Effective date: 11 October 2026
Last updated: 11 October 2026
EULA version: 1.0
Chryptor End User License Agreement and Terms of Use
Important encryption warning
Chryptor is an offline, zero-custody encryption application. XBV does not possess your credentials or content and cannot recover lost keys, passphrases, encrypted files or inaccessible vault contents. Retain verified independent backups and verify decryption before deleting an original.
Summary
Chryptor encrypts text and files on your phone. Nothing is sent anywhere.
Chryptor declares no internet permission, in any part of it. Android therefore cannot let it open a network connection, so it cannot send your content, your keys or anything about you to us or to anyone else. You can check that in your phone’s app settings in half a minute, and a test in our build fails if anyone ever adds it.
There is no Chryptor account, no sign-up and no Chryptor server. We never see what you encrypt, and we have nothing to hand over to anyone who asks.
We cannot recover anything. If you lose your passphrase, your key, your backup or your phone, what you encrypted is gone for good. That is the point of the design.
Before you delete an original file, decrypt your encrypted copy and check that it opens. Keep more than one copy of anything you would miss.
Decrypting is always free. The free app always opens your vault, always exports your files and always imports a backup. No payment state ever stands between you and your own data.
Chryptor Pro is a one-time purchase that switches on more features. It does not change the encryption: your files are protected the same way whether or not it is unlocked.
Your license has no expiry date and is not tied to a phone. If we stop making Chryptor, or it is taken off a store, the copy on your phone keeps working.
Chryptor encrypts what you write. It cannot hide who you talk to, when, or how often: that belongs to the app you send through. It cannot protect a phone that something is already reading.
Chryptor includes a keyboard. While you have it switched on it is your keyboard everywhere, so it sees what you type, like any keyboard. It learns nothing, stores nothing you did not ask it to store, and cannot send anything anywhere.
You may take your own copy of Chryptor apart, test what we claim and publish what you find. If you find a security problem, write to security@chryptor.com; we will not take legal action over good-faith research.
We are XBV UG (haftungsbeschränkt), Reisinger Str. 65, 85737 Ismaning, Germany. German law applies, and nothing we write takes away a right the law gives you. The full terms are below.
1. Agreement, provider and acceptance
This End User License Agreement and Terms of Use (“Agreement”) governs your download, installation, access to, and use of the Chryptor application, software, features, documentation, updates, and related materials (“Chryptor”, the “App”, or the “Software”).
This Agreement is between you and:
XBV UG (haftungsbeschränkt)
Address: Reisinger Str. 65, 85737 Ismaning
Register Court: Amtsgericht München,
Registration Number: HRB 299944, VAT: DE453078405
Email: contact@chryptor.com
Website: chryptor.com
In this Agreement, “Chryptor” means the local encryption and decryption application and, where the context concerns the provider, licensor, contracting party or rights holder, may also refer to XBV Unternehmergesellschaft (haftungsbeschränkt). “XBV,” “we,” “us” and “our” mean XBV Unternehmergesellschaft (haftungsbeschränkt), trading as and providing Chryptor.
These provisions, together with the Schedules at the end of this Agreement, govern the installation and use of the Chryptor application, including its free and paid functionality.
These terms are published at chryptor.com and linked in Chryptor’s Google Play listing. By installing or using Chryptor, or by purchasing Chryptor Pro, you agree to them. Chryptor is free to download and use before you buy Chryptor Pro, so you can try it on your own device first.
The terms of Google Play or another authorized marketplace may separately govern the purchase transaction, payment processing and marketplace refund process. These terms govern the license and use of Chryptor.
If you use Chryptor on behalf of a company, organization, or other legal entity, you represent that you have authority to bind that entity.
Contract language
This Agreement is concluded in English. Any translation is provided for convenience only. To the extent permitted by applicable law, the English version controls in the event of inconsistency.
Electronic notices
Notices, disclosures, updated terms and product information may be provided electronically through the applicable marketplace listing, release notes, documentation or the official Chryptor website, to the extent permitted by applicable law.
You may take your own copy of Chryptor apart. Decompile it, read the manifest, watch what it does, test our claims and publish what you find. If you find a security problem, write to us. We will not take legal action over good-faith security research, and we will credit you if you want it.
You must be at least 16 years old, or older if the law where you live requires it, and you must be able to enter into a contract. If you are under 18 you may use Chryptor only if a parent or guardian accepts these terms for you.
2. What Chryptor is, and what it is not
Chryptor performs local encryption and decryption of files and text on your device.
When installed on a supported and appropriately functioning device, provided with supported input and the required credentials, and used in accordance with the documentation, Chryptor is designed to:
- encrypt supported text and files;
- decrypt complete, unmodified and supported text and files previously encrypted with a compatible version of Chryptor;
- provide an offline software keyboard and embedded text box for preparing supported text locally and encrypting or decrypting supported text in accordance with the documented functionality; and
- store supported files in encrypted form at rest within the local Chryptor vault.
These functions constitute Chryptor’s documented functionality.
Chryptor is not:
- a general security application;
- an antivirus or malware-protection application;
- a security guarantee;
- a privacy guarantee;
- an anonymity service;
- a communications or messaging service;
- a cloud or hosted service;
- a storage service;
- a backup service;
- an archival service;
- a recovery service;
- a key-custody or key-management service;
- a financial service;
- a disaster-recovery service; or
- a managed service.
Chryptor encrypts and decrypts supported content. It does not guarantee a particular privacy, security, anonymity, financial, personal-safety or other outcome.
Chryptor has no master key, no backdoor and no key escrow. XBV does not know your passwords or passphrases, cannot reset your encryption and cannot unlock encrypted files for you.
Free functionality: decrypting is always free. The free version of Chryptor always decrypts messages and files sent to you, always opens your vault, always lets you export your own files out of it, and always lets you import a backup. No payment state can take those away. Chryptor Pro switches on more features (one-time purchase, no subscription, no account, the features as of the purchase date, no expiry). It does not change the encryption, and your files are protected the same way whether or not it is unlocked. Chryptor Pro Unlocker is sold through Google Play. Google processes the payment and the refund, and Google’s rules apply to the purchase, including the refund window Google offers and, for buyers in the European Economic Area, the withdrawal terms in the Google Play Terms of Service. A refund through Google Play uninstalls Chryptor Pro Unlocker, and Chryptor Pro switches off the next time Chryptor checks for it. Nothing in this section limits a right you have by law.
2.1 Offline operation and system boundaries
Chryptor’s documented encryption, decryption, keyboard, text-box and vault functions are designed to operate locally without requiring a Chryptor account or server.
XBV does not operate an account through which it can access the user’s Chryptor content.
Chryptor’s offline operation does not establish or guarantee that:
- the device is secure;
- the operating system is secure;
- other applications on the device are secure;
- the clipboard is secure;
- the device is free from malware, spyware or keyloggers;
- the recipient’s device is secure;
- a messaging platform is secure;
- communication metadata is concealed; or
- decrypted content cannot be copied, captured, forwarded or disclosed.
Chryptor does not control the user’s device, operating system, installed applications, physical environment, recipients or third-party platforms.
XBV does not receive, host, store, sync or back up your content on any server, and Chryptor cannot send it over the internet. Your content stays on your device, in the vault and in the files and backups you choose to create. Those backups are created, stored and controlled by you. XBV is not a backup service and keeps no copy of them.
Chryptor is provided as a software tool only.
2.2 No Chryptor account
Chryptor does not require a Chryptor account to operate.
You do not need to create an account with Chryptor, log in to Chryptor, provide an email address, phone number, username, password, identity document, or any account information to use the App.
If you obtain Chryptor through Google Play or another app store, you may need an account with that store. That account belongs to the store, not to Chryptor, and XBV never receives its credentials or payment details.
2.3 Chryptor is not a communication tool
Chryptor is not a messaging app, email service, file-transfer service, social network, cloud service, hosting service, or communication network.
Chryptor does not send, transmit, route, relay, deliver, receive, host, store, sync, or manage communications between users.
If you choose to copy, paste, export, upload, store, send, or share encrypted or decrypted material using another app, service, device feature, cloud provider, messaging provider, email provider, file-transfer provider, or storage provider, that action is performed by you outside Chryptor.
3. License grant and ownership
Subject to your compliance with this Agreement and subject to termination in accordance with Section 17, Chryptor grants you a limited, personal, non-exclusive, non-transferable and non-sublicensable licence to download, install, and use the App on devices that you own or control, solely for lawful use.
Chryptor is licensed, not sold. You may install Chryptor on any device you own or control, as often as you like. Chryptor Pro is not tied to a device. If you bought a license key, keep it: you can enter it again after a reinstall or on a new phone, and a Chryptor keys backup contains it. If you bought Chryptor Pro on Google Play, it follows your Google account, and both apps must be installed in the same Android profile.
You receive only the rights expressly granted in this Agreement. Chryptor and its licensors reserve all rights not expressly granted to you.
Your use of Chryptor may also be subject to the terms, rules, and technical requirements of the app store or distribution channel through which you obtained the App.
3.1 Intellectual property
Chryptor, including its software, design, user interface, text, documentation, graphics, logos, names, icons, cryptographic workflow implementation, code, architecture, branding, trade dress, and proprietary materials, is owned by Chryptor, XBV, or its licensors and is protected by intellectual property laws.
You retain ownership of your own files, messages, and content.
Chryptor does not claim ownership of your content.
3.2 Open-source and third-party components
Chryptor may include third-party software, libraries, or components that are subject to separate open-source or third-party license terms.
Where required, notices and license information will be made available in the App, documentation, or on the official Chryptor website chryptor.com.
To the extent required by the relevant third-party license, those license terms apply to the relevant component.
Nothing in this Agreement limits your rights under applicable open-source licenses for components covered by those licenses.
3.3 Feedback
If you provide ideas, suggestions, comments, bug reports, feature requests, or other feedback about Chryptor, you grant Chryptor and XBV a worldwide, perpetual, irrevocable, royalty-free license to use, copy, modify, implement, publish, and exploit that feedback for any purpose without restriction or compensation to you.
Do not provide feedback that contains confidential information unless Chryptor has separately agreed in writing to receive it confidentially.
4. License restrictions and prohibited uses
You must not do any of the following, and must not permit, encourage or help anyone else to do them:
- copy, distribute, rent, lease, lend, sell, resell, sublicense, transfer, host, publish, or commercially exploit Chryptor except as expressly permitted by this Agreement or mandatory law;
- modify, adapt, translate, merge, alter, or create derivative works of Chryptor except where expressly permitted by mandatory law or by a separate written license from Chryptor;
- reverse engineer, decompile, disassemble, extract source code, bypass technical protections, or attempt to derive Chryptor’s underlying source code, algorithms, keys, security mechanisms, or protocols, except to the extent such restriction is prohibited by mandatory law; this does not restrict the security research and verification described in the summary above;
- remove, obscure, or alter copyright notices, trademark notices, license notices, proprietary notices, payment notices, security notices, or attribution notices;
- use Chryptor to develop or provide a competing product based on copying Chryptor’s protected expression and intellectual property, such as but not limited to user interface, design, documentation, branding, trade secrets, or proprietary implementation;
- use Chryptor in a way that interferes with, damages, disables, burdens, or impairs Chryptor, app stores, devices, networks, users, third-party platforms, or security systems;
- use Chryptor to transmit malware, spyware, harmful code, or malicious files;
- use Chryptor to violate applicable law, third-party rights, privacy rights, intellectual property rights, contractual obligations, export controls, sanctions, or court orders;
Making source code available for review does not transfer ownership of Chryptor, waive Chryptor’s intellectual property rights, or grant unrestricted commercial use rights.
Genuine copies of Chryptor come only from distribution channels listed on our website. A build from anywhere else is not licensed under this Agreement and we cannot say what it contains.
4.1 Prohibited uses
You must use Chryptor only for lawful, authorized, and acceptable purposes. Chryptor is not built to control machinery, vehicles, medical devices, industrial systems or anything else where a software fault could injure someone. Do not use it for that.
You must not use Chryptor to:
- violate applicable law;
- violate third-party rights;
- commit fraud;
- distribute malware;
- attack, disrupt, or compromise systems;
- harass, threaten, or harm others;
- infringe intellectual property rights;
- breach confidentiality obligations;
- breach export-control or sanctions laws;
- misrepresent Chryptor’s origin, functionality, approval, certification, or affiliation.
People whose safety depends on privacy should read sections 2 and 6 of this Agreement before they rely on it, so they can judge their own situation.
Because Chryptor does not create accounts, Chryptor is not able to suspend individual apps. However, Chryptor may take other lawful measures where permitted, including refusing correspondence, enforcing intellectual property rights, removing listings, changing distribution, or blocking abusive interactions with Chryptor-controlled websites, channels, or infrastructure.
4.2 Export controls and sanctions
You must comply with all applicable export-control, import-control, trade-sanctions, encryption-control, and technology-transfer laws.
You must not download, export, re-export, transfer, provide, or use Chryptor in violation of applicable sanctions, embargoes, restricted-party rules, export-control laws, or encryption regulations.
You represent that you are not prohibited from receiving or using Chryptor under applicable law.
You are responsible for determining whether your use, import, export, transfer, or disclosure of Chryptor or encrypted material is lawful in your jurisdiction.
5. Offline architecture, credentials and recovery
XBV does not possess, store or control the user’s:
- encryption keys;
- passphrases;
- plaintext;
- encrypted text;
- encrypted files;
- vault contents;
- original files;
- backup files; or
- recovery materials.
XBV provides no key escrow, key custody, credential reset, remote access, remote recovery or managed backup.
If a required passphrase, key, encrypted file, encrypted text block, backup or other necessary item is lost, deleted, corrupted or unavailable, XBV cannot restore access.
The user is solely responsible for:
- retaining all required credentials;
- protecting credentials from loss and disclosure;
- retaining complete encrypted content;
- retaining appropriate independent backups; and
- ensuring that recovery materials remain accessible and usable.
The inability of XBV to recover credentials or data is a deliberate characteristic of Chryptor’s offline and zero-custody architecture.
5.1 Original files and verification before deletion
Chryptor creates a separate encrypted copy of a selected file.
Chryptor does not automatically:
- delete the original;
- move the original;
- replace the original;
- overwrite the original; or
- modify the original.
The original remains under the user’s control.
XBV recommends retaining the original file or another independently stored and verified copy.
Before deleting, moving, replacing or otherwise disposing of an original file, the user must use Chryptor to decrypt the encrypted copy and confirm that:
- the encrypted copy is complete and accessible;
- the encrypted copy can be successfully decrypted;
- the decrypted output is the expected file or content;
- the required credentials are available; and
- any backup appropriate to the importance and value of the data has been created and verified.
XBV does not observe, initiate, control or record the user’s later deletion of the original and cannot independently verify whether the user followed the required procedure.
5.2 Integrity of encrypted text and files
Encrypted content must be retained completely and without modification.
Encrypted text may become entirely undecryptable if any character or part of the encrypted text is:
- removed;
- inserted;
- replaced;
- rearranged;
- truncated;
- reformatted;
- corrupted; or
- copied incompletely.
Encrypted files may become entirely or partially undecryptable if any byte, block, segment or other part of the file is:
- removed;
- inserted;
- replaced;
- reordered;
- truncated;
- modified;
- corrupted;
- transferred incompletely; or
- damaged by the underlying storage medium.
The user is responsible for preserving encrypted content in its complete and unmodified form.
XBV is not responsible for encrypted content that has been manually edited, partly copied, reformatted, truncated, combined with other content or processed by a third-party system in a way that modifies it.
6. Technical requirements and operating environment
Chryptor’s documented functionality requires:
- a supported Android version;
- compatible and appropriately functioning hardware;
- correct installation and configuration;
- sufficient available storage, memory and processing capacity;
- supported and complete input;
- correct and available credentials;
- an operating system capable of providing the required Android functions; and
- use in accordance with the documentation and warnings.
The user is responsible for confirming that the intended device and operating environment satisfy the documented requirements.
Operation may be affected by:
- device defects;
- storage failure;
- insufficient memory or storage;
- manufacturer modifications;
- rooted or modified operating systems;
- custom Android distributions;
- malware or spyware;
- accessibility services;
- keyloggers;
- operating-system updates;
- third-party applications;
- file and document providers;
- messaging platforms; and
- incomplete file or text transfers.
XBV is not responsible for a failure caused by a component or circumstance outside XBV’s control and not attributable to a defect in Chryptor. Report a suspected defect to contact@chryptor.com as soon as reasonably possible, with the information listed in section 7.1.
6.1 Devices, malware and third-party systems
XBV does not manufacture or control:
- the Android operating system;
- the user’s device;
- device firmware;
- manufacturer software;
- Google Play;
- messaging platforms;
- communications networks;
- storage providers;
- recipients’ devices;
- recipients’ applications; or
- other third-party systems.
Changes or failures in third-party systems may affect Chryptor’s operation or the availability of encrypted content.
Encryption cannot protect information on a device already controlled or affected by:
- malware;
- spyware;
- keyloggers;
- malicious accessibility services;
- root access;
- a compromised operating system;
- unauthorized physical access; or
- other software capable of reading content before encryption or after decryption.
After a recipient decrypts content, Chryptor cannot prevent the recipient from:
- copying it;
- taking a screenshot;
- forwarding it;
- storing it;
- modifying it; or
- disclosing it.
Chryptor encrypts content. It does not conceal communication metadata generated by messaging platforms, networks, operating systems or recipients.
XBV is not responsible for loss caused by these external systems or circumstances where the loss is not attributable to a defect in Chryptor.
6.2 Third-party applications and distribution channels
Chryptor may allow you to export, copy, send, receive, store, back up, or share encrypted output using third-party apps, platforms, device features, or distribution channels.
These may include:
- Google Play;
- Apple App Store;
- operating systems;
- cloud storage providers;
- messaging apps;
- email providers;
- file-transfer tools;
- QR-code scanners outside Chryptor;
- payment providers;
- device backup tools;
- mobile carriers;
- internet providers.
These third-party apps, platforms, providers, and distribution channels are independent from Chryptor.
Chryptor does not control and is not responsible for third-party apps, platforms, or providers, including their availability, security, privacy, pricing, compatibility, terms, data handling, metadata handling, backups, delivery, deletion, suspension, or legal compliance.
Your use of third-party apps, platforms, providers, or distribution channels is governed by their own terms and policies.
6.3 Security limitations
Chryptor is intended to enable local encryption of supported content, but no software, device, encryption implementation, algorithm, protocol, security architecture, or operational practice can be guaranteed to be perfectly secure.
Security risks may arise from:
- weak passwords;
- lost keys;
- lost passphrases;
- device compromise;
- device loss;
- unauthorized physical access;
- malware;
- operating-system vulnerabilities;
- incorrect use;
- social engineering;
- recipient behavior;
- file corruption;
- implementation defects;
- future cryptographic developments;
- hardware compromise;
- legal compulsion;
- user error.
You are responsible for assessing whether Chryptor is suitable for your use case.
Chryptor is not a substitute for professional security advice, legal advice, compliance advice, incident-response support, backup strategy, endpoint protection, or key-management systems.
7. Later inability to decrypt and investigation
A later inability to decrypt content does not by itself establish that:
- Chryptor malfunctioned;
- Chryptor originally created the content in its current condition;
- encryption failed;
- the encrypted content remained complete and unchanged;
- the correct credentials are being used; or
- a defect in Chryptor caused the failure.
A decryption or authentication failure establishes only that the encrypted content, credentials and operating environment presented to Chryptor at that time were not accepted.
A later inability to decrypt may result from:
- incorrect credentials;
- unavailable credentials;
- altered encrypted content;
- deleted or missing content;
- incomplete copying;
- incomplete transfer;
- storage corruption;
- storage-media deterioration;
- device failure;
- insufficient device resources;
- malware;
- operating-system behavior;
- third-party software;
- unsupported content;
- unsupported formats;
- incompatible versions; or
- another circumstance outside XBV’s control.
Because Chryptor operates locally and XBV has no account, server, telemetry, remote access, file custody or key custody, XBV cannot ordinarily determine:
- whether content presented later is identical to the content originally produced by Chryptor;
- whether the content was altered;
- when any alteration occurred;
- who or what caused the alteration;
- whether a transfer was complete;
- whether the storage medium corrupted the content; or
- whether the correct credentials are being used.
XBV is not responsible for an inability to decrypt caused by alteration, deletion, truncation, incomplete transfer, corruption, unavailable credentials, device or storage failure, malware, third-party software or another circumstance not directly attributable to a defect in Chryptor.
Nothing in this Section excludes or reverses any mandatory statutory presumption or burden-of-proof rule. Subject to such mandatory rules, a later inability to decrypt does not, without further evidence, establish that Chryptor malfunctioned or caused the inability to decrypt.
7.1 Investigation of an alleged malfunction
A user alleging that Chryptor failed to perform its documented functionality should provide the information reasonably available to the user and reasonably necessary to describe and investigate the alleged malfunction.
Depending on the alleged malfunction, this may include:
- the applicable Chryptor version;
- the device model;
- the Android version;
- the encryption mode used;
- the steps taken by the user;
- the displayed error message;
- relevant screenshots;
- a voluntarily exported local diagnostic log;
- the affected encrypted content, where the user elects to provide it;
- a non-sensitive reproducible test case;
- information about storage, copying or transfer; and
- information concerning modification of the device or operating system.
The user must never provide XBV with a secret passphrase, encryption key, cryptocurrency private key, wallet recovery phrase or other secret credential.
Providing encrypted content, logs, screenshots or other material does not establish that the supplied material is authentic, complete, unchanged or identical to content originally produced by Chryptor encryption.
XBV may be unable to determine the cause of a claimed malfunction where the relevant operation occurred entirely on a device outside XBV’s possession and control.
7.2 Optional local diagnostic logging
Chryptor may provide optional local diagnostic logging.
Unless otherwise expressly stated in the application:
- logging is disabled unless enabled by the user;
- logs remain locally controlled by the user;
- logs are not transmitted to XBV unless the user does so;
- the user must voluntarily export and provide a log if the user wishes XBV to review it;
- logs may be incomplete;
- logs may not identify the cause of a malfunction; and
- the existence or absence of a log does not by itself establish whether Chryptor malfunctioned.
Diagnostic logs are a troubleshooting aid and not a guaranteed record of every operation or event.
XBV does not guarantee that a diagnostic log will allow an alleged failure to be reproduced or its cause to be determined.
8. Backups, vault exports and high-value information
Encryption protects content against unauthorized interpretation when appropriately implemented and used. Encryption does not protect content against:
- deletion;
- loss of credentials;
- corruption;
- incomplete transfer;
- physical damage;
- device failure;
- storage-media failure;
- deterioration of storage media; or
- loss of the encrypted content itself.
The user is responsible for retaining the original or maintaining current, independent and verified backup copies appropriate to the importance and value of the data.
XBV is not liable for data loss, loss of access or restoration expense to the extent that the loss could have been prevented or reduced by:
- retaining the original file;
- successfully decrypting and verifying the encrypted copy before deleting the original;
- retaining the required keys, passphrases or credentials;
- retaining another complete encrypted copy;
- creating separate encrypted exports;
- maintaining multiple independent backups;
- periodically verifying that backups remain accessible and restorable;
- replacing deteriorating or unreliable storage media.
- Users must not rely on one encrypted copy or one vault backup as the sole copy of important information.
8.1 Vault backups and separate encrypted exports
A Chryptor vault backup is a backup container.
A vault backup may be affected by:
- storage corruption;
- localized damage;
- incomplete creation;
- incomplete copying;
- incomplete transfer;
- missing segments; or
- failure of the underlying storage medium.
Depending on the structure of the applicable backup version and the location and extent of damage, corruption may make some or all content within the backup unavailable.
Chryptor may incorporate measures intended to reduce the effect of localized corruption. Such measures do not guarantee complete recovery from a damaged, incomplete or corrupted backup.
For important files, users should additionally export files as separate encrypted files and retain independently stored and verified copies rather than relying exclusively on one large vault backup.
XBV does not guarantee indefinite retention or readability by any:
- phone;
- solid-state storage device;
- flash drive;
- hard drive;
- optical medium;
- external storage device;
- third-party application; or
- storage provider.
8.2 Recommended backup practice
Chryptor is not a backup service. Any backup is created, selected, stored and controlled by the user.
For important information, XBV recommends the 3-2-1 approach:
- maintain three copies in total;
- store the copies across at least two different storage media; and
- keep at least one copy in a separate physical location.
Users should test backups periodically. A backup that exists but cannot be restored does not provide effective recovery.
Before using Chryptor for important files or messages, test the full encryption and decryption process with content you can afford to lose.
For particularly important files, users should:
- retain the original where appropriate;
- create separate encrypted exports;
- maintain more than one independent copy;
- store copies on separate media;
- keep at least one copy in another location; and
- verify periodically that the files can still be accessed and decrypted.
Multiple independent copies and periodic integrity checking reduce the risk that corruption of one copy results in permanent loss. Detection of corruption alone does not repair data unless another valid copy exists.
The 3-2-1 model means three total copies across two media types, with one copy kept separately.
8.3 High-value and critical information
Chryptor is a general-purpose encryption application.
Chryptor is not supplied as:
- a cryptocurrency wallet;
- a cryptocurrency custodian;
- a financial custodian;
- a dedicated key-management system;
- a sole-storage solution for private keys;
- a sole-storage solution for wallet recovery phrases;
- a sole-storage solution for authentication credentials;
- a disaster-recovery system; or
- an insurance product.
The license fee reflects the supply of Chryptor’s documented software functionality. It does not constitute an insurance premium or XBV’s acceptance of the financial, personal, commercial or other value assigned by the user to encrypted content.
Users must not rely on one Chryptor-encrypted copy or one vault backup as the sole recovery method for:
- cryptocurrency private keys;
- wallet recovery phrases;
- credentials controlling financial assets;
- signing keys;
- authentication secrets;
- irreplaceable business information;
- legally required records; or
- other information whose loss could cause exceptional financial, personal or operational harm.
Users are responsible for maintaining appropriate independent recovery information and verified backups proportionate to the importance and value of the data.
If XBV is liable for lost or damaged data, XBV pays only what it would have cost to restore that data from an up-to-date backup kept in proportion to the data’s importance, not the value of the data itself. This applies whether or not you actually kept such a backup, and reflects the statutory rules on contributory fault (§ 254 BGB). Section 15.1 is not affected.
9. User responsibilities
Your responsibilities for credentials, original files, backups and the integrity of encrypted content are set out in sections 5 and 8.
A user’s decision to assign exceptional financial, personal or commercial value to content does not expand Chryptor’s documented functionality or XBV’s assumed obligations.
You are also responsible for verifying QR-code handshakes, choosing appropriate recipients, checking encrypted output before sharing, ensuring recipients possess the required tools and credentials, deciding which third-party apps and platforms to use, and complying with laws applicable to encryption, import, export, data protection, confidentiality, regulated information and communications in the user’s jurisdiction.
10. Updates, compatibility and product changes
XBV may provide updates to Chryptor, including corrections, compatibility changes, improvements and legally required updates. We will provide security and compatibility updates for Chryptor for as long as we offer Chryptor for new installations. We will make updates available through the channel you installed from. If we stop offering Chryptor, we will, as far as we lawfully can, keep the last release downloadable, publish what is needed to keep reading content you already encrypted, and leave every license already issued in force. We will not charge again for a license you already hold.
XBV does not guarantee compatibility with:
- every previous pre-release or development format;
- manually modified Chryptor content;
- incomplete or corrupted content;
- unsupported versions;
- unauthorized forks or modified applications;
- future Android versions not yet available at the time of purchase; or
- third-party implementations that claim compatibility with Chryptor.
Where XBV identifies that migration is required between supported formats, the user is responsible for completing the documented migration process and verifying the migrated content before deleting an earlier valid copy.
XBV remains responsible for an update defect to the extent legally attributable to XBV and subject to the applicable liability provisions in these terms.
Users are responsible for installing updates made available through the applicable authorized distribution channel within a reasonable period. Where an update notice identifies consequences that may result from failure to install the update, XBV is not responsible for a defect or loss caused solely by the user’s failure to install it, to the extent permitted by applicable law.
XBV may modify Chryptor where reasonably required for security, legal, technical, compatibility, operational or marketplace reasons, and may add, improve, replace or remove non-material functionality. XBV may also change functionality in future versions. XBV will not intentionally remove material paid functionality from a lawfully licensed installed version merely to avoid providing that functionality, except where removal is reasonably necessary for legal, security, technical or third-party platform reasons. Nothing in this Agreement limits any obligation to provide updates required by mandatory law.
10.1 Beta, experimental and preview features
Chryptor may offer beta, experimental, preview, test, early-access, or deprecated features.
Such features may be incomplete, unstable, unavailable, incompatible, changed, or removed at any time.
You should not rely on beta, experimental, preview, test, or deprecated features for critical use.
10.2 Discontinuation and continued local use
Chryptor may discontinue the App, any feature, any platform version, any distribution channel, or any support for a device or operating-system version.
Where reasonably possible, Chryptor may provide notice.
No notice is required where discontinuation, suspension, or modification is required for urgent security, legal, technical, app-store, or operational reasons.
Because Chryptor is offline and zero-custody, discontinuation does not mean Chryptor can recover or migrate your keys, passwords, encrypted files, or local content.
If Chryptor is discontinued or removed from an app store, a lawfully acquired license does not expire for that reason. A copy of the last version of Chryptor that was already downloaded, installed and validly licensed may continue to operate locally for as long as the device, operating system, hardware and other technical environment remain compatible with that version and the required credentials and encrypted content remain available and usable.
Discontinuation does not guarantee that Chryptor can later be re-downloaded, reinstalled, reactivated, transferred to another device, updated or supported, or that it will remain compatible with future devices, operating systems, marketplace systems or hardware.
11. Support
Chryptor is provided as a self-service offline software tool.
Chryptor does not provide managed support, guaranteed support, emergency support, professional support, forensic support, device repair, recipient troubleshooting, content recovery, key recovery, password recovery or passphrase recovery.
Chryptor may provide documentation, FAQs, general guidance, product information, or software updates from time to time, subject to availability.
Any support or guidance, if provided, is provided on a reasonable-efforts basis.
Chryptor cannot provide support that requires access to your keys, passwords, passphrases, encrypted content, decrypted content, device logs, QR-code secrets, account history, or usage history, because Chryptor does not have such access.
You should not send Chryptor private keys, passwords, passphrases, recovery material, decrypted sensitive content, or confidential files.
12. Purchase, marketplace transactions and refunds
Chryptor is offered as a one-time purchase of an offline software tool.
After Chryptor has been downloaded, installed, activated, or otherwise made available for offline use, the App may continue to function locally without a Chryptor account, an XBV-operated server or an ongoing subscription.
Because Chryptor is offline and does not require a Chryptor account or hosted service, Chryptor may not be able to remotely disable, revoke, deactivate, suspend, or remove a downloaded copy of the App.
13. Privacy
Chryptor’s privacy practices are described in the Chryptor Privacy Policy.
The Chryptor Privacy Policy is available on the official Chryptor website chryptor.com.
14. Current condition and absence of voluntary guarantees
To the fullest extent permitted by applicable law, Chryptor is provided without voluntary warranties or guarantees beyond the documented functionality expressly described in these terms.
XBV does not provide any voluntary warranty or guarantee that Chryptor will:
- operate without interruption;
- be entirely free from errors or defects;
- be compatible with every device, Android version, manufacturer modification or operating environment;
- remain compatible with every future operating-system version;
- meet every individual requirement or expectation;
- protect a compromised or infected device;
- prevent all unauthorized access;
- provide anonymity;
- conceal communication metadata;
- prevent observation, copying, screenshots or forwarding;
- recover lost credentials or inaccessible content;
- provide indefinite archival preservation;
- remain available through Google Play or another marketplace indefinitely; or
- produce any particular privacy, security, personal-safety, financial or commercial outcome.
Descriptions of Chryptor’s functionality do not constitute an express guarantee unless XBV specifically and expressly identifies a statement in writing as a guarantee.
Nothing in this Section excludes, restricts or replaces any mandatory statutory right concerning the supply, conformity, updating or remediation of a digital product.
15. Liability and allocation of risk
15.1 Non-limitable liability
Nothing in these terms excludes or limits liability to the extent that exclusion or limitation is prohibited by the law applicable to the relevant claim.
In particular, the following remain unaffected where legally required:
- liability for intent;
- liability for gross negligence;
- liability for injury to life, body or health;
- liability for fraudulent concealment;
- liability arising from an expressly assumed guarantee;
- mandatory product liability; and
- any other liability that applicable law does not permit to be excluded or limited.
15.2 Slight negligence involving an essential contractual obligation
Subject always to Section 15.1 and to the extent permitted by applicable law, where XBV is liable for slight negligence involving an essential contractual obligation, XBV’s aggregate liability arising from or relating to the affected paid Chryptor functionality is limited to the lower of:
- five times the price you paid for Chryptor Pro, including tax, as shown on your purchase receipt; and
- the damage foreseeable and typical for the relevant contract.
For functionality you use without paying, liability is limited to the damage typically expected for an agreement of this kind.
An essential contractual obligation is an obligation whose performance is necessary for the proper performance of the relevant contract and on whose performance the user may ordinarily rely.
15.3 Other slight negligence
In all other cases of slight negligence, XBV’s liability is excluded to the fullest extent permitted by applicable law.
15.4 User-controlled and external causes
XBV is responsible only for loss directly caused by a defect or breach legally attributable to XBV.
XBV is not responsible for loss caused by:
- incorrect use;
- use contrary to instructions;
- unsupported input;
- unsupported devices or operating systems;
- unavailable or incorrect credentials;
- failure to retain originals;
- failure to test decryption before deleting originals;
- failure to maintain appropriate backups;
- user deletion;
- modification or corruption of encrypted content;
- incomplete copying or transfer;
- storage failure;
- device failure;
- malware;
- spyware;
- rooted or modified devices;
- operating-system behavior;
- manufacturer software;
- recipients;
- app stores;
- messaging platforms;
- storage providers; or
- other circumstances outside XBV’s control.
15.5 Avoidable loss
XBV is not liable for loss or restoration expense to the extent that the loss could have been prevented or reduced through reasonable compliance with the original-retention, verification, credential-protection, separate-export and backup responsibilities stated in these terms. This reflects the statutory rules on contributory fault (§ 254 BGB).
15.6 Aggregate application
The applicable liability cap is aggregate and applies to all claims arising from the same or substantially related facts, events, defects or functionality.
The cap is not multiplied by:
- the number of affected files;
- the number of encrypted text blocks;
- the number of alleged errors;
- the number of legal theories asserted;
- the number of devices used by the same user; or
- the number of persons acting through the same purchase or license.
15.7 Protected persons
All exclusions, limitations, defenses and allocations of responsibility in these terms apply equally for the benefit of:
- XBV’s affiliated companies;
- managing directors;
- shareholders;
- employees;
- contractors;
- developers;
- representatives;
- agents;
- licensors; and
- suppliers.
16. Third-party claims and user indemnity
If you use Chryptor for business, organizational or professional purposes, you indemnify XBV and its affiliated companies, managing directors, employees, contractors and agents against third-party claims, liabilities, losses and reasonable costs arising directly from:
- your unlawful use or misuse of Chryptor, including use in regulated or high-risk commercial contexts;
- content you selected, encrypted, stored or distributed;
- your infringement of a third party’s rights;
- unauthorized modification, redistribution or commercial exploitation of Chryptor;
- your representation that XBV provides a service or guarantee that XBV does not provide; or
- a material violation of these terms by you.
This does not apply to the extent a claim was caused by conduct legally attributable to XBV, or where applicable law does not permit it. Consumers are liable only under the applicable statutory rules.
17. Term and termination
This Agreement remains in effect until terminated.
You may terminate this Agreement at any time by uninstalling Chryptor and discontinuing use.
Upon termination, you must stop using Chryptor and uninstall or delete copies in your possession or control, except where retention is permitted by mandatory law or applicable app-store rules.
Termination does not affect provisions that by their nature should survive, including provisions on intellectual property, license restrictions, no recovery, refunds, disclaimers, limitation of liability, indemnity, export controls, governing law, dispute resolution, and general provisions.
Because Chryptor does not create accounts, there is no Chryptor account to delete, suspend, or terminate.
If a license key is published, sold, or otherwise made available for unauthorised activation, or was obtained fraudulently, future versions of Chryptor will stop accepting that key, so it will no longer unlock Chryptor Pro in those versions.
18. Changes to this Agreement
Chryptor may update this Agreement from time to time.
Changes may be made to reflect:
- product changes;
- legal requirements;
- security requirements;
- app-store requirements;
- business changes;
- technical changes;
- new features;
- changed distribution models;
- changed licensing models.
Where required, Chryptor may provide notice through app-store listing, release notes, documentation, or the official Chryptor website chryptor.com. The terms that apply to you are the ones shipped with the version of Chryptor you are using. You can read them on our website. If you do not want the new terms, keep the version you have: it goes on working, and we cannot switch it off.
19. Governing law and jurisdiction
This Agreement is governed by the laws of the Federal Republic of Germany, excluding its conflict-of-law rules and the United Nations Convention on Contracts for the International Sale of Goods.
If the user is a merchant, a legal entity under public law, a special fund under public law, or is acting predominantly in the course of a trade, business or profession, the courts of Munich, Germany shall have exclusive jurisdiction over any dispute arising out of or relating to Chryptor, the licence or this Agreement, to the extent legally permissible.
For consumers, the courts of Munich, Germany shall have jurisdiction where such jurisdiction may validly be agreed. Nothing in this Agreement deprives a consumer of the right to bring or defend proceedings in another court available under mandatory applicable law.
The choice of German law does not deprive a consumer of mandatory protections under the law of the consumer’s country of habitual residence where those protections apply and cannot lawfully be excluded by agreement.
XBV may seek temporary, preliminary or permanent injunctive relief in any court of competent jurisdiction concerning licence piracy, unauthorised distribution, circumvention of licensing controls, infringement or misappropriation of intellectual property, or misuse of XBV’s trademarks and branding.
20. Assignment
You may not assign or transfer this Agreement or your rights under it without Chryptor’s prior written consent, except where mandatory law provides otherwise.
Chryptor may assign or transfer this Agreement in connection with a merger, acquisition, restructuring, financing, insolvency, sale of assets, corporate reorganization, or transfer of the Chryptor business. If we transfer this Agreement, we will tell you via the website or distribution channels, and you may end it by uninstalling Chryptor.
Because Chryptor does not hold user accounts, keys, passwords, or user content, such data cannot be transferred by Chryptor as part of an assignment.
21. Severability
If any provision is invalid or unenforceable, the remaining provisions remain effective. The invalid or unenforceable provision shall be replaced by the applicable statutory rule.
22. No waiver
If Chryptor does not enforce a provision of this Agreement, that does not mean Chryptor waives the right to enforce it later.
Any waiver must be in writing and signed by Chryptor.
Schedule 1: Provider contact details
XBV UG (haftungsbeschränkt)
Reisinger Str. 65
85737 Ismaning, Germany
Register Court: Amtsgericht München
Registration Number: HRB 299944
Email: contact@chryptor.com
Website: chryptor.com
Schedule 2: United States Addendum
1. Application
This United States Addendum applies only if you live in the United States of America.
This Addendum supplements the Chryptor End User License Agreement and Terms of Use. If this Addendum conflicts with the main Agreement concerning a matter specifically addressed in this Addendum, this Addendum controls for users to whom it applies.
Except as expressly modified by this Addendum, the main Agreement remains in effect.
Nothing in this Addendum excludes, restricts or waives a right or remedy that cannot lawfully be excluded, restricted or waived under applicable federal or state law.
2. Provider
Chryptor is provided and licensed by:
XBV UG (haftungsbeschränkt)
Reisinger Str. 65
85737 Ismaning
Germany
Commercial Register: Amtsgericht München, HRB 299944
XBV is a company organised under the laws of the Federal Republic of Germany. Chryptor is not operated by a United States subsidiary, branch, office or establishment unless XBV expressly states otherwise in writing.
3. Software licence, not insurance or custody
Chryptor is licensed as a general-purpose offline encryption application. The licence fee is consideration for the documented software functionality and is not:
- an insurance premium;
- a valuation of the user’s data;
- acceptance by XBV of the asserted financial or personal value of the user’s content;
- a custodial fee;
- a data-storage fee;
- a recovery-service fee;
- a backup-service fee; or
- consideration for XBV assuming responsibility for devices, credentials, storage media, recipients or third-party systems outside XBV’s control.
XBV does not accept custody of the user’s files, encrypted content, plaintext, keys, passwords, passphrases, recovery materials, vault contents or backups.
4. Disclaimer of warranties
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CHRYPTOR IS PROVIDED “AS IS,” “AS AVAILABLE” AND “WITH ALL FAULTS.”
XBV DISCLAIMS ALL VOLUNTARY, EXPRESS, IMPLIED AND STATUTORY WARRANTIES, REPRESENTATIONS, CONDITIONS AND GUARANTEES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, QUIET ENJOYMENT, ACCURACY, AVAILABILITY, COMPATIBILITY, SECURITY, RECOVERABILITY AND UNINTERRUPTED OR ERROR-FREE OPERATION.
Without limiting the preceding paragraph, XBV does not warrant or guarantee that Chryptor will:
- satisfy every individual requirement;
- operate without interruption or error;
- remain compatible with every current or future device, operating system, manufacturer modification or third-party application;
- prevent every unauthorised access;
- protect a compromised, infected, rooted or physically accessed device;
- provide anonymity;
- conceal metadata created by third-party systems;
- recover content or credentials;
- remain available through a particular marketplace;
- be immune from every implementation defect, cryptographic development or external attack; or
- produce any particular privacy, security, financial, legal, commercial or personal outcome.
Some jurisdictions do not permit the exclusion of certain implied warranties. In such jurisdictions, the relevant exclusions apply only to the maximum extent permitted by law.
5. Limitation of liability
Nothing in this Addendum excludes or limits liability where exclusion or limitation is prohibited by applicable law.
Subject to the preceding sentence, and to the maximum extent permitted by applicable law:
- XBV is responsible only for loss directly caused by a defect, breach or conduct legally attributable to XBV.
- XBV is not responsible for loss caused by:
- incorrect or unavailable credentials;
- loss of keys, passwords or passphrases;
- user deletion;
- failure to retain an original;
- failure to verify decryption before disposing of an original;
- incomplete, modified, truncated or corrupted encrypted content;
- incomplete copying or transfer;
- device, hardware or storage failure;
- malware, spyware, keyloggers or malicious accessibility services;
- rooted, modified, unsupported or compromised devices;
- operating-system or manufacturer behaviour;
- failure to install an update;
- third-party applications, marketplaces, storage providers, communications services or recipients; or
- another circumstance outside XBV’s reasonable control.
- XBV will not be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for loss of profits, revenue, business, opportunity, goodwill, anticipated savings, data, access to data, cryptocurrency, credentials or digital assets.
- XBV will not be liable for costs of substitute software, forensic analysis, investigation, restoration, reconstruction, recovery or remediation, except where such liability cannot lawfully be excluded.
- To the maximum extent permitted by applicable law, XBV’s aggregate liability arising from the same or substantially related facts, events, functionality or alleged defects will not exceed the lower of:
- five times the price you paid for Chryptor Pro, including tax, as shown on your purchase receipt; and
- the damage foreseeable and typical for the relevant contract.
- For functionality you use without paying, liability is limited to the damage typically expected for an agreement of this kind.
- The applicable cap is not multiplied by the number of:
- files;
- text blocks;
- vault items;
- devices used by the same user;
- alleged errors;
- legal theories;
- copies of the same content; or
- persons using the same purchase or licence.
Some states do not permit certain exclusions or limitations of incidental or consequential damages. In those states, the relevant exclusion or limitation applies only to the maximum extent permitted by applicable law.
6. No exceptional-value assumption
The user is responsible for maintaining independent and verified recovery measures proportionate to the importance and asserted value of the user’s content.
A user’s decision to process, encrypt or store exceptionally valuable information using Chryptor does not increase XBV’s documented obligations, the scope of the licence or the liability assumed by XBV.
Users must not rely on one Chryptor-encrypted copy, one device, one vault or one vault backup as the sole recovery method for:
- cryptocurrency private keys;
- wallet recovery phrases;
- credentials controlling financial assets;
- signing keys;
- authentication secrets;
- irreplaceable business information;
- legally required records; or
- information whose loss could cause exceptional financial, personal or operational harm.
7. Marketplace purchases and refunds
Where Chryptor is acquired through Google Play or another authorised marketplace, payment processing, cancellations, transaction reversals, chargebacks and marketplace refund requests are subject to the applicable marketplace’s procedures and terms.
XBV does not independently control the marketplace’s payment systems, purchase history, user account, refund decisions or restoration mechanisms.
Nothing in this Section excludes a refund, remedy or other right that cannot lawfully be excluded under applicable federal or state law.
8. Governing law and jurisdiction
The governing-law and jurisdiction provisions of the main Agreement apply to users in the United States to the maximum extent permitted by applicable law.
Nothing in this Addendum deprives a user of a mandatory federal or state consumer protection that cannot lawfully be excluded by agreement.
XBV does not consent to the jurisdiction of any court outside Germany except where such jurisdiction exists under mandatory applicable law or XBV expressly consents in writing in relation to a particular proceeding.
If the user is acting predominantly in the course of a trade, business or profession, the courts of Munich, Germany shall have exclusive jurisdiction over any dispute arising out of or relating to Chryptor, the licence, the main Agreement or this Addendum, to the extent legally permissible.
9. Individual proceedings and jury-trial waiver
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE USER AND XBV AGREE THAT EACH WILL BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF, CLAIMANT OR CLASS MEMBER IN A CLASS, COLLECTIVE, CONSOLIDATED, COORDINATED, MASS OR REPRESENTATIVE PROCEEDING.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE USER AND XBV EACH WAIVE ANY RIGHT TO A TRIAL BY JURY.
If either waiver is invalid or unenforceable in relation to a particular claim or jurisdiction, that waiver will be ineffective only to the minimum extent required by applicable law. The remaining provisions of this Addendum remain effective.
XBV may seek temporary, preliminary or permanent injunctive relief in any court of competent jurisdiction concerning:
- unauthorised publication or sharing of licence credentials;
- licence piracy;
- circumvention of licensing controls;
- unauthorised redistribution;
- infringement or misappropriation of intellectual property;
- misuse of XBV’s trademarks or branding; or
- unauthorised copying or commercial exploitation of Chryptor.
This Section does not permit XBV to access, decrypt, delete or recover user content.
10. Severability
If a provision of this Addendum is invalid or unenforceable, the remaining provisions remain effective. The invalid or unenforceable provision will be replaced by the applicable statutory rule. Where no statutory rule applies, the provision will be interpreted to the minimum extent necessary to make it enforceable while preserving its lawful commercial purpose.
11. Acceptance
This Addendum is part of the Agreement and is made available together with it.
