Terms of use
Draft. Prepared without legal advice. Czech law limits how far liability can be excluded and protects consumers regardless of what any contract says, so have this reviewed before opening the service to the public.
1. Who you are dealing with
whym is operated by OmNexis s.r.o., IČO 02800888, Pražská 69/17, 273 43 Buštěhrad, Czech Republic, registered at Městský soud v Praze, oddíl C, vložka 223765 ("we", "us"). Full details are on the provider information page.
2. What the service is
whym stores credentials you enter, encrypted, and gives them back to you when you sign in. It is provided free of charge. There is no fee, no subscription, and no paid tier.
Accounts are currently created by invitation only.
3. The thing you must understand before using it
Your data is encrypted with a key derived from your master password, inside your own browser. We never receive that password or that key.
If you forget your master password and do not have your recovery kit, your data is permanently lost. We cannot reset it. We cannot recover it. There is no backup we are able to open, because everything we hold is ciphertext.
This is the deliberate design of the service, not a fault in it. By creating an account you confirm you understand it, and you accept responsibility for keeping your master password and recovery kit safe.
4. Your account
- Give an email address you actually control.
- Two-factor authentication is mandatory and cannot be switched off.
- Keep your master password, recovery key and one-time codes to yourself. Anyone holding them can open your vault.
- You are responsible for what happens under your account.
- Tell us promptly if you believe it has been accessed by someone else.
5. Acceptable use
Do not use whym to store or distribute material that is unlawful, to store credentials you obtained without authorisation, to attack or overload the service, to probe it for vulnerabilities without asking us first, or to resell access to it.
Good-faith security research is welcome. Contact us before testing anything that could affect other users or the availability of the service, and give us a reasonable opportunity to fix what you find before publishing.
6. Availability
The service is provided as-is and as-available. It runs on a single server. There is no uptime guarantee, no service level agreement, and no support commitment. We may change, suspend or discontinue it at any time.
If we discontinue it permanently, we will give at least 30 days' notice by email so you can export your vault, unless circumstances outside our control make that impossible.
Keep your own backups. The app's export produces an encrypted file for exactly this purpose.
7. Liability
The service is free, and it is supplied without warranty of any kind to the fullest extent Czech law permits — including as to fitness for purpose, availability, or freedom from error.
We are not liable for loss of data caused by a forgotten master password, a lost recovery kit, malware or compromise of your own device, or your disclosure of your credentials to anyone else.
Nothing in these terms excludes or limits liability that cannot be excluded or limited under Czech law — in particular liability for harm caused intentionally or by gross negligence, liability for harm to a person's natural rights, or any right you have as a consumer under Act No. 89/2012 Coll. (the Civil Code).
8. Ending it
You may delete your account at any time; doing so erases your vault, subject to the backup retention described in the privacy policy.
We may suspend or close an account that breaches these terms, or that is being used to harm the service or other users. Where it is reasonable to do so, we will warn you first.
9. Your data
The contents of your vault are yours. We claim no rights over them, and could not make use of them if we wanted to — we cannot read them.
How we handle personal data is set out in the privacy policy, which forms part of these terms.
10. Changes
We may amend these terms. Material changes will be announced on this page and, where they affect you, by email at least 14 days before taking effect. Continuing to use the service after that means you accept them; if you do not, delete your account.
11. Law and disputes
These terms are governed by the law of the Czech Republic. The courts of the Czech Republic have jurisdiction. If you are a consumer, this does not deprive you of the protection of mandatory rules of the country where you live.
Consumers may also use out-of-court dispute resolution through the Czech Trade Inspection Authority at adr.coi.cz.