Terms of Service

2.1 Electronic Agreement

By selecting "Continue with Apple" or "Continue with Google" on the sign-in screen (which displays links to these Terms and our Privacy Policy), by selecting "Agree and continue" when the app asks you to accept updated Terms, or by otherwise using the Service, you agree to this Agreement. This Agreement is formed electronically under the Electronic Signatures in Global and National Commerce Act (E-SIGN Act), 15 U.S.C. § 7001 et seq., and the Uniform Electronic Transaction Act as adopted in Florida (Fla. Stat. § 668.50).

2.2 Record of Your Acceptance

When you accept a version of these Terms, we record that acceptance in two places. The app saves the version and the date and time inside your own settings, which are encrypted on your device. Twin Leaf also keeps a consent record on our key service for the Terms, for the Ask Twin Leaf helper, for Help improve Twin Leaf, and for the optional email connection (Gmail): the document, the version, the server date and time, and how you agreed. That record is kept under a keyed code rather than your name or email, so we can show what you agreed to if a dispute arises. Your Sign-In Provider separately records the date your Account was created. You can see your own consent records in Settings › Legal and privacy, and Section 13 of our Privacy Policy sets out how long we keep them. Every version of these Terms is kept in our public code repository, and we will send you a copy of the current or any earlier version on request to support@angelgatesolutions.com.

2.3 Changes to These Terms

We may change these Terms. If a change is material, we will (a) post the new version with a new "Last updated" date; (b) show a notice in the app and ask you to accept the new version before you continue using your data; and (c) where we have a way to reach you, email you. A material change that reduces your rights or increases your obligations will not take effect for you until at least 14 days after we post it, unless a change is required by law or needed to address a security risk. Changes that only add information, correct errors, or give you more rights may take effect when posted. A change never applies to a dispute that either of us had notice of before the change was posted. If you do not agree to a change, you may stop using the Service and delete your Account; you will still be able to export your transactions first.

This version (effective October 3, 2026) corrects and expands earlier descriptions of how Twin Leaf protects your data, removes a contractual shortening of the time to bring claims, narrows the indemnity and release, adds exceptions to the arbitration agreement, and restarts the 30-day arbitration opt-out window. We believe each change either adds disclosure or gives you more rights; the app nonetheless asks every existing user to accept it.

2.4 Additional Terms

Some future features may come with additional posted terms ("Additional Terms"), which we will show you before you use the feature. If Additional Terms conflict with these Terms, the Additional Terms control solely for that feature.

3.1 Age Requirement

The Service is intended only for individuals who are at least 18 years old (or the age of majority where you live, if higher). By creating an Account, you represent that you meet this requirement and can enter into this Agreement. See also the Children's Privacy section of our Privacy Policy.

3.2 Where Twin Leaf Is Offered

Twin Leaf is designed for people in the United States, budgets in U.S. dollars, and is operated from the United States. If you use it from elsewhere, you do so on your own initiative and are responsible for complying with local law.

3.3 Signing In

You sign in only through a Sign-In Provider; signing up and signing in are the same step. Your use of a Sign-In Provider is governed by that provider's own terms and privacy policy. Anyone who controls your Apple ID or Google Account, or your signed-in browser, can sign in to your Twin Leaf Account; they would still need your Passcode or Recovery Code to open Your Data, but Section 5 explains why a short Passcode is not a strong barrier against someone who holds your signed-in session. We strongly recommend a strong, unique password and two-factor authentication on that account. If you use Apple's "Hide My Email," we receive only the relay address Apple gives us.

3.4 Account Security & Responsibility

You are responsible for (a) keeping your Sign-In Provider account, your devices, your Passcode, and your Recovery Code secure, and (b) locking or signing out of Twin Leaf on any shared or public device. We will never ask you for your Passcode or Recovery Code. If you suspect someone else has had access to your Account, follow Section 5.8 and tell us at support@angelgatesolutions.com. We are not responsible for losses caused by your failure to keep your account or device secure, except to the extent caused by our own breach of these Terms or our negligence.

3.5 One Person, Personal Use

Each Account is personal to one individual and may not be sold, transferred, or shared. The Service is licensed for your personal, household, non-commercial budgeting only. You may not use it to provide bookkeeping, financial-planning, debt-settlement, credit-repair, or similar services to others, or to process other people's data without their authorization.

3.6 Accurate Information

You agree that information you provide to the Service is, to your knowledge, accurate and lawfully obtained. Because we do not see Your Data, the accuracy and completeness of Your Data are your responsibility.

4.1 What Twin Leaf Is

Twin Leaf is a personal budgeting tool. From transactions you import or enter, it estimates when you get paid, which bills and recurring charges are coming, and how much may be safe to spend until your next paycheck. It also offers calendars, budgets, goals, cash-flow and net-worth views, a debt payoff planner, alerts, a coach, and related tools. The money calculations run in your web browser, on your device.

4.2 What Twin Leaf Is Not

Twin Leaf:

• is not a bank, credit union, money transmitter, payment service, broker-dealer, investment adviser, tax preparer, law firm, credit counseling agency, debt-settlement company, or credit repair organization;
• does not hold, move, transfer, pay, or invest money, and cannot pay a bill, make a transfer, or change anything at your bank or card issuer;
• does not pull your credit report, make credit decisions, or report anything to any consumer reporting agency;
• does not connect to your bank today; it knows only what you import or enter (see Section 10 about possible future connections); and
• does not provide financial, investment, tax, legal, accounting, or credit advice (see Section 6 and our Financial Disclaimer).

4.3 License Grant

Subject to these Terms, Angel Gate Solutions grants you a personal, limited, revocable, non-exclusive, non-transferable, non-sublicensable license to use the Service through a supported web browser for your own personal, non-commercial budgeting. All rights not expressly granted are reserved.

4.4 Free Service & Optional Membership

Twin Leaf's core is free and stays free: importing statements, every page, the algorithmic Coach Basic, and quick answers calculated on your device. There are no advertisements. An optional paid membership, Coach Plus, adds extras described in Section 10. We will not move a core feature that is free today behind a payment.

4.5 Usage Limits

Twin Leaf runs on infrastructure with daily usage quotas shared by all users. If the Service reaches a daily quota, saving, importing, or deleting may pause until the quota resets (currently midnight Pacific Time). While paused, you can generally still see the copy of your data already on your device after unlocking it; a refused import saves nothing and can be repeated; and a deletion that stops part-way can be resumed. We may also apply reasonable per-user limits, including on import size (currently up to 36 months of history per import and 2,500 transactions per calendar month), history length, and request rates.

4.6 Supported Environments

The Service requires a modern web browser with JavaScript, IndexedDB, and the Web Crypto API enabled. We do not guarantee compatibility with any particular device, browser, extension, privacy setting, or bank's export format.

5.1 How Your Data Is Protected

When you first sign in, you choose a Passcode and are shown a Recovery Code. Your browser then creates a random 256-bit data key and encrypts Your Data with it, on your device, before anything is stored (AES-256-GCM). The data key is stored only in two wrapped (encrypted) copies: one that opens with your Passcode combined with a value that our key service helps compute, and counts, for your signed-in account, and one that opens with your Recovery Code. Google stores the encrypted data and the wrapped keys for us. Technical details are on our Security & Data Protection page.

5.2 What This Protects Against — and Its Limits

In the ordinary course of operating Twin Leaf, neither we nor Google can see the contents of Your Data: we receive and store it only in encrypted form, and we do not have your Passcode, your Recovery Code, or your data key. You should also understand the following limits, which apply to every user:

• Short Passcodes and the operator. Angel Gate Solutions holds both the secret our key service uses and administrative access to the database that stores the wrapped keys. Anyone who held both — Angel Gate Solutions itself, an attacker who compromised both, or someone who compelled us to hand them over — could try every possible short Passcode offline. A six-digit Passcode has one million possibilities and could be found quickly with ordinary computer hardware. A long Passcode (12 or more random characters, including letters) makes this impractical for anyone. We do not do this, and our policies forbid it, but we will not tell you it is technically impossible.
• Your signed-in session. Our key service never sees your Passcode, but it counts every guess your browser asks it to help with, and waits longer after each one once a few have been made. Someone who has taken over your signed-in Google or Apple session (for example, on an unlocked device you left signed in), or who has a copy of the database, therefore gets only about 30 guesses before the key service stops answering.
• The code you run. Twin Leaf is a web app. Each time you open it, your browser downloads the code that performs the encryption from our hosting provider. If that code were altered — by us, by someone who compromised our publishing systems, or under legal compulsion — it could capture your Passcode or data the next time you unlock. We sign and verify every release before it is published (see the Security page), but you are relying on the integrity of the code we publish.
• What is not encrypted. Your sign-in details (name, email address, profile photo link, and account identifiers), and some facts about your encrypted data — for example which calendar months have transactions, how many accounts, bills, budgets, goals, and imports you have, document sizes, and when they were changed — are visible to us and to Google. Our Privacy Policy lists them.
• Your device. While Twin Leaf is unlocked, Your Data is readable in your browser's memory. Encryption cannot protect it from malware on your device or from someone using your unlocked device.
• Optional AI Features. If you use the Coach Plus chat, the information sent for a question is decrypted on your device and is not protected by Device Encryption for that question (Section 9).

5.3 The Key Service

To make short Passcodes harder to guess from a copy of the database alone, Angel Gate Solutions operates a small key service on a server we operate in the United States. It verifies your sign-in, helps your browser compute the passcode-lock value without learning your Passcode, and keeps a count of the attempts it has answered for your account; after several attempts it makes each further one wait, up to an hour at a time, and after 30 it refuses until you prove a correct unlock. It does not receive your Passcode, your Recovery Code, your data key, or Your Data. If the key service is unavailable, you can still unlock with your Recovery Code.

5.4 Recovery

If you forget your Passcode, you can unlock with your Recovery Code and then set a new Passcode; the app then shows you a new Recovery Code and the previous one stops working. If our key service cannot be reached at that moment, the app opens your data with the Recovery Code but cannot set a new Passcode, and your previous Passcode and Recovery Code keep working until you complete the change later. Changing your Passcode in Settings does not change your Recovery Code, and the app cannot currently issue a new Recovery Code while you still know your Passcode.

5.5 Passcode Strength

A Passcode must have at least six characters; letters and symbols are allowed. The sign-in screen offers a number pad by default, but we recommend a Passcode of 12 or more random characters including letters. Our Security & Data Protection page explains what a short numeric Passcode does and does not protect against.

5.6 Automatic Locking

Twin Leaf locks itself after 15 minutes without use, when you choose "Lock now," and when you sign out. Locking clears the decrypted data and keys from the app and asks for your Passcode or Recovery Code again; your browser frees that memory on its own schedule, which we do not control. Locking does not sign you out — your sign-in session stays on the device until you sign out.

5.7 Multiple Devices

You can use Twin Leaf on several devices with the same Account. Each device keeps an encrypted copy of your data until you sign out on it. We do not currently offer a list of signed-in devices or a way to sign out other devices from Twin Leaf; you can end those sessions through your Apple ID or Google Account security settings.

5.8 If You Think Someone Else Has Your Passcode or Session

Changing your Passcode prevents the old Passcode from opening your data from now on, but it does not change your data key or your Recovery Code. If you believe someone may have seen Your Data, your Recovery Code, or a copy of your encrypted keys, the complete remedy is to export your transactions, delete your Account (Section 23), and create a new one, which creates a new data key and Recovery Code. In any case, secure your Apple ID or Google Account and sign out of sessions you do not recognize.

5.9 No Circumvention

You agree not to attempt to defeat, bypass, or brute-force the Passcode protections of any Account other than your own, or to interfere with the key service's rate limits and lockouts.

7.1 Ownership

As between you and Angel Gate Solutions, you own Your Data.

7.2 Limited License to Operate the Service

You grant Angel Gate Solutions and its service providers a limited, worldwide, royalty-free license to store, copy, transmit, and delete Your Data, in its encrypted form, solely as needed to provide the Service to you, comply with law, and enforce these Terms. We will not attempt to decrypt, read, analyze, sell, or share the contents of Your Data, or use it for advertising or to train artificial intelligence models, except for the de-identified copy you choose to share under Section 7.8.

7.3 Your Responsibilities

You represent that you have the right to import and store Your Data. If Your Data includes information about other people (for example a shared account or payee names), you are responsible for having any authorization the law requires.

7.4 Imports Happen on Your Device

Statement and export files you import are read by your browser on your device. The file itself is not uploaded; only the transactions extracted from it are encrypted and stored. Importing the same file twice does not add duplicates. The Service keeps up to the most recent 36 months of each import and may apply other limits described in Section 4.5.

7.5 Export & Portability

You may download your transactions at any time as a CSV file from Settings ("Download everything (CSV)") or from the Transactions page. Budgets, goals, rules, and settings are not currently included in the export. Because Your Data is decrypted only on your device, we cannot produce a readable export for you.

7.6 Backups Are Your Responsibility

We do not keep backups of Your Data, and the Service is not a system of record. Keep your own copies of statements and any exports you wish to retain.

7.7 Deletion

You may delete your Account and Your Data at any time. See Section 23 and our Account & Data Deletion page.

7.8 Optional Data Sharing (Help Improve Twin Leaf)

Help improve Twin Leaf is off by default. If you turn it on, you allow us to receive, store and use a de-identified copy of your transactions, created on your device, solely to fix mistakes in and improve the Service, as described in our Data Sharing Notice. It is never sold, never used for advertising, and never used to train a third-party AI model. You can turn it off at any time, which deletes the copy. Sharing is not required to use any part of the Service.

9.1 Coach voice

You can choose how your coach talks, with or without the AI: Supportive (the default), Roast (playful teasing about spending choices), or, if you separately turn it on after choosing Roast, a version that uses strong language, which is for adults aged 18 and over, as Twin Leaf already requires. Roast never targets who you are or the basics you need, and stops when you seem to be struggling. You can change it at any time in Settings.

10.1 What Coach Plus Is

Coach Plus is an optional paid membership. It includes the AI chat, and may later include live bank connections through a third-party data provider, alerts, household sharing, and reports. Everything described in Section 4.4 as free remains free whether or not you are a member. We may change what Coach Plus includes; we will not remove a core free feature (Section 4.4) to do so.

10.2 You Choose the Price

On the web you choose what to pay: from $2 to $20 per month in whole-dollar steps (we suggest $5), or a yearly plan at ten times the monthly amount you choose (two months free). The price you select is shown on the page before you pay, and again by Stripe at checkout. It stays the same for as long as that membership continues, until you change it. If we ever change how pricing works, we will tell you in advance and your current price will not change until you agree or your next renewal after the notice period, which will be at least 30 days.

10.3 Automatic Renewal

We will email you a receipt through Stripe for each charge, and before a yearly renewal Stripe may send a reminder. If a charge fails, Stripe retries it for a short period and may email you; Coach Plus pauses if the payment cannot be collected, and your free features are not affected.

10.4 How to Cancel

You can cancel online, at any time, without contacting us: open Settings › Membership › Manage or cancel, which opens a Stripe page where you can cancel or change the amount in a few clicks. You can also email support@angelgatesolutions.com and we will cancel it for you. If you cancel, you keep Coach Plus until the end of the period you already paid for, then it ends and no further charges are made. Deleting your Twin Leaf account (Section 23) also cancels a Stripe membership: the app ends it immediately, with no further charge, before it deletes anything, and if it cannot, it stops and tells you instead of deleting. A membership bought through Apple can only be cancelled by you, in your iPhone's Settings under Subscriptions; the app will remind you to do that first.

10.5 Refunds

Cancel whenever you like and you will not be charged again. If you ask us within 7 days after a charge, we will refund it, pro-rated for the days of Coach Plus you used if the charge was for a yearly plan, with no questions asked. Ask at support@angelgatesolutions.com. After 7 days we consider refunds case by case. Nothing in this Section limits any refund or cancellation right that the law gives you.

10.6 Hardship Months

If a month is tight, you can take one free month of Coach Plus from Settings › Membership › "Can't afford it this month?", with no questions and no documents. You can do this up to three times in any 12 months. A free month ends by itself; it never turns into a charge, and no payment card is asked for.

10.7 Payments, Stripe and Apple

Payments made on the web are processed by Stripe, Inc. (or its affiliates), which receives your card details directly. Your card number never touches Twin Leaf's website or servers. We receive from Stripe only what we need to run your membership: a customer and subscription identifier, whether the membership is current, and when it renews. We store them under an identifier derived from your user ID, not your name or email address. Stripe's terms and privacy policy govern its processing. If we offer Coach Plus through the Apple App Store in an iOS app, those purchases are made with Apple, are priced in Apple's fixed tiers, and are governed by Apple's terms, billing and refund policies; you cancel those in your Apple account settings, not with us.

10.8 Taxes

Prices are in U.S. dollars. Where the law requires us to collect sales or similar tax, it will be shown at checkout before you pay.

10.9 Future Bank Connections

Bank connections are not available today. We are preparing to offer optional ways to connect financial accounts through Plaid Inc., a third-party data provider; the Privacy Policy (Section 9C) already describes how that would work. Any such offering will be optional, will be described before you use it, may require your separate consent and acceptance of a third party's terms, and will be covered by updates to these Terms and our Privacy Policy before it is made available to you.

11.1 Our Property

The Service — including its software, design, text, graphics, the Twin Leaf name and mark, and logos (excluding Your Data and third-party materials) — is owned by Angel Gate Solutions or its licensors and is protected by intellectual property laws.

11.2 Trademarks

"Twin Leaf," "Angel Gate Solutions," and related names and logos are trademarks of Angel Gate Solutions, LLC. You may not use them without our prior written permission.

11.3 Feedback

If you send us feedback, suggestions, or ideas ("Feedback"), you grant us a perpetual, irrevocable, worldwide, royalty-free license to use it for any purpose without compensation. Please do not include Your Data, your Passcode, or your Recovery Code in Feedback.

11.4 Open-Source Components

The Service includes open-source software and fonts licensed under their own terms, including the Firebase JavaScript SDK (Apache License 2.0) and the Geist, Source Serif 4, and Roboto typefaces (SIL Open Font License 1.1). Those licenses govern those components, and nothing in these Terms limits your rights under them.

13.1 Providers We Rely On

The Service is built on Third-Party Services, including Google LLC (Firebase Authentication, Cloud Firestore, and Firebase Hosting), Apple Inc. (Sign in with Apple), Tailscale Inc. (which routes encrypted connections to our key service), Stripe, Inc. (which processes membership payments, if you choose to pay), Plaid Inc. (which would connect your bank, if and when we offer bank connections and you choose to use them), Cloudflare, Inc. (which routes email sent to our support address), and GitHub, Inc. (which hosts our source code and build system). The full list, with what each one receives, is in our Privacy Policy. Their availability and policies are outside our control.

13.2 No Endorsement or Affiliation

Angel Gate Solutions and Twin Leaf are not affiliated with, endorsed, or sponsored by Google, Apple, Groq, Rocket Money, any bank or card issuer, or any other Third-Party Service.

13.3 Links

The Service may link to third-party websites. We are not responsible for their content or practices.

23.1 Deletion by You

You may delete your Account at any time from Settings › Your data › Delete my account, or, if you cannot unlock, from the lock-screen link "Lost both your passcode and recovery code? Delete your account and start over." Deletion erases every document Twin Leaf stores for your Account, then your sign-in record, then the encrypted copy on that device. It cannot be undone. Details, including what may remain, are on our Account & Data Deletion page.

23.2 Suspension or Termination by Us

We may suspend or terminate your access if: (a) you materially breach this Agreement; (b) we reasonably believe your Account is being used for illegal purposes or to harm the Service or any person; (c) the law or a valid court order or government directive requires it; (d) continuing would create a serious security, legal, or operational risk; or (e) we discontinue the Service under Section 15. Where practicable and lawful, we will give you notice and the reason, and an opportunity to export your transactions first.

23.3 Effect of Termination

When your Account ends, your license ends, and any Coach Plus membership ends with it (see Section 10.4 for cancelling a Stripe subscription). If your Account is deleted, your encrypted data and sign-in record are deleted as described on our Account & Data Deletion page. Consent records are not deleted with your Account; Section 13 of our Privacy Policy explains why and for how long they are kept.

23.4 Survival

Sections 1, 5 (as to lost Passcodes and Recovery Codes), 6, 7.1, 11, 19, 20, 21, 22, 24, 25, 26, and 28 survive termination.

25.1 Informal Resolution First

Before starting a formal proceeding, the party with a dispute will send the other a written description of it, the relief requested, and contact information (to us at support@angelgatesolutions.com). We will respond within 30 days, and both of us will try in good faith to resolve it. If it is not resolved within 45 days after the notice, either party may proceed under this Section. This step does not apply to small-claims cases or to requests for emergency relief.

25.2 Agreement to Arbitrate

Except as provided in Section 25.4 and unless you opt out under Section 25.7, you and Angel Gate Solutions agree that any dispute, claim, or controversy arising out of or relating to this Agreement or the Service (a "Dispute") will be resolved by final and binding arbitration on an individual basis. This arbitration agreement is governed by the Federal Arbitration Act, 9 U.S.C. § 1 et seq. It applies to Disputes arising after you accept this version of the Terms; a Dispute that either of us had already filed in court or arbitration before then is not affected. The arbitrator decides questions about the scope or enforceability of this arbitration agreement, except that a court decides questions about Sections 25.3 and 25.6.

25.3 Arbitration Procedure

Arbitration will be administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules then in effect, which are available at adr.org, as modified by this Section. A single neutral arbitrator will decide the Dispute. The arbitration will take place by video conference or document submission, or in person in the county where you live, as you choose. The arbitrator may award the same individual relief a court could award on an individual claim, including statutory damages and attorneys' fees where the law allows, and will issue a reasoned written decision. If the AAA is unavailable, or declines to administer the arbitration for any reason, either party may bring the Dispute in court under Section 26 instead.

25.4 Exceptions

Notwithstanding Section 25.2: (a) either party may bring an individual claim in small-claims court if it qualifies; (b) either party may seek an injunction in court to stop the infringement or misuse of its Intellectual Property Rights; (c) you may bring in court, at your option, any claim that Angel Gate Solutions violated your privacy or data-security rights; (d) a claim for public injunctive relief under a law that does not permit that relief to be waived may be brought in court, after any individual claims are arbitrated; and (e) nothing prevents you from reporting a matter to, or seeking relief through, a government agency.

25.5 Fees

For any arbitration you start, we will pay all AAA filing, administrative, and arbitrator fees, including the consumer filing fee, unless the arbitrator finds your claim frivolous or brought for an improper purpose. Each party bears its own attorneys' fees, except where applicable law or the arbitrator awards them to you. We will not seek attorneys' fees or costs from you in arbitration unless the arbitrator finds your claim frivolous.

25.6 Class Action and Jury Trial Waiver

TO THE EXTENT PERMITTED BY LAW, YOU AND ANGEL GATE SOLUTIONS EACH AGREE THAT DISPUTES WILL BE RESOLVED ONLY ON AN INDIVIDUAL BASIS, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING OR CLASS-WIDE ARBITRATION. FOR ANY DISPUTE THAT PROCEEDS IN COURT INSTEAD OF ARBITRATION, EACH PARTY WAIVES THE RIGHT TO A JURY TRIAL TO THE EXTENT PERMITTED BY LAW. If this class-action waiver is found unenforceable as to a particular claim, that claim (and only that claim) will be decided in court, and not in arbitration.

25.7 Your Right to Opt Out

You may opt out of this arbitration agreement by emailing support@angelgatesolutions.com within 30 days after you first accept this version of the Terms (or within 30 days after creating your Account, if later), stating "I opt out of arbitration" with your name and the email address associated with your Account. We will confirm by email. Opting out does not affect any other part of this Agreement or any earlier opt-out. If you opt out, Disputes will be resolved in court under Section 26.

25.8 Mass Filings

If 25 or more similar demands for arbitration are filed against Angel Gate Solutions by or with the assistance of the same or coordinated counsel, the AAA's Mass Arbitration Supplementary Rules will apply to the extent available.

25.9 Severability

Except as stated in Section 25.6, if any part of this Section is found unenforceable, the rest remains in effect.

28.1 Entire Agreement

This Agreement is the entire agreement between you and Angel Gate Solutions about the Service and supersedes earlier versions, except that an earlier version continues to govern a Dispute that either of us had already filed before you accepted this version.

28.2 Severability

If any provision is held unenforceable, it will be enforced to the maximum extent permissible, and the remaining provisions remain in effect.

28.3 No Waiver

A failure or delay in exercising a right is not a waiver of it.

28.4 Assignment

You may not assign this Agreement without our written consent. We may assign it in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets or of the Service, provided the assignee agrees to honor our Privacy Policy for your information; we will tell you before that happens.

28.5 Force Majeure

Neither party is liable for delay or failure caused by events beyond its reasonable control, such as natural disasters, war, governmental action, widespread internet or power failures, or failures of hosting or sign-in providers, including the exhaustion of a provider's free usage quota. This does not excuse our obligations under data-security and breach-notification laws.

28.6 No Third-Party Beneficiaries

This Agreement creates no rights in any third party, except the persons entitled to indemnity under Section 21.

28.7 Relationship of the Parties

Nothing in this Agreement creates a partnership, joint venture, employment, agency, or fiduciary relationship.

28.8 Interpretation

Headings are for convenience. "Including" means "including without limitation."

28.9 Language

This Agreement is written in English. If it is translated, the English version controls.

28.10 Requests From Governments

We may be required to disclose information to government authorities under valid legal process, such as under the Electronic Communications Privacy Act and the Stored Communications Act. What we hold that could be produced is described in our Privacy Policy (Section 19): sign-in details, metadata, logs, and encrypted data. We do not hold your Passcode, Recovery Code, or data key. We will resist requests we believe are unlawful, including requests to change the Service to capture a user's Passcode or data, and we will try to notify you before any disclosure where the law allows.