Terms of service

These terms are an agreement between you and Beyond Basics, Bengaluru, Karnataka, India ("we", "us"), for the use of the OnlyWallet apps, the web app at app.onlywallet.in, the OnlyWallet browser extension and the website onlywallet.in (together, the "Service"). By creating an account or using the Service, you agree to these terms and to our privacy notice.

1. The Service

OnlyWallet is a personal vault for identity documents, payments and EMIs, insurance, passwords and other records, with reminders, sharing with family and groups, and emergency access. It is provided free of charge and takes no payments. It does not make payments on your behalf: marking a bill as paid only records it. We may add, change or remove features over time. If we ever introduce paid features, we will tell you in advance and you will not be charged without your clear agreement.

2. Your account

• You must be at least 18 years old and able to enter a binding contract under Indian law.
• You sign in with a Google account. Keep that Google account secure: anyone who controls it can attempt to unlock your vault, though they still need your master password.
• You are responsible for activity under your account and on devices where your vault is unlocked.

3. Your master password and recovery phrase

OnlyWallet is zero-knowledge: your vault is encrypted on your device with a key that only your master password or your 24-word recovery phrase can unlock. We never receive either of them. This means:

• We cannot reset your master password or open your vault for you, even if you ask and can prove who you are.
• If you forget your master password, you can set a new one with your recovery phrase.
• If you lose both your master password and your recovery phrase, your vault content and encrypted files cannot be recovered by anyone. This is how the security works, not a fault in the Service, and we accept no liability for it.
• Keep your recovery phrase offline, written down somewhere safe. Do not store it in email, notes apps or cloud storage.

4. Your data

You own what you store. You give us permission to store, process and sync it only as needed to run the Service for you. You are responsible for having the right to store any personal data about other people, such as family members, and for using it lawfully. Encrypted files are stored in your own Google Drive, under your agreement with Google. Deleting them from Drive yourself removes them from OnlyWallet too.

Keep your own copies of important records. Use Settings, Backup to export an encrypted backup file, and keep its separate backup password safe.

5. Sharing, spaces and emergency access

• Spaces. When you add records to a family or group space, every member of that space can read them, and members can keep copies of what they have seen. Removing a member stops access to anything written afterwards, not to what they already saw or saved.
• Emergency access. If you name a trusted contact, they can request read-only access to your whole personal vault. If you do not reject the request within the waiting period you chose, access is granted automatically and the contact can read and keep a copy of your vault. Choose contacts you trust, and keep notifications switched on so you see requests.
• Document links and OnlyWallet Cards. Anyone who obtains a document link you create can open it until it expires, is revoked or is used up. Anything you publish on an OnlyWallet Card is visible to anyone with the card link. "View only" and "view once" settings are deterrents, not guarantees: nothing can stop someone photographing a screen.
• Exports. Files you export or send through another app are no longer protected by OnlyWallet.

6. Acceptable use

You agree not to:

• Use the Service for anything illegal, including storing or sharing forged documents or other people's documents without their permission.
• Try to access other people's data, bypass security rules or disrupt the Service.
• Send unwanted invitations or emergency access requests, or use sharing features to harass anyone.
• Reverse engineer, scrape or overload the Service, or use automated means to access it except as we allow. Responsible security research is welcome; see the contact details in our security.txt file.
• Upload malicious code or content that infringes others' rights.
• Resell or rebrand the Service as your own.

We may suspend or close accounts that break these rules, with notice where reasonable.

7. Third-party services

The Service relies on Google (sign-in, Firebase, Google Drive and push messaging), Cloudflare, Apple's push service, app stores, browsers and your device's operating system. Their availability and terms are outside our control.

8. No warranty

The Service is provided free, "as is" and "as available", without warranties of any kind, express or implied, including fitness for a particular purpose, accuracy or uninterrupted availability. Reminders depend on your device and its settings and may be late or missed. Text read from scans and bill messages can be wrong. Our disclaimer explains these limits.

9. Limitation of liability

To the extent permitted by law, Beyond Basics is not liable for any indirect, incidental, special or consequential loss, or for loss of data, money or opportunity, arising from your use of or inability to use the Service, including missed payments, late fees, lapsed policies or expired documents, and including loss of access caused by a forgotten master password and recovery phrase. Because the Service is free, our total liability for any claim relating to the Service is limited to ₹1,000.

10. Ending your use

You can stop using the Service at any time and delete your account in the App, as described on the Delete your account page. Export a backup first if you want to keep your records. We may stop offering the Service, in which case we will give reasonable notice so you can export your data.

11. Changes to these terms

We may update these terms. We will post changes on this page with a new effective date, and tell you in the App if the change is significant. Continuing to use the Service after a change means you accept it.

12. Governing law

These terms are governed by the laws of India. Courts in Bengaluru, Karnataka have exclusive jurisdiction over any dispute arising from them.

13. Contact and grievances

Beyond Basics, Bengaluru, Karnataka, India. Email [email protected]. Complaints about the Service or your data are handled as described on the Grievance redressal page.