Terms of Service

Draft for legal review. This document sets out the intended structure and commercial terms. Binding wording — the contracting entity, governing law, liability caps and consumer-law carve-outs — must be confirmed by counsel before launch.

Agreement

These terms apply to the NexKey applications for iOS, Android and macOS, to the optional NexKey synchronization service, and to this website. By using them you agree to these terms.

The service

NexKey generates one-time passwords on your device using open standards. The applications work without an account and without a network connection.

The synchronization service is optional. It transfers and stores encrypted authenticator data between the devices you have enrolled as trusted.

Your account

If you create an account for synchronization, you are responsible for keeping your credentials and your recovery material safe.

Because your vault is encrypted on your device, we cannot recover your data for you if you lose both your devices and your recovery material. Keep your recovery codes somewhere safe and separate from your devices.

Acceptable use

You agree not to use NexKey to break the law, to interfere with the service or its infrastructure, to attempt to gain unauthorised access to other people's data, or to redistribute the applications as your own.

Availability

We aim to keep the synchronization service available, but we do not guarantee uninterrupted operation. Maintenance, upgrades and incidents may cause downtime.

Because codes are generated on your device, the applications continue to produce one-time passwords when the synchronization service is unavailable.

Security

We take reasonable measures to protect the service. No online service can be guaranteed to be free of vulnerabilities, and we do not claim otherwise.

If you believe you have found a security issue, please report it to us before disclosing it publicly, so that we have a reasonable window to investigate and ship a fix. Reporting details are on the security page.

Third-party services

NexKey is compatible with services that support standard authenticator applications. We are not affiliated with, endorsed by, or partnered with those services, and their names are used only to describe compatibility.

Your relationship with any such service is governed by that service's own terms.

Fees

To be confirmed in legal review. Pricing, billing cycles, renewal, refunds and any tax treatment must be stated here before any paid tier launches.

Termination

You may stop using NexKey at any time and delete your account. We may suspend or terminate access where these terms are breached, or where required by law.

Disclaimers and liability

To be confirmed in legal review. Warranty disclaimers, liability limitations and the mandatory consumer-law exceptions for each market must be drafted by counsel.

Changes to these terms

We may update these terms. When we make material changes we will update the effective date above and, where appropriate, notify you in the app.

Governing law

To be confirmed in legal review: governing law and the forum for disputes.

Contact

Questions about these terms can be sent to our support address. Contact details are listed on the support page.