Terms of Service

01Acceptance of these terms

TranVault (the “Service”) is operated by Transcenda EST, a company established in Dubai, United Arab Emirates (“Transcenda”, “we”, “us”, or “our”). By creating an account, installing the app, or otherwise using the Service, you agree to be bound by these Terms of Service (the “Terms”) and by our Privacy Policy. If you do not agree, please do not use the Service.

If you are using TranVault on behalf of an organisation, you confirm that you are authorised to accept these Terms on its behalf.

02The service

TranVault is a zero-knowledge credential manager. It lets you store logins, passkeys, two-factor (TOTP) codes, SSH keys, API tokens, crypto seeds and other secrets, and sync them across your own devices.

The defining property of the Service is that your data is end-to-end encrypted on your device. Your vault is sealed with AES-256-GCM using a key derived from your master passphrase via PBKDF2-HMAC-SHA256 (600,000 iterations). Only ciphertext is ever transmitted or stored. No master key exists on any Transcenda server, and Transcenda cannot read the contents of your vault.

To operate the Service, Transcenda processes a limited set of data: your account email and password (handled by Google Firebase Authentication); per-item cleartext metadata limited to the item type and a display name so that your list and search can function (all secret values remain encrypted); the encrypted vault envelopes themselves (stored in Google Cloud Firestore, region me-central1 / Doha); and a device identifier with your email, used by our entitlement and device-limit service (the License Server at activate.transcenda.io). TranVault contains no analytics, no advertising, and no tracking SDKs. Our Privacy Policy describes this in full.

03Eligibility

The Service is not directed to children. You must be at least 16 years old to create an account or use TranVault. By using the Service you represent that you meet this requirement and that the information you provide is accurate.

04Your account and your passphrase

You sign in with an email address and password (managed through Firebase Authentication). You are responsible for keeping your account credentials confidential and for all activity under your account. Tell us promptly at support@transcenda.io if you believe your account has been compromised.

Your master passphrase is separate from your account password, and it is the single most important thing you hold. It never leaves your device, and we never receive it.

Because TranVault uses zero-knowledge encryption, you are solely responsible for your master passphrase. We do not store it and there is no master key on any server. If you forget or lose your master passphrase, your vault cannot be recovered — by you or by Transcenda. This is a deliberate consequence of the security model: it is what guarantees that no one but you can read your vault. To the maximum extent permitted by law, Transcenda is not liable for any loss of access to your data resulting from a forgotten or lost passphrase. We encourage you to choose a passphrase you will remember and to use the in-app export feature to keep your own backup.

05Acceptable use

When using TranVault, you agree that you will not:

• use the Service for any unlawful purpose, or to store data you have no right to hold;
• attempt to gain unauthorised access to another user’s account or vault, or to any part of our infrastructure;
• interfere with, disrupt, or place an unreasonable load on the Service, including its sync or entitlement systems;
• reverse-engineer, decompile, or circumvent the security of the Service except to the limited extent that applicable law expressly permits; or
• use the Service to infringe the rights of others or to distribute malware or unlawful content.

We may suspend or limit access where we reasonably believe the Service is being used in breach of these Terms or in a way that threatens its security or integrity.

06Plans and entitlements

TranVault offers a free tier and one or more paid tiers. Tiers determine entitlements such as the number of registered devices and the credential types available to you; these are administered through our License Server. At present there is no in-app purchase — paid tiers are not yet purchasable from within the app, and no payment is taken through it.

When in-app purchases or other paid options are introduced, the applicable pricing, billing terms, and any platform-store conditions (Apple App Store or Google Play) will be presented to you at that time and will form part of these Terms. We may change the features included in any tier, but we will not reduce the security guarantees described in these Terms.

07Intellectual property

The TranVault application, its design, the “TranVault” and “Transcenda” names and logos, and all related software and content are owned by Transcenda or its licensors and are protected by intellectual-property laws. We grant you a personal, non-exclusive, non-transferable, revocable licence to use the app on devices you own or control, solely for its intended purpose and in accordance with these Terms.

Your vault content is yours. We claim no ownership over the credentials and secrets you store, and — by design — we cannot read them.

08Disclaimers

The Service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or free from loss, or that it will meet your specific requirements.

You acknowledge that the zero-knowledge design places the responsibility for your master passphrase and for keeping your own backups with you, and that we cannot recover data encrypted under a passphrase we do not hold.

09Limitation of liability

To the maximum extent permitted by applicable law, Transcenda and its officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, loss of access to your vault (including as a result of a forgotten or lost master passphrase), loss of profits, or loss of goodwill, arising out of or in connection with your use of, or inability to use, the Service.

To the extent that liability cannot be excluded, our total aggregate liability arising out of or relating to the Service will not exceed the greater of (a) the amount you paid us for the Service in the twelve months before the event giving rise to the claim, or (b) one hundred US dollars (USD 100). Nothing in these Terms limits any liability that cannot be limited under applicable law.

10Termination and account deletion

You may stop using TranVault at any time. You can delete your account directly in the app under Settings → Delete account. Deletion is instant and irreversible: it purges your encrypted vault, your account, your device registrations, and your entitlement records. There is no recovery after deletion. Full details are on our account deletion page.

If you cannot access the app, you can request deletion by emailing support@transcenda.io from your account email address. We may suspend or terminate your access if you materially breach these Terms or where required to protect the Service or other users.

11Changes to these terms

We may update these Terms from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Terms. If you do not agree to a change, please stop using the Service and delete your account.

12Governing law

These Terms and any dispute arising out of or in connection with them or the Service are governed by the laws of the United Arab Emirates, and you agree to submit to the jurisdiction of the courts of Dubai, UAE, subject to any mandatory consumer-protection rights available to you under applicable law.

13Contact

Questions about these Terms or about TranVault can be sent to support@transcenda.io. Transactional messages from us (such as email verification, welcome, and password-reset emails) are sent from no-reply@transcenda.io.

Transcenda EST · Dubai, United Arab Emirates · data controller for TranVault.