TwoKey Terms of Service

1. Who we are

TwoKey is provided by I Totally Need That LLC ("we", "us"), an Arizona limited liability company. By installing or using TwoKey you agree to these terms. If you do not agree, do not use the app.

2. What TwoKey is

A messaging app in which two devices cannot communicate until one has scanned a pairing code shown on the other's screen, which in practice means the two people were in the same place. There are no accounts. Your identity is a key on your device and nothing else. We do not sell, rent or monetize your personal data or content, in any way.

3. What you are responsible for

• Your device. TwoKey encrypts messages between the two phones and keeps them only in memory. It cannot protect a phone that is unlocked, shared, or compromised. The app lock is a convenience, not a substitute for locking the phone.
• Comparing verification codes. After pairing, the app shows both people a short code and asks you to read it out loud. Comparing it is what detects a pairing code that was intercepted. If you do not compare it, you have given up that protection.
• Your keys and your backup. We cannot recover either. Conversations exist only in memory and are gone when the app closes. Contacts survive only on the phone and in an encrypted backup you make yourself; lose both, or the backup's passphrase, and they are gone. This is deliberate: any recovery route we could operate would also be a route in for someone else.
• Lawful use. You agree not to use TwoKey to break the law where you are.

4. What we cannot do

Not disclaimers so much as facts about the design:

• We cannot read your messages, and cannot make them readable.
• We cannot recover a lost key, conversation, contact or backup passphrase.
• We cannot tell you who has TwoKey, or whether a particular person does.
• We cannot delete a message from someone else's phone.
• We cannot prevent the person you are messaging from screenshotting, photographing or repeating what you said.

5. Availability

We aim to keep the relay running but do not guarantee it. The service may be interrupted for maintenance, upgrades, or network or equipment failures, and we may discontinue some or all of it at any time. Undelivered messages are held in memory for at most 24 hours and are lost if the relay restarts. Treat delivery as best-effort. Do not rely on TwoKey where a failure to deliver would cause serious harm, and note that it provides no access to emergency services.

6. Subscriptions

Free to download, and free to reply, always. Scanning someone else's code and replying is free, for as long as the pairing exists and the service operates, and you are never asked to pay to keep talking to someone.

Starting a conversation of your own — showing your pairing code — is free for 14 days from the first time one of your codes completes a pairing. After that it needs a subscription. There are two plans, Personal, with a limit of five conversations you started at a time, and Unlimited; prices are shown in the app and on the App Store before anything is charged.

When the free 14 days end without a subscription, the conversations you started pause until you subscribe: they are not delivered through the relay and do not wake the other phone. Nothing is deleted.

Subscriptions:

• They are billed through Apple and managed in your Apple account. They renew automatically unless cancelled at least 24 hours before the current period ends. Cancelling stops the next renewal; it does not refund the current one.
• If a subscription lapses, your data stays yours. Pairings, keys and contacts are never deleted and can still be backed up and restored. After a grace period, conversations you started under the subscription stop being delivered through the relay and stop waking the other phone, until you subscribe again; messaging over a shared local network still works. The other person is told only that you cannot be reached right now.
• Refunds are handled by Apple under Apple's policies. We cannot issue them.

7. Early versions

TwoKey is new. Features, limits and appearance may change between versions, and a version may be withdrawn. We will not remove anything you have set up, and the promises in §6 about free receiving survive any change.

8. Acceptable use

You must use TwoKey only for legal, authorised and acceptable purposes. You will not use it, or help anyone else use it, to:

• violate the rights of I Totally Need That LLC, of other users, or of anyone else, including rights of privacy, publicity and intellectual property;
• send unlawful, harassing or unwanted communications, or send bulk or automated messages;
• gain unauthorised access to the relay or to any device, disrupt or degrade the service, pair devices by automated means, collect information about users, or resell or repackage the service.

We have no way to see what you send, so enforcement of this clause is limited to refusing relay service where we become aware of misuse through other means.

9. Export and sanctions

You will comply with all applicable export-control and trade-sanctions laws. TwoKey contains encryption, and its export and re-export from the United States are governed by United States law; you may not use it where doing so would breach that law or the law of your own country.

10. Liability

Disclaimers. You use TwoKey at your own risk. TwoKey is provided as is, without express or implied warranties of any kind, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not warrant that the service will be uninterrupted, timely, secure or error-free, or that any message will be delivered.

Limitation of liability. To the fullest extent permitted by law, I Totally Need That LLC and its members will not be liable for any lost profits or for any consequential, special, punitive, indirect or incidental damages arising out of or relating to these terms or the use of TwoKey, including loss of data and harm resulting from a message being disclosed, intercepted, delayed or not delivered, even if we have been told such damages are possible. Our total liability for all claims relating to these terms or the service will not exceed one hundred US dollars ($100).

The laws of some states and countries do not allow some of these exclusions or limitations. Where that is so, our liability is limited to the fullest extent the applicable law permits.

11. Security disclosure

TwoKey has not been independently audited. We say so in the app and we say so here. The encryption is built on standard, well-studied components, but the way they are assembled has not been reviewed by anyone outside the project.

If you find a vulnerability, please tell us at support@itotallyneedthat.com before disclosing it publicly. We will respond.

12. Changes

We may update these terms at any time. When we do, the effective date above changes, and material changes will be noted in the release notes of the app update that carries them and on this page. Your continued use of TwoKey after a change takes effect confirms your acceptance of the updated terms.

13. Governing law and disputes

These terms are governed by the law of the State of Arizona, without regard to its conflict-of-law provisions. You agree to resolve any dispute relating to these terms or to TwoKey exclusively in the United States District Court for the District of Arizona or a state court in Maricopa County, Arizona, and you consent to the personal jurisdiction of those courts.

14. Apple

The app is distributed through Apple's App Store under Apple's standard end-user licence agreement, which governs the licence to the software. These terms govern the relay service and any subscription. Apple is not a party to these terms and has no obligation under them.

15. Age

You must be at least 18 years old to use TwoKey. The minimum age to agree to terms like these without a parent's approval may be higher where you live; if it is, that higher age applies.

16. Termination

You may end these terms at any time by deleting the app; "Erase everything" in Settings removes all of it from your phone first. We may suspend or refuse relay service at any time, including for a breach of §8. That is the only enforcement available to us, since we cannot see messages, identify a user or reach into a phone. Sections 4, 10, 11, 13, 14 and this section survive any termination; §4 and §11 do so because they are facts about the design rather than promises.

17. Contact

support@itotallyneedthat.com — put "Terms" in the subject line.

I Totally Need That LLC — TwoKey
1909 E Ray Rd
Ste 9 - 1033
Chandler, AZ 85225
United States