highlights areas where security practices could be improved according to general industry standards.

• Any actions you take based on the Security Score or the App's suggestions are at your own discretion and risk.

9. Limitation of Liability 

9.1. General:

To the maximum extent permitted by applicable law (including, without limitation, the Italian Civil Code and the consumer protection laws of the European Union), our total liability to you for any cause whatsoever and regardless of the form of the action (contract, tort, including negligence, strict liability or otherwise) will be limited as set forth in this Clause 9.

9.2. Mandatory Exclusions:

Nothing in these Terms shall exclude or limit our liability for:

• Willful misconduct on our part.

• Death or personal injury caused by our negligence.

• Any other liability that cannot be legally excluded or limited under applicable law (including mandatory consumer rights under EU and Italian law).

9.3. Limitation of Other Damages:

Subject to the mandatory liability exclusions set forth in Clause 9.2, we shall not be liable for:

• Loss of profits, revenue, business, or opportunities.

• Loss of or corruption of data or information.

• Loss of goodwill or reputation.

• Business interruption.

• Any indirect, consequential, special, punitive, or incidental damages.

• Any reliance placed by you on the Security Score, security metrics, or security recommendations provided by the App.

This limitation applies to damages arising from or relating to:

• Your use of or inability to use the App.

• Unauthorized access to, alteration of, or deletion of your stored data.

• Biometric authentication failures or spoofing.

• Bugs, viruses, trojans, or other malicious code that may be transmitted to or through the App.

• Any interruption or cessation of transmission to or from the App.

• Any errors or omissions in any content or for any loss or damage of any kind incurred as a result of your use of any content made available via the App.  

• Any failure of the Autofill feature to correctly identify fields or input data on third-party applications or websites due to non-standard implementation by those third parties.

• Any compromise of data resulting from unencrypted CSV/text files that you failed to delete or secure after using the import feature. 

• Any financial loss, fraud, or unauthorized transactions resulting from the compromise of payment card details stored within the App.

• Any loss or unauthorized exposure of personal images attached to your entries.

9.4. Specific User Acknowledgments:

You specifically acknowledge that:

• You are solely responsible for maintaining the confidentiality of your master password.

• We cannot recover your master password or encrypted data if you lose access to them.

• Biometric data is managed exclusively by the device OS and is not stored or accessed by the App; device manufacturers/OEMs bear ultimate responsibility for biometric sensor security.

• We have no access to or control over the data you store in the App.

• You are responsible for maintaining appropriate backups of your stored data, as the App does not provide remote or cloud backup services.

10. Modifications

10.1 Changes to the App

We reserve the right to modify or discontinue the App or any features within it. We will provide reasonable notice of any material changes.

10.2 Changes to Terms

We may modify these Terms from time to time. Any changes will be communicated through the App. The "Effective Date" at the top of this document will indicate the latest update. Continued use of the App after such changes constitutes acceptance of the modified Terms.

11. Export Compliance

The App complies with EU export control regulations. You agree to comply with all applicable EU and Italian laws regarding the export and re-export of software and encryption technology.

12. Termination

You may terminate your use of the App at any time by uninstalling it from your device.

13. Governing Law and Jurisdiction

These Terms are governed by the laws of Italy. Any disputes shall be subject to the jurisdiction of the courts of Italy, without prejudice to any mandatory consumer protection forums under EU law.

14. Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in effect. The unenforceable provision will be replaced with a valid provision that most closely matches the intent of the original provision.

15. Contact Information

For any questions about these Terms, please contact us at: niluved0@gmail.com

16. Consumer Rights

Nothing in these Terms affects your statutory rights as a consumer under EU law. In case of conflict between these Terms and applicable consumer protection law, consumer protection law shall prevail.