Terms of Service
These are the Terms of Service for Fob, a 2FA authenticator app made by Cleargate Labs LLC. By creating an account or using the app, you agree to these terms. We've tried to write them in plain English. If something is unclear, email legal@fob.codes and we'll fix the wording.
Who we are
Fob is made by Cleargate Labs LLC, a Kansas limited liability company. When these terms say "we," "us," or "Cleargate," that's who we mean. When they say "you," they mean the person using the app.
Our address is 13725 Metcalf Ave, Suite 353, Overland Park, KS 66223, United States.
Eligibility and your account
You need to be at least 18 years old to use Fob. If you are under 18, please don't sign up. If we learn an account belongs to someone under 18, we will delete it.
To use the app you'll create an account with an email address and a password. You are responsible for keeping your password and your device secure. We will never email you to ask for your password.
One person, one account. You can use the same account on multiple devices. Don't share your account credentials with anyone, including family members.
License to use the app
We grant you a personal, limited, non-exclusive, non-transferable, revocable license to install and use the Fob app on devices you own or control, for your own use, for as long as you comply with these terms. That's it. We keep all rights in the app, the brand, the website, and everything else we've made.
You don't get a license to the source code. Fob is closed-source software. The trust story for Fob is built on a third-party security audit committed post-launch (we'll post the report at fob.codes/security when complete), and on the structural fact that we cannot read your vault, not on access to source.
Acceptable use
Don't do these things with Fob:
- Reverse engineer, decompile, or disassemble the app, except to the extent the law expressly permits despite this restriction.
- Scrape, crawl, or extract data from our APIs or services using automated tools, except for normal use of the app itself.
- Use Fob to generate or store 2FA codes for accounts that aren't yours, or that you aren't authorized to access.
- Resell, sublicense, rent, or commercially redistribute the app or any part of it.
- Interfere with our infrastructure, attempt to access other users' data, or probe for vulnerabilities outside an authorized program. If you find a vulnerability, email security@fob.codes - we'd like to hear from you.
- Use the app to break the law, infringe someone's rights, or harass or threaten anyone.
If you violate this section, we may suspend or terminate your account.
Subscriptions and payment
Fob has a Free tier and a paid Premium tier.
| Tier | Monthly | Annual | What you get |
|---|---|---|---|
| Free | $0 | $0 | Unlimited accounts, tags, import/export, on-device storage |
| Premium | $2.49/mo | $19.99/yr | Encrypted per-account notes, bulk tagging, encrypted cloud backups |
Prices are in US dollars. We may change prices over time. If we raise the price of a tier you're subscribed to, we'll email you at least 30 days before the change applies to your next renewal, and you can cancel before the new price takes effect.
How you pay depends on where you signed up
Fob accepts payment through three different channels, and the channel determines who the merchant of record is, the refund policy, and how you cancel.
Web subscriptions (fob.codes). If you subscribe at fob.codes, we charge you through Stripe. Cleargate Labs is the merchant of record. Your subscription auto-renews at the end of each billing period (monthly or annual) until you cancel. You can cancel any time from your Stripe billing portal - we link to it in every receipt and account email - or by emailing support@fob.codes. Cancellation stops the next renewal; you keep access until the end of the period you've already paid for. We don't generally offer refunds for partial periods, but if you cancel within 14 days of your initial annual purchase and you haven't used Premium features beyond a trial of the basic functionality, we will refund the full amount.
Android in-app subscriptions (Google Play). If you subscribe inside the app on Android, Google Play is the merchant of record and Google's terms apply to the transaction. Your subscription auto-renews until you cancel through the Play Store (Play Store > your profile > Payments & subscriptions > Subscriptions). Refunds are governed by Google Play's refund policy. We can't process refunds for Play Store purchases ourselves; you'll need to request them through Google.
iOS in-app subscriptions (App Store). If you subscribe inside the app on iOS, Apple is the merchant of record and Apple's terms apply to the transaction. Your subscription auto-renews until you cancel through the App Store (Settings > [your name] > Subscriptions). Refunds are governed by Apple's refund policy and must be requested through Apple. We can't process App Store refunds ourselves.
Auto-renewal disclosure
This section is required by California's Automatic Renewal Law and by similar laws in New York and other states. Read it carefully. By subscribing, you separately consent to the auto-renewal terms in this section.
- Your subscription will automatically renew. Monthly subscriptions renew every month; annual subscriptions renew every year. Renewal happens at the then-current price for your tier.
- You will be charged automatically through the payment channel you used to subscribe (Stripe, Google Play, or App Store), without further action on your part, until you cancel.
- You can cancel at any time. Cancellation through the channel you used to subscribe stops the next renewal. You keep access until the end of the current paid period.
- Stripe (web): use the billing portal link in your receipt or any account email, or email support@fob.codes.
- Google Play: Play Store app > profile > Payments & subscriptions > Subscriptions > Fob > Cancel.
- App Store: Settings > [your name] > Subscriptions > Fob > Cancel Subscription.
- You can get a refund for web (Stripe) subscriptions within 14 days of your initial annual purchase by emailing support@fob.codes. Refunds for Google Play and App Store purchases are handled by Google and Apple under their respective policies.
- We will remind you before annual renewals. For annual subscriptions billed through Stripe with an initial paid term of one year or longer, we send a reminder email at least 15 days and not more than 45 days before the next renewal. The reminder includes the renewal date, the price, the cancellation policy, and step-by-step cancellation instructions, including a one-click cancel link.
Free trials
If we offer a free trial for a paid tier, the specific terms of that trial (length, what's included, what happens at the end) will be shown to you at sign-up. Unless we tell you otherwise at sign-up, a free trial converts to a paid subscription at the end of the trial period and your payment method is charged. You can cancel before the trial ends to avoid the charge. As of the effective date of these terms, Fob does not offer a free trial.
Apple App Store: additional terms
If you downloaded Fob from the Apple App Store, the following applies and overrides anything inconsistent in these terms:
- These terms are between you and Cleargate Labs LLC, not Apple. Apple is not responsible for Fob or its content.
- Your license to use Fob on iOS or iPadOS is also subject to the Usage Rules in Apple's Licensed Application End User License Agreement (the "Apple EULA"). To the extent these terms grant you fewer rights than the Apple EULA, the Apple EULA controls. The license is a non-transferable license to use Fob on any Apple-branded products that you own or control, subject to those Usage Rules.
- Cleargate Labs is solely responsible for providing any maintenance and support services for Fob, as specified in these terms or as required under applicable law. Apple has no obligation to provide maintenance or support.
- For questions, complaints, or claims about Fob, contact Cleargate Labs at support@fob.codes or by mail at 13725 Metcalf Ave, Suite 353, Overland Park, KS 66223, United States. We do not currently offer telephone support.
- When using Fob, you must comply with the terms of any third-party services you use with the app, including your wireless data carrier's terms of service. We are not responsible for your compliance with those terms.
- If Fob fails to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price (if any) to you. To the maximum extent permitted by law, Apple has no other warranty obligation with respect to Fob.
- Apple is not responsible for product claims, warranty claims, intellectual property infringement claims, product liability claims, or claims under consumer protection or similar laws relating to Fob.
- Apple and Apple's subsidiaries are third-party beneficiaries of these terms. On your acceptance of these terms, Apple has the right (and is deemed to have accepted the right) to enforce these terms against you as a third-party beneficiary.
Data and security
How we handle your data is described in our Privacy Policy. The short version: your 2FA secrets stay on your device, and if you create a cloud backup, your vault is encrypted on your device before it ever reaches our servers. We can't read it. The full architecture is at fob.codes/security.
A few things you should know up front:
- Your master password is the key. We don't have a copy. We can't reset it. If you forget it and you don't have a recovery key or your existing devices, your encrypted vault becomes unreadable. That's not a bug; it's the property that makes zero-knowledge encryption work.
- Lost device, no backup, no recovery key = lost data. If you don't create a cloud backup and you don't export your vault, and your device is lost, stolen, or wiped, your codes are gone. We strongly recommend setting up the recovery wizard at onboarding.
- No system is unbreakable. We use industry-standard cryptography. A third-party security audit is committed post-launch; the report will be posted at fob.codes/security when complete. We can't guarantee that no incident will ever happen, anywhere in the supply chain. We can guarantee that the design is structured so that an incident on our servers does not expose your codes.
Backup and export
You can export your vault any time, for any reason, from Settings > Export. The export is available in an encrypted .fobvault format and as an unencrypted plaintext file. Your data is yours regardless of whether you keep using Fob, and regardless of what happens to Cleargate Labs.
Closed source
Fob is closed-source software. We do not publish the source code, and these terms do not grant you a license to it. The trust signal for Fob is independent: third-party security audits are posted at fob.codes/security as they're completed, and the zero-knowledge architecture is designed so that you don't have to trust us with the contents of your vault. If a third-party audit identifies a material issue, our practice is to publish the finding and the remediation after the issue is resolved, on a responsible-disclosure timeline that coordinates with the auditor and any affected third parties. In limited cases (an active vulnerability affecting other systems, an embargo requested by the researcher, or a legal restriction), publication may be delayed or summarized rather than complete.
Termination
You can stop using Fob and delete your account at any time from Settings > Delete account. Canceling a paid subscription is a separate action; see "Subscriptions and payment" above.
We can suspend or terminate your account if you materially breach these terms (for example, by violating "Acceptable use"), if your payment fails and isn't cured within a reasonable time, or if we are required to do so by law. Where reasonable, we'll give you notice and a chance to fix the problem before terminating.
If we terminate your account for breach, we may delete your encrypted vault and metadata from our servers. Your local, on-device vault is unaffected by anything we do on our servers; uninstalling the app destroys the local copy.
If we wind down the Fob service entirely, we will give you at least 60 days' notice and a way to export your data before we shut it off.
Disclaimer of warranties
Fob is provided "as is" and "as available." We don't promise that the app will be uninterrupted or error-free, or that it will be available at any specific level of uptime. We don't promise that any particular feature will keep working, or that the app will be compatible with every device or every other service.
We make no warranties of any kind, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement, except as expressly required by law.
Some jurisdictions don't allow the exclusion of certain warranties, so some of these exclusions may not apply to you.
Limitation of liability
To the maximum extent permitted by law:
- Cleargate Labs is not liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, data, business, or goodwill, even if we've been advised that such damages are possible.
- Our total aggregate liability arising out of or relating to Fob or these terms is capped at the greatest of (a) the amount you paid us in the 12 months before the event giving rise to the claim, (b) US $1,000, or (c) the minimum statutory damages your home jurisdiction requires for the type of claim you assert.
Carve-outs. The limitations above do not apply to: (i) our gross negligence, willful misconduct, or fraud; (ii) personal injury or death caused by our negligence; or (iii) any liability that cannot be excluded or limited under applicable law.
State consumer protection rights. Nothing in this section limits your rights under, and you may bring claims against Cleargate Labs in your home jurisdiction under: (a) the California Consumers Legal Remedies Act, Cal. Civ. Code §§ 1750-1784, or the California Unfair Competition Law, Cal. Bus. & Prof. Code § 17200 et seq.; (b) Massachusetts General Laws Chapter 93A; (c) the New Jersey Consumer Fraud Act, N.J.S.A. 56:8-1 et seq., or the New Jersey Truth-in-Consumer Contract, Warranty and Notice Act, N.J.S.A. 56:12-14 et seq.; (d) New York General Business Law §§ 349 and 350; or (e) any other consumer protection statute of your state of residence that, as applied to consumer software services, cannot be waived by contract.
Some jurisdictions limit the extent to which a software provider can disclaim or cap liability, including for products that handle security-sensitive data. To the extent your jurisdiction's law disallows any of the limits above, those limits apply only to the maximum extent permitted, and the rest of this section still applies.
Indemnification
You agree to indemnify and hold harmless Cleargate Labs LLC and its officers, employees, and agents from any claim, demand, loss, or expense (including reasonable attorneys' fees) arising out of (a) your misuse of Fob, (b) your violation of these terms, or (c) your violation of any law or third-party right. We will tell you promptly if a claim is made and let you control the defense, as long as you don't settle in a way that admits liability on our behalf without our consent.
Disputes, arbitration, and class action waiver
Read this section carefully. It affects your legal rights.
If you and Cleargate Labs have a dispute that we can't resolve informally, the dispute will be resolved by binding individual arbitration rather than in court, except as set out below.
Informal resolution first. Before starting arbitration, you agree to email legal@fob.codes with a description of the dispute and what you'd like us to do about it, and to give us 30 days to try to resolve it. We'll do the same on our end before bringing a claim against you.
Arbitration. Arbitration will be administered by JAMS under its Streamlined Arbitration Rules and Procedures (and, where applicable, the JAMS Mass Arbitration Procedures), or, at your option, by the American Arbitration Association under its Consumer Arbitration Rules (and, where applicable, the AAA Mass Arbitration Supplementary Rules). The arbitration will take place in Johnson County, Kansas, or by video or telephone if you prefer. The arbitrator's decision is final and may be entered in any court with jurisdiction.
Class action waiver. You and Cleargate Labs agree that any dispute will be brought only in an individual capacity, and not as a plaintiff or class member in any class, collective, or representative action. The arbitrator can't consolidate more than one person's claims and can't preside over any form of representative proceeding. If a court decides this class action waiver is unenforceable as to a particular claim, that claim (and only that claim) will be severed and may proceed in court.
Exceptions. Either party may bring a claim in small-claims court if it qualifies, and either party may seek injunctive or equitable relief in court for misuse of intellectual property or violation of "Acceptable use."
Your right to opt out. You can opt out of this arbitration agreement and class action waiver. To opt out, email legal@fob.codes within 30 days of creating your account, with the subject line "Arbitration Opt-Out" and the email address on your account. If you opt out, the rest of these terms still apply, but disputes will be resolved in court under "Governing law and venue" below.
Governing law and venue
These terms are governed by the laws of the State of Kansas, without regard to its conflict of laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
For any dispute that isn't subject to arbitration, you and Cleargate Labs agree to the exclusive jurisdiction of the state courts located in Johnson County, Kansas, and the United States District Court for the District of Kansas, and waive any objection to that venue.
Changes to these terms
We will update these terms when our practices or the law change. When we do, we'll revise the effective date at the top of this page and email account holders if the change is material (a change in payment terms, a change in dispute resolution, a change that affects your rights). For non-material changes (wording, typos, clarifications), we'll update the page without a separate notice.
If you keep using Fob after a material change becomes effective, you accept the updated terms. If you don't agree, you can stop using the app and delete your account before the change takes effect.
The current version of these terms lives at fob.codes/terms. Older versions are available on request from legal@fob.codes.
Other
Severability. If any part of these terms is held to be unenforceable, the rest still applies. The unenforceable part will be enforced to the maximum extent permitted by law.
Entire agreement. These terms, together with our Privacy Policy and any pricing or feature descriptions linked from these terms, are the entire agreement between you and Cleargate Labs about Fob. They replace any prior agreements about the same subject.
No waiver. If we don't enforce a part of these terms in one situation, that doesn't mean we've given up the right to enforce it later.
Assignment. You can't assign or transfer these terms without our written consent. We can assign them in connection with a merger, acquisition, sale of assets, or by operation of law.
Headings. Section headings are for reference only and don't affect interpretation.
Contact
For legal questions about these terms, disputes, or formal notices: legal@fob.codes
For security and privacy questions: security@fob.codes
For general support, billing, and account help: support@fob.codes
The contracting entity is:
Cleargate Labs LLC
13725 Metcalf Ave, Suite 353
Overland Park, KS 66223
United States
Cleargate Labs LLC · Overland Park, KS · fob.codes