Little Vaulty

Acceptable Use Policy

Draft — review before launch
Last updated: pending legal review

1. Purpose

This Acceptable Use Policy keeps Little Vaulty safe, lawful, and reliable for everyone. It applies to all users of the service and our public website. Breaching it may lead to suspension or termination of your account under our Terms of Service.

2. A note on zero-knowledge enforcement

Little Vaulty is end-to-end encrypted. Your vault contents are encrypted on your device before they reach our servers, and we store only ciphertext. We cannot see what you store in your vault and therefore do not and cannot monitor vault contents.

This policy is about conduct we can observe — account behaviour, abuse of our infrastructure, use of our public site — and about your own legal obligations for what you choose to store. You remain responsible for ensuring that your use of the service and the data you store comply with applicable law, even though we cannot inspect your encrypted vault.

3. Prohibited uses

You must not use Little Vaulty to:

  • Break any applicable law or store data you have no legal right to possess or control.
  • Attack, overload, probe, scan, or attempt to bypass the security of the service, its APIs, or underlying infrastructure.
  • Attempt to gain unauthorised access to other users' accounts, data, or systems.
  • Reverse-engineer, decompile, or disrupt the service, except where permitted by law (for example, lawful interoperability or security research within the scope of section 4).
  • Resell, sublicense, or misrepresent the service without our written permission.
  • Use the service to harm, harass, defame, or infringe the rights of others.
  • Circumvent plan limits, entitlements, or technical restrictions (for example, exceeding Taster-tier caps through automated abuse).
  • Upload malware, exploit code, or content designed to compromise systems through the service's infrastructure (even though vault payloads are encrypted, abuse of sync or API endpoints is prohibited).

4. Security research

We welcome responsible security research that helps make Little Vaulty safer. If you discover a vulnerability, please report it to us using our support contact before public disclosure. Do not access other users' data, exfiltrate personal information, or degrade the service for other users while testing. We will work with researchers in good faith.

5. Consequences

Breaching this policy may result in immediate suspension or termination of your account. For serious, repeated, or unlawful activity, we may report the matter to relevant authorities. Account termination follows the deletion and burn processes described in our Terms of Service.

6. Contact

Questions about this policy or to report a concern? Contact us through the details on our Terms of Service page.