Terms of Service

1. Who we are and what you are agreeing to

These Terms of Service (the "Terms") govern access to and use of the ittto web application at ittto.app (the "Service"), operated by José Ricardo Lizano Monge, national ID (cédula) 1-1290-0291, domiciled in Costa Rica ("we", "us").

By creating an account, accepting these Terms on the acceptance screen, or using the Service, you agree to be bound by these Terms and by the Privacy Policy. If you do not agree, do not use the Service.

You must be at least 18 years old, or of legal age in your country of residence, to use the Service. The Service is not directed at minors.

2. Closed beta status

The Service is currently in a free, invitation-only closed beta. This has concrete consequences that you expressly accept:

• The Service is provided "as is" and "as available", with no warranty of operation, availability, continuity or freedom from defects.
• We may modify, suspend or discontinue any feature at any time and without notice.
• We may reset, migrate or delete the beta database when moving to general availability, giving reasonable advance notice by email and an opportunity to export your data.
• We may revoke beta access for any account, at any time, at our discretion.
• Features you see in the beta may not exist, or may exist differently or behind a paid plan, in the general release.

We will give you at least thirty (30) calendar days' notice by email before the Service becomes paid. You will never be charged automatically when the beta ends: subscribing to a plan requires an affirmative action from you.

3. Your account

You are responsible for keeping your login credentials confidential and for all activity carried out from your account. You must notify us promptly at security@ittto.app if you suspect unauthorized access.

You must provide a valid email address and keep it current. It is the only channel through which we can notify you of security incidents, changes to these Terms, or the end of the beta.

You may not share your account with third parties, resell access, or use the account on behalf of an organization without our prior written consent.

4. The vault: no master password recovery

The absence of a back door is a deliberate design decision: a recovery mechanism available to us would also be a mechanism available to an attacker or to a court order. You expressly accept this design and assume the associated risk.

It is your responsibility to store your master password securely and to keep your own backups of critical information held in the vault.

5. Backups and data loss

Although we take database backups as an operational practice, we do not guarantee the preservation, integrity or recoverability of your data, particularly during the beta.

You are responsible for maintaining your own backups. The Service provides a full export under Settings → Privacy & data, which you may use at any time and as often as you consider necessary. We recommend doing so periodically.

6. Your content

You retain ownership of all content you create or upload to the Service: tasks, notes, budgets, vault entries and files ("your Content"). We acquire no ownership rights in your Content.

You grant us only the limited, non-exclusive, revocable technical licence necessary to store, process, transmit and display your Content in order to provide the Service. That licence ends when you delete the Content or your account, except for copies that remain in backups until their normal rotation (see the Privacy Policy).

We do not use your Content for advertising, profiling, sale to third parties, or artificial-intelligence model training.

7. Acceptable use

You agree not to use the Service to:

• Store credentials, access keys or third-party data without the authorization of their owner, including unlawfully obtained credentials.
• Store or distribute content that is unlawful under the laws of Costa Rica or of your country of residence.
• Breach, probe or attempt to circumvent the Service's security measures, except as part of a responsible vulnerability disclosure addressed to security@ittto.app.
• Reverse-engineer, scrape at scale, or generate automated load that degrades the Service for other people.
• Impersonate any person or entity.

We may suspend or terminate your account immediately if you breach this clause.

8. Availability and support

During the beta we offer no service level agreement (SLA), no uptime commitment and no support response time. Support is provided by email at hola@ittto.app on a best-effort basis.

9. Disclaimer of warranties

To the maximum extent permitted by applicable law, the Service is provided "AS IS" and "AS AVAILABLE", without warranties of any kind, express or implied, including without limitation warranties of merchantability, fitness for a particular purpose, accuracy, continuous availability, absolute security or non-infringement.

We do not warrant that the Service will be error-free, that its operation will be uninterrupted, or that defects will be corrected.

Nothing in this clause excludes or limits liability that cannot validly be excluded or limited under the laws of Costa Rica or under mandatory consumer-protection rules of your country of residence.

10. Limitation of liability

To the maximum extent permitted by applicable law:

• We will not be liable for indirect, incidental, special, consequential or punitive damages, nor for lost profits, lost revenue, lost business opportunities, reputational harm or data loss.
• Our total aggregate liability to you, on any cause of action and under any legal theory, will not exceed the greater of: (a) the total amount you paid us in the twelve (12) months preceding the triggering event, or (b) fifty United States dollars (USD 50). During the free beta the amount paid is zero and the applicable cap is the one in (b).

These limitations apply even if we were advised of the possibility of such damages and even if a remedy fails of its essential purpose.

11. Indemnity

You agree to hold us harmless against claims, damages, losses and reasonable expenses (including attorneys' fees) arising from: (i) your breach of these Terms; (ii) your Content; or (iii) your use of the Service in violation of law or of third-party rights.

12. Termination

You may delete your account at any time under Settings → Privacy & data. Deletion is immediate and irreversible: it removes your tasks, notes, budgets, categories, files and vault entries from the active database.

We may suspend or terminate your access if you breach these Terms, if your use creates a legal or security risk, or if we discontinue the Service. Except in cases of serious breach or legal requirement, we will give reasonable advance notice and an opportunity to export your data.

Clauses 4, 5, 6, 9, 10, 11, 13 and 14 survive termination.

13. Changes to these Terms

We may amend these Terms. Each version is identified by the date shown at the top of this document. For material changes we will notify you by email and/or require your express in-app acceptance before you can continue using the Service. Continued use after the effective date constitutes acceptance.

We keep a record of the date, time, IP address and versions you accepted, as evidence of consent.

14. Governing law and jurisdiction

These Terms are governed by the laws of Costa Rica, without regard to its conflict-of-law rules. Any dispute will be submitted to the competent courts of Costa Rica.

If you reside in a country whose consumer legislation gives you a non-waivable right to sue in the courts of your domicile or to the application of its mandatory rules, this clause does not limit that right.

15. General provisions

Entire agreement. These Terms and the Privacy Policy constitute the entire agreement between you and us regarding the Service.

Severability. If any clause is held invalid or unenforceable, the remainder stays in full force.

No waiver. Failure to exercise a right does not constitute a waiver of it.

Assignment. You may not assign these Terms without our written consent. We may assign them in connection with a merger, acquisition or asset sale, with prior notice to you.

16. Contact

General and legal enquiries: hola@ittto.app
Privacy and personal data: privacidad@ittto.app
Vulnerability reports: security@ittto.app