These draft terms set out the intended conditions for using Lock. They distinguish what is available today from planned features and explain the responsibilities that come with an encrypted workspace.
1. Accounts and workspace authority
Provide accurate account information, keep sign-in credentials and recovery material secure, and use only accounts and workspaces you are authorised to access. If you create or administer a workspace for an organisation, you must have authority to do so. Administrators are responsible for invitations, roles and access decisions within their control.
Eligibility requirements and any minimum age must be confirmed for the jurisdictions where Lock is offered. These draft terms do not establish a final contractual acceptance process or identify a legal contracting entity.
2. Acceptable use
Do not use Lock for unlawful activity, harassment, threats, fraud, spam or distributing malicious software. Do not upload material you lack the right to share, impersonate others, attempt unauthorised access, bypass access controls, or disrupt the service.
Encryption is not permission to misuse the service. Report suspected account compromise, abusive activity or a vulnerability through the contact page. Security testing must be authorised and must not expose other users’ information.
3. Your content and encryption keys
You remain responsible for the content you send and for having permission to share it. The service needs to store and transmit your submitted encrypted records and associated metadata to deliver conversations; this does not transfer ownership of your content to Lock.
Keep recovery material safe. Lost keys can make messages and files unrecoverable, and an account password reset alone does not restore them. Recipients can retain downloads or screenshots. Deleting content cannot recall those copies.
Encryption has documented limits: account authentication and encrypted chat-key backups share a password, message recipient keys are service-delivered, and older attachments may be unencrypted. Calls automatically prove possession of chat keys without independent code comparison. First-use identity trust depends on server-delivered keys; changed remembered keys block calls. Remembering a key does not protect its stolen private counterpart or eliminate password-backed recovery risks. Answering is not independent identity verification. Review the security details and privacy policy rather than treating Lock as a zero-knowledge or independently audited service.
4. Pricing, billing and history
The pricing page advertises Basic at $3 USD per user per month and Pro at $6 USD per user per month. Recommended file storage is 1 GB per Basic member and 10 GB per Pro member, pooled across the workspace. One-to-one direct team voice calls are advertised as Pro-only and in beta, not group calls. Billing, plan-based storage allowances and Pro-only call access are not yet enforced; advertised plan limits are not a statement that subscriptions or automated plan-based retention are already implemented.
Basic’s advertised 30-day history limit is not currently enforced. Pro’s advertised unlimited history is not a guarantee of permanent storage, recovery or uninterrupted availability. Maintain your own permitted copies of information you need to keep.
Before paid subscriptions are enabled, checkout terms must state taxes, billing frequency, renewal, cancellation, refunds and any applicable consumer rights. This draft does not establish an automatic renewal or refund policy.
5. Availability and evolving features
Lock is under active development. Features, supported platforms and limits can change. Automatic screen lock can be configured in Profile; it hides the interface but does not erase encryption keys or sign you out. App Store links are not yet published, and voice calling is an early implementation—not a production reliability promise.
No uptime service-level agreement or guaranteed support response time is currently established. Connectivity, updates, device compatibility and service interruptions can affect access. Do not rely on Lock for emergency calling or as your sole backup.
6. Ending access and deleting an account
You can use the available account deletion action in web profile settings, subject to account verification. Contact the team if you cannot access it. Leaving or deleting a workspace is separate from deleting your account.
Deleting an account removes its user record and linked records according to database relationships, including authored messages. It does not guarantee immediate erasure of stored file objects, backups, logs, recipient copies or other devices. The privacy policy’s retention section explains the current limits.
The intended service conditions allow restriction of access when necessary to address unlawful activity, security risks or serious misuse. A final suspension, notice and appeal process must be established before these terms are adopted; this draft does not claim an automated enforcement process already exists.
7. Legal rights, changes and contact
Nothing in these draft terms is intended to remove rights that cannot lawfully be excluded. Final warranty, liability and dispute provisions need jurisdiction-specific legal review. No governing law, court, arbitration requirement or liability cap is asserted here without identifying the legal operator and applicable law.
The contracting entity, business address, eligibility rules, billing conditions and effective date must be supplied before these become final terms. A dated update alone does not implement consent collection or a material-change notification process.
For questions, use the contact page. These pages are draft product disclosures, not a claim of legal compliance or a substitute for professional legal review.