Terms — Rook

Important: Rook is a zero-knowledge app. If you lose your master password, your vault cannot be recovered — by you or by us. There is no account, no recovery email, and no reset mechanism. Keep your master password safe.

1. Acceptance of terms

By downloading, installing, or using Rook ("the App"), you agree to these Terms of Use ("Terms"). If you do not agree, do not use the App. These Terms apply to all users of the App.

2. Description of service

Rook is a local-first password manager for iOS. It stores encrypted vault data on your device and, if you opt in, in your personal iCloud Drive. The App is provided as a one-time purchase with no associated account or subscription service.

3. Disclaimer of warranties

THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. THE DEVELOPER DOES NOT WARRANT THAT THE APP WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF SECURITY VULNERABILITIES. YOUR USE OF THE APP IS ENTIRELY AT YOUR OWN RISK.

In particular, no warranty is made that:

The App will be available on any particular device or iOS version;
Vault data will be preserved across iOS updates, device transfers, or App reinstallation;
The encryption implementation is free from flaws;
The App will remain compatible with future versions of iOS or iCloud.

4. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE DEVELOPER BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PASSWORDS, LOSS OF PROFITS, OR UNAUTHORIZED ACCESS TO YOUR VAULT, ARISING FROM YOUR USE OF OR INABILITY TO USE THE APP, EVEN IF THE DEVELOPER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

THE DEVELOPER'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ANY CLAIMS ARISING FROM OR RELATED TO THE APP SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID FOR THE APP IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) USD $1.00.

5. User responsibilities

You are solely responsible for:

Your master password. The App uses zero-knowledge encryption. The developer has no ability to retrieve, reset, or recover your master password or vault contents under any circumstances. Loss of your master password means permanent, irrecoverable loss of all vault data.
Device security. Securing the iOS device on which the App is installed, including keeping your device passcode and biometrics protected.
Backups. Maintaining any backups of your vault data you consider necessary, independent of the optional iCloud sync feature.
Lawful use. Using the App only for lawful purposes and in compliance with all applicable laws and regulations.
Export security. Securing any CSV or JSON exports you generate. Exported files contain unencrypted credentials and are your responsibility once generated.

6. No account recovery

Rook has no server infrastructure, no user accounts, and no password reset mechanism. This is by design. The developer cannot and will not be able to assist with vault recovery under any circumstances, including but not limited to forgotten master passwords, lost devices, or corrupted vault files.

Data loss risk: Uninstalling the App, resetting your device, losing your device, or forgetting your master password will result in permanent loss of your vault data unless you have an active iCloud sync or a manual export backup.

7. Security disclosure

If you discover a security vulnerability in the App, please report it responsibly by emailing security@rookpass.com before public disclosure. We ask that you give us reasonable time to investigate and address the issue before making it public.

8. Third-party services

The App may interact with:

Apple iCloud / CloudKit — governed by Apple's Privacy Policy and terms. iCloud sync is optional and off by default.
Have I Been Pwned API — governed by HIBP's Privacy Policy. Breach checking is optional and uses k-anonymity (only the first 5 characters of a hashed password are transmitted).

The developer is not responsible for the practices, availability, or content of these third-party services.

9. Intellectual property

The App, its source code, name, logo, and visual design are the property of the developer. All rights reserved. No license is granted to copy, modify, redistribute, reverse-engineer, or create derivative works of the App except as expressly permitted by applicable law or by Apple's App Store terms.

10. Termination

You may stop using the App at any time by deleting it from your device. These Terms survive termination to the extent necessary to enforce the Limitation of Liability and Disclaimer of Warranties provisions.

11. Changes to these terms

The developer reserves the right to update these Terms at any time. The effective date at the top of this page will reflect the most recent revision. Continued use of the App after changes are posted constitutes acceptance of the revised Terms.

12. Governing law

These Terms are governed by and construed in accordance with the laws of the State of California, United States, without regard to conflict of law principles. Any disputes arising under these Terms shall be resolved in the courts located in California.

13. Severability

If any provision of these Terms is found to be unenforceable or invalid under applicable law, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall remain in full force and effect.

14. Contact

Questions about these Terms may be directed to legal@rookpass.com.

These Terms of Use are provided as a good-faith effort to establish expectations and disclaim liability. They do not constitute legal advice. You should consult a licensed attorney if you require legal guidance specific to your jurisdiction or circumstances.