Terms of use

Current status: free beta phase

As at this version, Égide is in a testing phase (beta) and its core is free: the Égide software, its self-service guided installation and the protections described as free in art. 5 are provided without any payment. The only paid service is the premium credit top-up described in art. 5: it is optional and is currently paid in Monero, on the top-up portal.

The tester expressly acknowledges and accepts that Égide is software under active development and not finalised, which may contain errors. It may in particular fail to work as intended, lock the device, trigger an unintended data wipe, or malfunction in any other way. It is provided "as is", without warranty of any kind, express or implied, including as to operation, availability, freedom from error or fitness for a particular purpose. The tester installs and uses it entirely at their own risk, on a device under their full control (art. 3 and 9 below).

Waiver. To the fullest extent permitted by law, the tester waives any claim, action or proceeding against the operator for any damage, direct or indirect, resulting from installing or using Égide during this testing phase, including data loss, device lock-up or unintended wiping. This waiver never covers the operator's wilful misconduct or gross negligence, nor harm to life or bodily integrity: to the extent the applicable law forbids excluding those liabilities, they remain fully reserved, as do consumers' own mandatory rights, which cannot be waived in advance. Nor does this waiver extend to the mandatory rights attached to the paid top-up of premium credit (art. 5 and 10).

Installing the software, preceded in the assistant by a dedicated acceptance checkbox, constitutes acceptance of these terms and of the privacy policy, published here before any installation. In the event of conflict, this article prevails over the rest of the page during the testing phase.

Art. 1, Scope and acceptance

These terms govern the free provision and the use of the Égide software, published by Endlesslock LLC, New Mexico limited liability company ("the operator"). The user may read, print and save them at any time; they accept them, together with their undertaking of lawful, legitimate and ethical use (art. 9), by ticking the dedicated checkbox of the installation assistant before installation; the accepted version is kept without any identity attached.

These terms also govern the top-up of premium credit (art. 5): that contract is concluded with the operator when the user pays for a top-up on the top-up portal, which is merely the technical channel for that payment. Where the portal displays details specific to one top-up (tier, amount, payment address), they supplement these terms without contradicting them. In the event of divergence between translations, the French version prevails, subject to the mandatory rules applicable to the user.

Art. 2, Operator identity

The same information appears in the legal notice.

Art. 3, Product, device and requirements

What is provided consists exclusively of:

• the right to use the Égide software on one (1) device;
• self-service access to the installation assistant, which installs the software and enrolls that device.

No phone is sold, supplied or shipped by the operator. The user separately obtains, under their own responsibility, a compatible Google Pixel that they own or are authorised to administer. They also provide the computer, the compatible browser and the USB cable required.

Installation replaces the existing system with GrapheneOS, third-party software, and entails a prior complete and irreversible wipe of the Pixel. The assistant then installs Égide and configures it as a device administration application. The user then chooses which protections to enable. Depending on their configuration, a trigger may wipe a sensitive profile or the entire device. The product provides no geolocation service and cannot recover wiped data.

Art. 4, Free provision and self-service installation

1. Installation is self-service: the user opens the installation assistant, connects their device to it and is guided through. The operator requires no name, no identity document and no supporting evidence, and opens no account.
2. Access to the assistant, the installation and the protections described as free in art. 5 are provided free of charge. No price, no subscription and no consideration is owed on that account.
3. The assistant itself checks whether the device has already been installed and, if so, refuses a new installation: the rule is one installation per device (art. 8).
4. Reinstalling after a wipe, a self-destruction or a factory reset stays free, through the same assistant and under the same conditions (art. 8).
5. Making the assistant available is a service the operator provides voluntarily, is not bound to, and may suspend, defer or restrict, in particular where there are serious objective indications of a use prohibited under art. 9. No availability and no response time is guaranteed.

Art. 5, Premium options, time credit and top-ups

The protections that fire from the device itself are free and never expire: wiping after repeated wrong unlock attempts, wiping after a prolonged lock, tamper resistance, the choice of wipe mode, optional camouflage and security updates. They depend on no payment and do not stop.

Premium options, on the other hand, depend on a time credit: the remote wipe (by SMS from a phone, or over Tor from a computer), the wipe if the phone is cut off from the network. Every device gets 30 days of full premium at provisioning.

Beyond that, credit is topped up in prepaid tiers of days, attached to the device (art. 8 and 13) and without renewal: nothing is ever charged by itself and no subscription is taken out. The top-up is concluded with the operator (art. 1) and is paid on the top-up portal, reachable over Tor and over the web.

Prices. The tiers and their launch prices are set in US dollars (USD):

• one week, i.e. 7 days credited: USD 3;
• one month, i.e. 28 days credited: USD 10;
• six months, i.e. 182 days credited: USD 35;
• one year, i.e. 364 days credited: USD 50.

Durations are exact numbers of days added to the designated device's credit: the "month" is worth 28 days and the "year" 364 days. The applicable price is the one displayed at the moment of the top-up. The operator reserves the right to revise the prices; a revision takes effect on 1 January of a year, never mid-year; it applies only to top-ups made after it takes effect. Days already credited remain acquired at the price paid and are never recalculated.

Payment. Top-ups are currently paid in Monero (XMR) only; payment by card is temporarily unavailable and will be offered later. Payment in Monero is direct and non-custodial: each top-up receives its own dedicated Monero payment address and the funds go to the operator with no payment intermediary. The exact Monero amount is displayed before anything is sent; how it is set is described below. Monero transactions are by nature irreversible on the network.

Frozen rate and amount. The operator regularly records the price of Monero in US dollars and keeps the last recorded value. Each top-up freezes, when it is created, the rate then in force: the tier's USD price is converted at that rate and the resulting Monero amount no longer changes, even if the price then moves. If the rate source is temporarily unreachable, the last recorded rate or, failing that, a fallback rate set by the operator is applied; a top-up is never refused on that ground. The applied rate may therefore differ from the market rate at the moment of payment; only the Monero amount displayed on the top-up is decisive, to the exclusion of any other price reference.

Validity of a top-up. A Monero top-up is valid for ten hours. If nothing has reached its payment address within that period, the top-up fails: the application says so and invites the user to create a new top-up, at the rate then in force. Funds that arrive within the period keep the top-up open: full payment of the displayed amount is credited once the network confirms it, through a server-side reconciliation, even after the ten hours have passed. A payment that nevertheless reaches the address of a top-up that has already failed is not lost: it is handled with support, under the refund rules of this article. A payment below the displayed amount is never credited; the top-up stays open until the amount is completed. A payment above it does not credit additional days.

The two means do not carry the same consequences. Paying in Monero involves no intermediary. Paying by card, once available, is de-anonymising: the user's bank and the payment provider see the operation; that provider's legal obligations may lead it to keep and disclose identity data. The user chooses their means knowing that difference.

Performance, withdrawal and refunds. A top-up is digital content performed immediately: as soon as payment is confirmed, the days are credited to the designated device, identified by the technical identifier of art. 13. The user checks before paying that the device to be credited is the right one. The applicable law provides no general right of withdrawal for online purchases; where a mandatory right of withdrawal exists for digital content, the top-up is performed only with the user's express consent to immediate performance, entailing the loss of that right once performance is complete. Once the days are credited to the device, the top-up is performed and is non-refundable, subject to mandatory rights and to art. 10. If a paid top-up cannot be performed, it is refunded by the means used to pay; for a payment in Monero, which reveals no return address, the refund requires the user to provide a Monero address to support.

Art. 6, End of premium credit

When the time credit runs out, only the premium options listed in art. 5 stop being active. The free protections carry on without interruption: at no point is the device left defenceless because credit expired.

Expiry results from a server answer and never from the device's clock. When the device is offline, or the operator's servers are unreachable, it keeps its last known state and stays protected. The application announces the end of credit in its own screens, 14, 7, 3 and then 1 day in advance.

A consequence not to be overlooked: while a device has no premium credit, the user loses the ability to order a remote wipe. A phone lost or seized during that period will still end up wiping itself if the free watchdogs fire, but the user can no longer bring that wipe about themselves.

Art. 7, Licence to use and intellectual property

The operator grants the user a personal, non-exclusive, non-transferable and free right to use the Égide software, for the enrolled device, for the duration of that installation. No intellectual property right is transferred.

Circumventing the software's technical measures, and any attempt to defeat the "one installation per device" control (art. 8), are prohibited. Reverse engineering remains permitted within the mandatory limits of the law. Third-party components, in particular GrapheneOS, remain governed by their own licences.

Art. 8, Scope of one installation

The right to use covers one installation, with no calendar expiry. It is deemed used as soon as the assistant has enrolled the device.

A wipe, a self-destruction or a factory reset removes Égide from the device. Reinstalling it is done again through the self-service assistant, free of charge under art. 4; that is not a product defect (art. 10) but how the protection works.

Premium time credit, by contrast, is attached to the device: it is still there after a reinstall on the same device (see art. 13 for the technical identifier that makes this possible).

Art. 9, Lawful, legitimate and ethical use

Égide is anti-theft software, meant for the legitimate protection of sensitive information on a device its user loses control of. It is aimed in particular at exposed professionals such as doctors, lawyers, judges, police officers, journalists, researchers, human rights defenders and whistleblowers. That purpose authorises no use contrary to the law, to fundamental rights or to applicable professional rules.

The user undertakes in particular to:

• install and administer the product only on their own device or on a device for which they hold valid authorisation from the owner, the employer or the institution concerned;
• never monitor, lock or wipe a third party's device or data without the right to do so, nor use the product to harass, coerce, discriminate, retaliate or harm others;
• not facilitate, commit or conceal an offence, nor destroy, alter or remove evidence, official records or data subject to seizure, sealing, a retention, archiving or production obligation;
• comply with the obligations of their profession or office: secrecy, archiving, patient or client files, administrative retention, chain of evidence and lawful employer instructions. Owning the phone does not necessarily mean being free to dispose of all the data it holds;
• choose their settings knowing that wiping is irreversible, keep authorised backups and test their configuration carefully;
• comply with applicable law and with the sanctions and export restrictions binding on them.

The operator does not operate the phone, does not monitor its content and does not itself trigger remote wiping. Where there are serious objective indications of a prohibited use, it may restrict access to the assistant, suspend support or take the measures required by law, without prejudice to the user's mandatory rights and with no general obligation to monitor.

Art. 10, Warranty

As the software is provided free of charge, it comes with no contractual warranty. The operator nevertheless endeavours to fix defects reported to it. The user describes the defect and provides the technical details reasonably needed for diagnosis, without disclosing sensitive data.

The following are not in themselves defects: using an incompatible Pixel, not following the installation steps, an unauthorised modification, a hardware failure, a change in a third-party component beyond the operator's control, or the use of an installation within the meaning of art. 8, including where it results from a wipe, a self-destruction or a factory reset.

Mandatory rights remain fully reserved, in particular consumers' rights and liability for a fraudulently concealed defect. Rights attached to the paid supply of digital content or a digital service, that is, to the top-up of premium credit, are exercised against the operator, which is the counterparty there (art. 5).

Art. 11, Liability and product limitations

Égide reduces certain risks; it guarantees neither the recovery of the phone, nor absolute inviolability of the data, nor the absence of false triggers. It replaces neither a backup, nor an emergency procedure, nor legal advice. The user remains responsible for choosing the rules, for their authorised backups and for protecting their secrets.

To the extent permitted by law, and given that provision is free of charge, the operator excludes liability for slight negligence and for indirect damage. No exclusion and no cap applies to wilful misconduct, gross negligence, harm to life or bodily integrity, or to other liabilities that cannot be excluded. For claims that may validly be limited, the operator's aggregate liability is capped at the amounts actually paid by the user for the device concerned in respect of premium over the preceding twelve months.

Art. 12, Support and updates

Support is provided at the contact address, with no guaranteed response time unless expressly agreed otherwise. Authenticated updates are distributed through the channel built into the software, at no extra cost and with no premium credit condition: a security fix is never reserved for a paying device. That undertaking applies to the covered installation and for as long as the operator maintains the Égide range; it guarantees neither perpetual hardware compatibility nor the eternal operation of any infrastructure. Durations and updates imposed by applicable consumer law remain reserved.

Art. 13, Data protection

Processing, purposes, retention periods and data subject rights are described in the privacy policy. The operator requires no account, no name and no e-mail address, and endlesslock.com keeps no user data at all.

Tracking premium credit does, however, require recognising a device from one installation to the next. It relies for that on a technical identifier derived from the device, which survives a factory reset, contains no personal data and is linked to no identity. That is what makes it possible to find credit again after a reinstall (art. 8); it is also, plainly stated, a persistent identifier, and the privacy policy sets out its scope.

Top-ups are currently paid in Monero, with no payment provider: no banking or identity data is collected on that occasion. The top-up portal processes only the technical identifier of the device to be credited, the chosen tier and the payment address dedicated to the top-up. Once top-up by card becomes available, the payment provider will collect the data needed for the transaction; neither endlesslock.com nor the fleet database will keep any of it. That means of payment will remain de-anonymising within the meaning of art. 5.

Art. 14, Changes to these terms

Each version is dated. The applicable version is the one accepted at installation; a later change does not retroactively reduce rights already acquired. A change necessary for security or required by law may apply to future use of the service, in compliance with mandatory law. The invalidity or unenforceability of a clause does not affect the others: the clause concerned is set aside or adapted only as far as necessary and under the applicable law.

Art. 15, Governing law and forum

The relationship is governed by the law of the State of New Mexico (United States), excluding its conflict-of-laws rules. For professional users, the exclusive forum is the competent courts of the State of New Mexico. That choice never deprives a consumer of mandatory protections or of forums they cannot validly waive, in particular in their State of habitual residence.