Terms of Service and End User License Agreement

Last Updated: May 20, 2026

Effective Date: May 30, 2026

Welcome to Easchi (hereinafter referred to as the “Software”) and its associated online services. This Terms of Service and End User License Agreement (hereinafter referred to as this “Agreement”) constitutes a formal, legally binding contract entered into by and between you (hereinafter referred to as the “User” or “you”) and the operating entity of the Software (hereinafter referred to as the “Operator”) governing your downloading, installation, usage of the Software, and access to any related online services.

【IMPORTANT NOTICE】

The Operator of this Software formulates the following terms based on the core principles of minimizing the collection of users’ personal data and maximizing operational compliance across different countries and jurisdictions.

Prior to registering, installing, or using the Software, please read carefully and fully understand all contents of this Agreement, particularly those terms that exempt or limit the Operator’s liability, restrict user rights, and govern applicable law and dispute resolution. Once the User clicks “Agree”, downloads, installs, or otherwise actually uses any part of the Software, the User shall be deemed to have fully known, understood, and voluntarily accepted to be bound by all the terms and conditions of this Agreement.

1 Software License and Core Restrictions

1.1 Nature of the License

The Operator hereby declares that the Software, its related components, and online services are “licensed, not sold.” Subject to the User’s strict compliance with all terms of this Agreement, the Operator grants the User a personal, non-exclusive, non-transferable, non-sublicensable, and revocable license to use the Software (referred to herein as the “Limited Right of Use”). The User may install, run, and use the Software solely on lawful, compatible terminal devices.

1.2 License Restrictions

This clause constitutes a core binding provision of this Agreement. The User explicitly agrees and covenants that they shall not engage in, nor assist, authorize, or condone any third party in engaging in, any of the following acts under any circumstances:

• Reverse engineering, decompiling, disassembling, cracking, modifying, translating, or adapting the Software (including but not limited to client-side software, server-side code, underlying protocols, and related cryptographic components);
• Attempting to extract, decipher, or obtain the source code, object code, or underlying operational logic of the Software by any other means;
• Utilizing the encryption, synchronization, or storage functionalities of the Software and its related services to store, transmit, or disseminate any content that violates applicable laws and regulations, breaches public order or good customs, or infringes upon the legitimate rights and interests of third parties (including but not limited to violent, pornographic, or illicit/contraband information).

2 Intellectual Property Rights Declaration

2.1 Ownership of Rights

All intellectual property rights in and to the Software—including but not limited to software code, object programs, interface designs, interactive assets, graphics, audio/video assets, brand trademarks, trade dress, built-in core artistic or textual assets, patents, and trade secrets—as well as all derivative works related to the Software, shall fully, absolutely, and exclusively vest in the Operator or its respective right holders.

2.2 Reservation of Rights

Except for the Limited Right of Use expressly granted to the User under Section 1.1 of this Agreement, the Operator does not transfer any other intellectual property rights, ownership, or proprietary interests to the User, whether expressly or by implication. The Operator reserves all rights not expressly granted herein.

3 Account Registration and Security

3.1 User Eligibility and Age Restrictions

The User must be at least 18 years of age (or have reached the age of full civil capacity as prescribed by the laws of their primary residence) to use the Software and its related services. If the User has not reached the aforementioned legal age, they must obtain the express consent, accompaniment, and permission of their legal guardian (parents or other lawful guardians) prior to installing and using the Software.

Given the privacy-centric nature of the Software, the Operator is technically unable to actively verify the User’s actual age and primarily relies on the User’s representations and warranties. If the Operator discovers that a User has misrepresented their age, the Operator reserves the right to immediately terminate the services and process any related financial settlements in accordance with the Refund Policy to ensure compliance with localized minor protection laws.

3.2 Registration Mechanism and Location Verification

3.2.1 General Registration Mechanism

This mechanism applies across the vast majority of countries and jurisdictions. During the account registration and basic service activation process, the Operator does not collect any information that can directly identify the User’s personal identity, such as electronic email addresses, mobile phone numbers, or national identity documents, except for necessary service data strictly required for contractual performance, billing, and reconciliation purposes (e.g., order numbers, purchase status, and registration timestamps).

• Account Generation: The system utilizes a randomized algorithm to automatically generate a unique username. The User only needs to set a login password to complete the registration.
• Recovery Key: Upon successful registration, the system will generate and display a unique Account Security Recovery Key (hereinafter referred to as the “Recovery Key”) exactly once.

3.2.2 Statutory Real-Name Authentication Mechanism

If the laws and regulations of the country or jurisdiction where the User is located mandatorily require real-name identity verification for internet services, the Operator will perform its localized compliance obligations accordingly. Within such specific regions, the Operator will require the User to provide the minimum identity verification information required by local law (such as binding a mobile phone number).

3.2.3 Coarse-Grained Location Verification

To perform necessary regional billing under the contract and to dynamically adjust compliance measures based on the User’s legal jurisdiction, when a paid User logs in, the system will verify the User’s coarse-grained network geographical location (such as a country/region code) solely via localized processing or real-time streaming verification. Such data is never associated with any real personal identity, and the Operator does not engage in routine or persistent storage of this location data.

3.3 Account Recovery

3.3.1 Under the General Registration Mechanism

For accounts registered under this mechanism, the username cannot objectively be linked to the User’s true identity. Therefore, the “Recovery Key” serves as the sole lawful and effective credential for the User to retrieve, reset, or restore their account.

If the User loses their login password and fails to properly safeguard their Recovery Key, the Operator is technically completely unable to actively intervene, cannot assist in resetting the password, and cannot provide any form of account recovery services. All data loss, account unauthorized access, and economic losses resulting from the loss, disclosure, or improper safekeeping of the Recovery Key shall be borne solely by the User, and the Operator shall not assume any legal liability whatsoever.

Notwithstanding the foregoing, to protect the financial interests of paid Users who are unable to log in to the maximum extent permitted, a User who purchased a paid plan directly through official independent channels may, upon confirming a permanent inability to log in, submit an application to customer service by providing original proofs of payment in accordance with the official guidelines. Such applications will be subject to a strict security observation period within the system and will only enter the refund process after manual compliance verification confirms no discrepancies. For details, please refer to the Refund Policy and Privacy Policy.

3.3.2 Under the Statutory Real-Name Authentication Mechanism

Accounts registered under this mechanism may perform verification and password retrieval operations via their bound contact methods (such as a mobile phone number), subject to the actual functionalities available within the Software and its affiliated webpages.

3.4 Account Ownership and Prohibited Behaviors

The ownership of the account belongs to the Operator, and the User only enjoys the right of use as stipulated under this Agreement. The account is restricted solely to use by the registrant themselves, or by a specific minor child whose registration was performed on their behalf and permitted by a legal guardian in accordance with Section 3.1 of this Agreement.

Users are strictly prohibited from sharing, transferring, gifting, renting, pledging, lending, or selling their accounts in any form. The User and the actual registrant of the account shall bear joint and several liability for any account disputes, data leaks, economic losses, or legal liabilities arising from a violation of this provision. The Operator reserves the right to ban or terminate such non-compliant accounts at any time without any refund.

4 User-Generated Content and Acceptable Use

4.1 UGC Copyright and Asset Isolation

4.1.1 Full-Status Copyright Ownership of Original Content

The ownership, copyright, and other lawful rights and interests in any localized or holistic content created, compiled, or inputted by the User within the Software and its related online services (including but not limited to notes, flashcards, documents, charts, etc., hereinafter referred to as “User Content”) shall fully vest in the creating User. Such copyright shall remain intact and inalienable across all technical and physical states, including local storage, network transmission, cloud synchronization, and server hosting.

4.1.2 Copyright Isolation of Third-Party Shared Content

The User explicitly acknowledges and agrees that for any content created by other third-party users that is actively publicized or shared, and which the User accesses, browses, downloads, or uses within the Software (such as card decks or public notes within the Shared Community), the original copyright remains fully and absolutely vested in the original creator of that content. The User only enjoys a limited permission to view, study, or utilize such content for personal, non-commercial purposes within the scope authorized by the original author or permitted by platform functionalities. The User does not acquire any copyright or ownership in such content by virtue of its synchronization, caching, or storage on their local device.

4.2 Authorization and Compliance Liability for Active Disclosure/Sharing

4.2.1 Shared Community Access and Publisher Identity Verification

The Shared Community feature of the Software and related online services is available solely to users who are of the age of majority and possess full legal capacity. Each user bears sole and independent legal responsibility and liability for any content they publicly share and for all consequences arising from such sharing and publication.

The General Registration Mechanism described in Section 3.2.1 is used exclusively for basic account registration and login. To access and use the Shared Community feature, a user must first complete real-name identity verification. The user’s verified identity information is used solely in connection with the Shared Community and shall not be applicable for any other purpose, including password recovery.

In order to preserve community order and protect the legitimate interests of the Operator, all data a user publicly publishes in the Shared Community (including, without limitation, posts, images, attachments, and any other materials) shall be linked to that user’s account. If any such content or publishing activity violates any applicable law or any provision of this Agreement, the Operator shall have the right, in accordance with applicable law and this Agreement, to take enforcement actions directly against the relevant account, including removing or blocking the violating content, and temporarily or permanently suspending the account’s access to the Shared Community.

4.2.2 Grant of Intellectual Property and Right of Use

By actively choosing to publicly post User Content to the Shared Community, the User shall be deemed to have granted the Operator a worldwide, royalty-free, irrevocable, perpetual, non-exclusive, and sublicensable license to use and disseminate such content.

The Operator has the right to reasonably use such public content within the scope permitted by law for the purposes of maintaining system stability, troubleshooting technical faults, adapting formats according to layout needs, public display, and the promotion, distribution, and marketing of related features. The aforementioned authorization does not alter the original copyright ownership enjoyed by the User over such content.

If the User wishes to withdraw the aforementioned authorization, they must first delete the published content within the Software themselves, and send a formal written notice containing specific content locators to the Operator’s designated email address (privacy@easchi.com). The Operator will cooperate within technical feasibility after verifying the User’s identity and content ownership.

4.2.3 Statement of Independent User Liability

The Shared Community strictly prohibits the publication of any content that violates applicable laws and regulations or infringes upon the legitimate rights of third parties (including but not limited to copyright, trademark rights, patent rights, trade secrets, right of reputation, right of portrait, and personal privacy). The User shall bear full, exclusive, and unevadable legal and administrative liabilities for all content they publish, disseminate, or link to within the Shared Community. The Operator does not provide any prior express or implied warranties, endorsements, representations, or compliance commitments regarding content uploaded or shared by users.

4.2.4 Indemnification and Platform’s Right of Recourse

If the content published by a User is suspected of violating laws and regulations or infringing upon third-party rights, resulting in any third party, judicial authority, or regulatory agency bringing claims, lawsuits, administrative penalties, or taking any legal actions against the Operator, the User shall indemnify the Operator for all losses arising therefrom.

The User explicitly acknowledges and agrees that the Operator has the right of recourse against the User for all direct and indirect economic losses resulting from their non-compliant content. The scope of recourse includes, but is not limited to:

1. Indemnities, fines, and administrative penalties determined by third-party claims, court judgments, or arbitration awards;
2. Attorney fees, litigation costs, arbitration fees, notary fees, authentication fees, preservation fees, and reasonable travel expenses incurred by the Operator;
3. Actual commercial profit losses suffered by the Operator due to service suspension, software removal from stores, or brand damage.

The Operator has the right to take necessary measures, such as deleting, blocking, or disconnecting links to the suspected non-compliant content, without prior notice, and has the right to impose penalties on the non-compliant account, including restricting functionalities, banning, or permanently terminating services.

4.3 Malicious Behavior and Interference Restrictions

When using the Software (especially regarding online features involving sharing, synchronization, and collaboration), the User must strictly comply with the following codes of conduct:

• System Interference Restrictions: It is strictly prohibited to exploit any known or potential system vulnerabilities (Bugs) to maliciously generate fraudulent orders, unlawfully obtain platform benefits, or manipulate the billing system; it is strictly prohibited to use automated tools, crawlers, scripts, or other means to maliciously scrape platform data or Shared Community content; it is strictly prohibited to implement any network attack behaviors that may cause platform server overload, Denial of Service attacks (DoS/DDoS), or otherwise damage the normal operation of the platform.
• Compliance Red Lines: It is strictly prohibited to utilize the Software or services to publish, disseminate, or store any content involving pornography, gambling, drug abuse, terrorism, hate speech, extremism, undermining national security, or infringing upon the privacy of others. Otherwise, the platform has the right to immediately cease services, report to competent authorities, and clear relevant data in accordance with the law.

5 Functional Editions, Regional Pricing, Traveler Grace Period, and Long-Term Migration

5.1 Functional Edition Dynamic Activation Mechanism

Because laws, network security, and cryptographic regulatory environments regarding End-to-End Encryption (E2EE), local data encryption, and cloud synchronization services vary significantly across different countries or jurisdictions, the Software will legally activate different Functional Editions in different regions:

• Standard Edition: The built-in synchronization feature utilizes a standard End-to-End Encryption (E2EE) architecture. This edition applies to the vast majority of countries and jurisdictions worldwide.
• Solo Edition: Applicable to a minority of countries or jurisdictions that have specific compliance requirements regarding End-to-End Encryption (E2EE). See Section 5.1.1 for details.
• Air Edition: Applicable to a very small number of countries or jurisdictions that strictly restrict or prohibit civilian encryption technologies. This edition blocks all entry points for encryption-related features. See Section 5.1.2 for details.

To clarify the Functional Edition currently applicable to the User, the Operator will provide detailed prompts on the checkout page before the User purchases paid services, and will prominently display a Solo or Air badge next to the product name on the main interface of the Software after the User logs in.

Prior to login, the Software runs strictly locally by default (it does not actively connect to servers or provide automatic update checks). After the User logs in, the Software will automatically adjust its available functionalities based on the determination of the User’s network geographical location (Geo-IP) and the judicial environment of the region where the User is located. The processing of IP addresses during this act strictly complies with the relevant terms of the Privacy Policy.

5.1.1 Solo Edition

In regions where the Solo Edition is provided, the User may choose between the following synchronization modes based on their own data autonomy needs:

5.1.1.1 Third-Party Storage

When utilizing third-party storage, the Software adopts a standard End-to-End Encryption (E2EE) architecture, fully retaining the local device-side capability to encrypt file contents and filenames. This allows the User to store and synchronize data by configuring third-party network storage protocols (such as WebDAV or S3-compatible object storage) on their own.

However, because certain countries or jurisdictions impose mandatory requirements on cross-border data transfers or network access, third-party storage protocols may be subject to localized restrictions in these areas.

Since all data encryption and decryption assets are exclusively held by the User on the local client side, the Operator does not access, host, or process any data of the User.

5.1.1.2 KN Synchronization

To lower the technical threshold for users setting up self-hosted storage, the Operator provides an optional official KN (Key Negotiation) Synchronization service in the Solo Edition. This synchronization method is enabled only in certain qualifying countries or jurisdictions.

Once a User actively enables the official KN Synchronization, they shall be deemed to have clearly known and voluntarily accepted the following technical and security boundaries:

• Key Negotiation Mechanism Compliant with Local Requirements: While providing high-strength transmission and storage protection, a two-party key negotiation algorithm is used to generate management credentials, ensuring that the service architecture fully complies with the regulatory compliance requirements of the local jurisdiction.
• Routine Technical Blindness: Throughout routine business operations, data transmission, and cloud hosting, the Operator maintains continuous technical blindness (Technical Blindness) regarding the data synchronized by the User. The Operator will not actively review or disclose any content to any third party except through formal, statutory due process.
• Highest Security Level Isolation: Corresponding compliance management credentials and secure data are subject to physically isolated offline encrypted storage, strictly guarded by a dedicated compliance security team. No individual can invoke these components except through formal, statutory due process.

To ensure clear boundaries of legal liability and prevent confusion regarding the liable entity, the Software will log the operational timestamps for the enabling or disabling of KN Synchronization. For details, please refer to the Privacy Policy.

5.1.2 Air Edition

The Air Edition is designed specifically for certain jurisdictions that strictly restrict or expressly prohibit encryption technologies. This edition completely excludes any encryption and decryption functional components:

• It does not provide any form of encryption protection for local files and/or filenames;
• It does not provide local encryption prior to data synchronization, and all synchronized data is transmitted over networks completely in cleartext form;
• It does not provide the Operator’s synchronization functionality.

5.2 Regional Division and Pricing Principles

5.2.1 “Regional Division” Billing Principle

A Pricing Region may encompass one or more sovereign states or jurisdictions. The division of Pricing Regions is primarily based on comprehensive factors such as basic operating costs, compliance costs under statutory obligations, overall economic development levels, and market purchasing power in each area. Users should purchase corresponding plans based on their primary residence. Payment must be completed using a lawful payment method supported by the corresponding region.

【LEGAL STATEMENT】The User explicitly acknowledges and agrees that the “Pricing Regions” defined by this Agreement and the platform represent commercial standards for billing, settlement, and pricing only, and do not represent, nor do they constitute, a determination of specific legal jurisdiction or political sovereignty over the User’s data.

5.2.2 Commercial Service Embargoed Regions

Due to comprehensive international commercial embargoes, financial sanctions, and geopolitical compliance restrictions, third-party payment platforms or app stores are unable to provide settlement and payment services to Cuba, Iran, North Korea, Sudan, Syria, and related specific geopolitically disputed regions. Therefore, the Software cannot open commercialized paid plans or cloud infrastructure services to the aforementioned regions. The specific restricted regions shall be subject to the areas where third-party payment platforms are able to provide services.

5.3 Traveler Grace Period and Function Downgrade

To ensure that the functionalities of the Software can smoothly adapt to changes in the legal frameworks of different jurisdictions, the Software will comprehensively judge the Functional Edition available to the User, using the coarse network geographical location (Geo-IP) at the time the User connects to the network as the primary basis, supplemented by device environment characteristics such as operating system language and system timezone.

5.3.1 Traveler Grace Period

The Traveler Grace Period refers to situations where a User temporarily exits the Pricing Region corresponding to their purchased paid service (such as short-term tourism or business trips), and the Functional Edition available in the new region remains unchanged. Within this grace period, the User’s billing and settlement standards, account status, and paid features will remain unaffected, and mandatory pricing region migration will not be triggered.

Note: If the Functional Edition available in the new region where the User is located requires a downgrade, the Traveler Grace Period shall not apply; please refer to Section 5.3.2.

Day Calculation Rule: Taking each day in Coordinated Universal Time (UTC) (00:00 - 24:00) as one cycle, if a User exhibits one or more cross-region access behaviors, it shall be counted as 1 cross-region day.

Traveler Grace Period Allowance Table: Within the limits, the User’s billing plans and compliance data will not undergo mandatory migration.

The Operator will prompt the User inside the Software regarding their status of entering the Traveler Grace Period. As the grace period approaches expiration, the Software will display prominent warning notices. For Account Migration, please refer to Section 5.4.

5.3.2 Function Downgrade

To comply with local laws or other mandatory provisions, the Traveler Grace Period shall not apply under the following circumstances:

• If a Standard Edition user enters a region where only the Solo Edition or Air Edition can be provided, synchronization features will be immediately and temporarily suspended.
• If a Standard Edition user enters a region where only the Air Edition can be provided, encryption/decryption and synchronization features will be immediately and temporarily suspended.
• If a Solo Edition user enters a region where only the Air Edition can be provided, encryption/decryption and synchronization features will be immediately and temporarily suspended.

5.4 Long-Term Cross-Region and Account Migration

The Software allows users to apply for Account Migration. Account Migration will equate and convert value differences between different Pricing Regions by extending or deducting the valid remaining days of the current subscription. Each account can apply for migration a maximum of 2 times per calendar year.

5.4.1 Decryption Buffer

To strictly comply with the regulatory requirements of the target jurisdiction, when a User’s cumulative cross-region days exceed the limits of the aforementioned Traveler Grace Period, the Software will enter a 7-day Decryption Buffer:

1. Feature Restrictions: Within the Decryption Buffer, the User will be unable to encrypt new data, but the decryption feature for historical data will temporarily remain available;
2. Prominent Prompts: A conspicuous compliance switch prompt will pop up within the Software. The User should decide as soon as possible within the buffer period whether to apply for Account Migration or to complete full local decryption of their encrypted data.
3. Complete Cutover: If the User remains unresponsive after the 7-day buffer period expires, the Software will implement compliance measures adapted to the current legal environment based on the version available in the User’s location; please refer to Section 5.4.2.

5.4.2 Compliance Measures

If the User remains in a cross-region state and has not completed data decryption after the expiration of the Decryption Buffer, or if the User voluntarily migrates their account to a specific jurisdiction, the Operator will be compelled to completely block and shut down entry points for related features in order to avoid the risk of facing illegal charges, administrative penalties, or criminal prosecutions in the local jurisdiction due to providing specific encryption/decryption services. This measure only blocks feature entry points in accordance with the law; it will not delete the User’s local data, and normal usage can be restored once the User returns to the original region.

If the region where the User is located is one of the very few countries or jurisdictions that strictly restrict encryption features where only the Air Edition is applicable, historical encrypted data will be left in an un-decryptable, un-readable ciphertext locked state on the local device. This is the combined result of the change in the regulatory legal environment of the target jurisdiction triggered by the User’s own movement (which constitutes a statutory exemption, force majeure, and change of circumstances event beyond the control of the Operator) and the User’s failure to exercise reasonable duty of care (failing to decrypt in advance prior to entering the relevant jurisdiction or within the Decryption Buffer). The Operator shall not bear any legal obligation to compensate, indemnify, provide technical cracking, or recover data.

5.5 Payment Channels and Settlement Standards

All fees involved under this Agreement (including but not limited to paid plan subscription fees, administrative processing fees for account migration, and price differential top-ups) are strictly dependent on the specific channel through which the User downloaded and installed the Software:

5.5.1 App Store Channels

For any User who downloaded the Software through third-party application distribution platforms (including but not limited to the Apple App Store, Google Play Store, Microsoft Store, etc.), related fees must be paid through the In-App Purchase (IAP) mechanisms integrated by such app stores. All payment and settlement/refund actions of the User on the aforementioned platforms shall simultaneously be subject to the currently effective platform developer agreements, user terms of service, and billing rules of the corresponding app store.

5.5.2 Merchant of Record (MoR) Channels

For orders completed through the official independent website via an MoR (such as Paddle or Creem), the legal subject of the relevant transaction is that Merchant of Record. Paid contracts, invoice issuance, and final refund audits are subject to the terms of service of such Merchants of Record.

5.5.3 Pure Gateway Channels

For orders settled through pure payment gateways (such as Stripe) or regional bank gateways, the transaction subject is the Operator, and the Operator shall assume billing and refund liabilities in accordance with this policy.

6 Data Encryption/Decryption and Judicial Assistance

6.1 User-Initiated Encryption and Full-Ciphertext Sync

6.1.1 Using the Standard Edition

On the premise that the plan purchased by the User includes cloud synchronization services:

• The User may actively encrypt designated file contents and/or their filenames on their local device.
• After the data synchronization feature is enabled, the User’s data is fully encrypted locally before being uploaded to the server, and the data remains in a ciphertext state throughout the entire process of network transmission and cloud storage. In the absence of the User’s local key, no third party (including the Operator) can restore or decrypt the file contents.

The User explicitly acknowledges and agrees that because the Standard Edition of the Software adopts a strict End-to-End Encryption (E2EE) architecture, the encryption keys are generated completely and exclusively on the User’s local device, and the Operator does not possess nor can it obtain any cleartext data or decryption keys on the server side.

6.1.2 Using the Solo Edition Accompanied by Third-Party Storage Services

Under this mode, the User’s data is stored directly on third-party platforms or storage spaces set up by the User themselves. The Operator does not access or store such user data, nor can it provide any form of decryption or evidence-retrieval assistance.

6.1.3 Using the Solo Edition Accompanied by KN Synchronization

Only under the statutory, compliant circumstances stipulated in Section 6.2 of this Agreement, and in accordance with the requirements of judicial instruments issued by a court of competent jurisdiction, will the Operator cooperate with judicial organs within the specific, legally mandated scope of an individual case to decrypt relevant data uploaded to the Operator’s servers using KN Synchronization.

6.2 Principle of Judicial Assistance

The Operator is committed to protecting user data privacy under the premise of lawfulness and compliance. Only when satisfying the statutory due process of a specific jurisdiction, and receiving mandatory legal instruments (such as subpoenas, evidence collection orders, search warrants) issued by an organ with lawful jurisdiction, and provided that the User utilizes the Solo Edition paired with KN Synchronization, will the Operator cooperate with judicial organs to dispose of relevant data in accordance with the law. For details regarding data extraction boundaries, statutory procedures, and operational guidelines for judicial assistance, please refer to the Law Enforcement Guidelines.

7 Disclaimers and Limitations of Liability

7.1 Service Provided “As-Is”

The User explicitly acknowledges and agrees that the Software and online services are provided on an “As-Is” and “As-Available” basis. The Operator, its affiliates, and suppliers do not guarantee that the services will be completely uninterrupted, entirely error-free, or free from all vulnerabilities, nor do they make any form of express or implied warranties regarding the timeliness, security, or accuracy of the services (including but not limited to exclusively disclaiming any implied warranties or conditions of merchantability, fitness for a particular purpose, and non-infringement of third-party rights).

7.2 Limitation of Liability and Cap on Damages

To the maximum extent permitted by applicable law (and on the premise of not excluding or limiting statutory liabilities for personal injury caused by the Operator’s intentional misconduct or gross negligence, or statutory liabilities mandatorily prohibited from being limited by law), regardless of the cause of action (whether based on breach of contract, tort, strict liability, etc.), the maximum cumulative liability of the Operator arising out of this Agreement or the use of the Software shall not exceed the total fees actually paid by the User to the Operator for using the Software within the 12 months prior to the occurrence of the claim event under any circumstances. The Operator shall not be liable for any indirect, incidental, punitive, special, or consequential damages (including loss of business profits, data loss, or business interruption).

7.3 Special Exemption for Regulatory Environment Changes, Cryptographic Compliance, and Technical Force Majeure

7.3.1 The User explicitly acknowledges and agrees that the lawful application of End-to-End Encryption (E2EE) and related cryptographic technologies is highly dependent on the dynamically changing laws, national security reviews, and network security regulatory environments of sovereign nations or specific jurisdictions. If the Software must adjust, shut down, or switch Functional Editions within a specific region (including but not limited to mandatorily switching to the Solo Edition or Air Edition) due to changes in sovereign national laws and regulations, tightening of regulatory policies, revocation of import/operational licenses for cryptographic products, or suspension of services by third-party infrastructures (including but not limited to compliant app stores and cross-border clearing gateways) due to geopolitical factors, such events shall constitute legal force majeure and change of circumstances events that were unforeseen, unavoidable, and insurmountable by both parties.

7.3.2 When the aforementioned changes in the regulatory environment occur, compliance suspensions, technical blockages, or edition downgrades implemented by the Operator in accordance with Section 5.4 of this Agreement shall not constitute a breach of contract by the Operator. If the User fails to complete data decryption locally in a timely manner within the Decryption Buffer provided by the Operator, resulting in historical synchronized blind blocks or local files being left in a ciphertext locked, un-readable, or un-restorable state, the legal consequences and risks of data loss shall be borne solely by the User.

7.3.3 The Operator hereby expressly disclaims any liability for direct or indirect damages triggered by the aforementioned compliance adjustments, including but not limited to the User’s loss of business profits, destruction of digital assets, or any costs incurred by seeking technical third parties to crack/recover data. The liability cap of the Operator is strictly limited by the provisions of Section 7.2 of this Agreement.

8 Modification, Suspension, and Termination of the Agreement

8.1 Service Adjustment and Version Updates

8.1.1 Functional Iteration

The Operator has the right to carry out version updates, patches, and upgrades to the Software and related online services, or to adjust, shut down, or optimize certain online functionalities at any time for the purpose of optimizing user experience or based on overall operational strategies, and reserves the right to do so without prior notice to the User.

8.1.2 Commercial Logo Changes

The Operator has the right to legally change the name, icon, trade dress, etc., of the Software and its network services to avoid potential trademark disputes, intellectual property controversies, or to cooperate with brand image upgrades. Such changes do not require the prior consent of the User.

8.2 Modification of Agreement Terms

The Operator has the right to modify the terms of this Agreement at any time based on changes in laws and regulations, adjustments to regulatory requirements, or upgrades to business models. If major changes occur to the agreement, the Operator will publicize them through reasonable methods such as official website announcements or in-app pop-up prompts.

Once the modified agreement is published or the publicity period expires, it shall fully replace the original agreement. If the User does not agree to the modified contents of the agreement, they should immediately cease using the Software and uninstall the client; the User’s continued use of the Software shall be deemed as their full acceptance of the modified new agreement.

8.3 Disclaimer for Service Availability and Regional Compliance Adjustments

The User understands and agrees that the Operator reserves the right to dynamically, unilaterally adjust, restrict, or terminate the availability of encryption/decryption, End-to-End Encryption (E2EE), and synchronization services in specific countries or jurisdictions at any time based on regional legal changes, network security regulatory requirements, or potential compliance risks.

If the legal environment of the region where the User is located causes the Operator to face potential major compliance risks or legal liabilities, the Operator will provide a reasonable buffer period warning, and the User should decrypt and export their data on their own within the buffer period. Upon expiration of the buffer period, the Operator has the right to mandatorily switch the functionalities of users in that region to the Solo Edition or Air Edition. Such adjustments based on statutory legal compliance do not constitute a breach of contract by the Operator, and the Operator shall not bear any liability for compensation. For affected paid Users, the Operator will provide one of the following solutions (at the sole discretion of the Operator):

• Extend the duration of the adjusted compliant service by an equivalent value based on the remaining unused duration;
• Calculate a pro-rata refund based on the remaining unused duration.

8.4 Payment/Settlement Disruption Circumstances

Due to technical limitations and compliance requirements of global third-party payment clearing platforms and settlement systems (including but not limited to relevant cooperative banks and international payment gateways), currency settlements and transaction processes for regions subject to international sanctions or specific geopolitical conflicts currently cannot be supported. Subject to this technical restriction, paid plans, cloud synchronization, and related online encryption services of the Software are temporarily unavailable in the current region. Before payment platform technologies are upgraded to support transaction settlements in the relevant regions, it is recommended that users utilize purely local, free basic functionalities only. The Operator shall be exempted from breaching liabilities regarding such technical clearing disruptions.

8.5 Penalty for Violations and Emergency Service Termination

If a User is found to have violated any terms of this Agreement (such as reverse engineering, publishing illegal content in the Shared Community, maliciously sharing/transferring accounts, cross-region billing cheating, implementing network attacks, etc.), the Operator has the right to suspend the provision of services after taking reasonable notice. For emergency breaching behaviors such as malicious network attacks, dissemination of seriously illegal content, or behaviors that may cause the platform to face systemic legal risks, the Operator reserves the right to immediately ban the account, restrict functionalities, terminate services without refund, and reserves the right to pursue legal liabilities against the User.

8.6 User-Initiated Termination

The User has the right to terminate this Agreement at any time by canceling their account, uninstalling the Software, or ceasing to use the online services. The User understands and agrees that unless otherwise expressly provided by law, when the User voluntarily terminates this Agreement, already paid subscription fees will be processed strictly in accordance with the Refund Policy and will not be routinely refunded.

8.7 Effects after Termination and Data Erasure

After this Agreement is terminated for any reason, cleartext data stored by the User on their local device remains fully owned and controlled by the User. However, regarding all data stored on the Operator’s cloud servers (including but not limited to synchronized blind blocks, backup data, content published in the Shared Community, etc.), the Operator has the right to permanently and irreversibly delete them after the termination of the agreement in accordance with the provisions of the Privacy Policy, and shall not bear any notification or recovery liabilities for the erasure of the data.

Any terms of this Agreement that by their nature should survive termination (including but not limited to intellectual property rights, disclaimers, limitations of liability, governing law, and dispute resolution clauses) shall continue to be effective after the termination of the agreement.

8.8 Business Assignment and Change of Operating Entity

The Operator has the right to transfer or sublicense all or part of its rights and obligations under this Agreement as a whole to an affiliate or a third-party successor in the event of a merger, acquisition, major asset transfer, bankruptcy liquidation, or change of operating entity, without obtaining the separate consent of the User. For specific personal data migration, storage, and processing rules, please refer to the relevant chapters of the Privacy Policy.

9 Governing Law and Dispute Resolution

9.1 Governing Law

The conclusion, effectiveness, performance, interpretation of this Agreement, and any form of dispute or controversy arising out of or in connection with this Agreement shall be governed by the substantive laws of the country/region where the primary place of business of the Operator is located, excluding the application of any conflict of law rules.

9.2 Dispute Resolution and Arbitration Mechanism

Any controversy, dispute, or claim arising out of or relating to this Agreement (including any question regarding its existence, validity, interpretation, performance, or termination) shall first be resolved by the parties through friendly consultation. If no consensus can be reached through consultation within 30 days from the date one party issues a written consultation request, the relevant dispute shall be finally resolved in accordance with the following rules:

9.2.1 Exception for Local Consumer Jurisdiction and Small Claims Litigation

Notwithstanding the provisions of Section 9.2.2, if the User, acting as an individual consumer, enjoys a statutory right to initiate litigation in local courts pursuant to the mandatory consumer protection laws of their primary residence, or if the dispute falls within the jurisdiction of a statutory small claims court in the relevant jurisdiction, the Operator respects such statutory jurisdiction. However, in such local litigations, both parties must still strictly comply with the provisions of Section 9.2.3: that is, lawsuits must and can only be brought individually in one’s personal name, explicitly and irrevocably waiving the right to claim against the Operator in the form of a class action or representative action.

9.2.2 Mandatory Arbitration Jurisdiction (Except Small Claims and Consumer Exceptions)

For any dispute, controversy, or claim that does not fall within the aforementioned small claims or consumer special protection exemption scope, or where the total amount in dispute exceeds $5,000 USD (or equivalent in local currency), both parties explicitly acknowledge and agree: such disputes shall be submitted exclusively to the Hong Kong International Arbitration Centre (HKIAC) for final adjudication in accordance with the Arbitration Rules of the HKIAC in force when the Notice of Arbitration is submitted.

• Composition of the Arbitral Tribunal: The arbitral tribunal shall consist of 1 arbitrator;
• Language of Arbitration: The language to be used in the arbitral proceedings shall be Mandarin Chinese (or English upon the mutual written consent of both parties);
• Finality of the Award: The arbitral award shall be final and legally binding upon both parties. Both parties hereby expressly exclude the routine judicial jurisdiction of courts in any country or jurisdiction over such disputes;
• Apportionment of Costs: Except as otherwise provided under Section 4.2.4 of this Agreement, the party initiating arbitration shall first advance the filing and administrative management fees of the HKIAC. Each party shall bear its own attorney fees, expert witness fees, and other travel and administrative costs incurred due to preparing for the litigation.

9.2.3 Class Action Waiver

To the maximum extent permitted by applicable law, any arbitration or litigation arising out of this Agreement shall be conducted strictly on an individual basis. Both parties explicitly agree, covenant, and waive relevant rights: not to initiate, join, or participate in any claim claims against the other party in the form of a class action, representative action, mass collective arbitration, Private Attorney General Action, or any form of consolidated litigation.

10 Miscellaneous

10.1 Severability

If any provision of this Agreement is held to be invalid, illegal, or unenforceable by a court or arbitral tribunal of competent jurisdiction for any reason, such provision shall be limited or eliminated to the minimum extent necessary under the law, and such determination shall absolutely not affect the legality, validity, and enforceability of the remaining provisions of this Agreement, which shall continue to be in full force and effect.