Last updated: 2026-09-14 · Version 1.1
These Terms of Use ("Terms") are a legal agreement between you and Luis Masmela Blanco ("we", "us", "the Developer") governing your use of the Secrets Daemon application for iPhone, iPad, Mac and Apple Watch, and of the separately distributed Secrets Daemon Companion for macOS (together, the "App"). By downloading, installing or using the App you agree to these Terms. If you do not agree, do not use the App.
These Terms replace Apple's standard end user license agreement for the App.
PLEASE READ SECTION 14 (BINDING ARBITRATION AND CLASS ACTION WAIVER) CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS. YOU MAY OPT OUT WITHIN 30 DAYS (Section 14.7).
1.1 The App is an on-device utility. It reads text you point it at (camera, photo, screenshot, pasted image, pasted or typed text), classifies strings that look like API keys, tokens or key files, and produces files (such as .env, .p8, PEM, JSON, plist or plain text) that you can save, share, copy or send to your own Mac or Apple Watch. It can optionally store such strings in your device's Keychain (the "Vault") when you turn that feature on.
1.2 The App contains no networking code. It does not transmit your keys, your images, or anything else to us or to anyone. It has no account system, no analytics and no advertising. See the Privacy Policy.
1.3 Recognition is not perfect, and validation is not verification. Optical character recognition can misread a character. The App marks characters it is unsure about and asks you to check them. Where a key type has a published shape, the App checks that shape (prefix, length, alphabet, checksum). That is a check of form, not of validity. The App cannot and does not tell you whether a key is genuine, current, unrevoked, correctly scoped, or the right key for what you are doing, because it never contacts the service the key belongs to. You are solely responsible for checking every key before you use it, and for the consequences of using a key that was misread, mis-named, expired, revoked, over-scoped, or exported to the wrong place.
1.4 The App is a tool for handling credentials that are yours or that you are authorised to handle. You must not use it to capture, store, export or share credentials you are not authorised to possess, to circumvent any access control, or to break any law or any agreement you have with the service the credential belongs to.
1.5 The App is not a password manager, a secret-management service, a backup service, or professional security advice. Nothing it shows you is advice.
2.1 Subject to these Terms, we grant you a personal, limited, non-exclusive, non-transferable, revocable license to install and use the App on Apple-branded devices that you own or control, as permitted by the Usage Rules in the Apple Media Services Terms and Conditions (the "Usage Rules"), including Family Sharing where we have enabled it.
2.2 You may not: copy the App (except as the Usage Rules allow); modify, reverse engineer, decompile or disassemble it, except to the extent applicable law expressly permits despite this restriction; rent, lease, lend, sell, redistribute or sublicense it; remove any proprietary notice; or use it in violation of law.
2.3 The App and all intellectual property in it are owned by us or our licensors and are licensed, not sold. Third-party open-source components, if any, are listed in the App under Settings › About › Acknowledgements and are governed by their own licenses.
3.1 Your first two keys are free, for life. You can scan, verify and hand off two keys with no purchase, so that a first real deployment works end to end. After that, the App is unlocked by a single one-time, non-consumable in-app purchase (product app.pocketparser.unlock, USD 9.99 or the equivalent in your local currency). There is no subscription, no recurring charge, no trial that converts, and no account.
3.2 The unlock is a universal purchase: one purchase covers the App on iPhone, iPad and Mac for the same Apple Account. Restore Purchases is available on the paywall and in Settings, and re-enables the unlock on any device signed into that Apple Account.
3.3 Purchases are processed by Apple through StoreKit. We receive no payment details and operate no purchase server. Prices are shown in the App Store and in the App at the time of purchase and may change for future purchasers. Refunds are handled by Apple under Apple's terms, not by us.
3.4 The unlock is a license to use features of the App. It is not a subscription, not a service, and not a guarantee that any particular feature will continue to exist in a future version.
4.1 You are responsible for your device, its passcode, your Face ID or Touch ID enrolment, and the security of anything you export, share, AirDrop, send to a Mac or Apple Watch, or copy to the clipboard. Anything you send out of the App is outside our control and cannot be recalled by us.
4.2 The Vault stores keys in your device's Keychain with device-only accessibility and no iCloud synchronisation. We cannot recover Vault contents. If you erase or lose the device, wipe the Vault, or the Keychain becomes inaccessible, those keys are gone. Keep your own backups of credentials in a system you control.
4.3 You must be at least 18 years old, or the age of majority where you live, and legally able to enter into these Terms. If you are under that age, you may use the App only with the consent and supervision of a parent or guardian who agrees to these Terms on your behalf and is responsible for your use of it.
4.4 You will comply with all applicable laws when you use the App, including the export-control and sanctions rules in Section 16.
4.5 You will not use the App in any setting where a failure of the App could lead to death, personal injury, or severe physical or environmental damage. The App is a developer convenience tool and is not designed, tested or licensed for such use.
5.1 The Secrets Daemon Companion for macOS (the command-line engine, its menu-bar panel, and the Mac app's use of them) lets software agents, for example AI coding assistants, use keys stored on your Mac without printing them, under a policy file that you control. You configure that policy and you are responsible for what any agent you run does with the keys you make available to it. We do not operate, control, review or monitor any agent, AI service, model provider or other third-party tool, and we are not responsible for what one does with a key you expose to it.
5.2 Where the App sends a sealed key file to a Mac you have paired, delivery depends on Apple's AirDrop and Files and on your own pairing choices. Once a file has left your device we cannot see it, recall it, or revoke it.
5.3 Where the App sends a key to a paired Apple Watch, that key is sent one at a time, over Apple's Watch Connectivity between your own paired devices, and is held in the Watch's Keychain until you delete it or it expires. The same responsibilities in Section 4 apply to it.
5.4 The Companion is distributed separately from the App Store. These Terms govern it; Section 12 (Apple-specific terms) applies only to the App Store versions of the App.
6.1 We may update, change, limit or discontinue the App or any feature at any time. We are not obliged to maintain backward compatibility with a file you exported from an earlier version.
6.2 We may change these Terms. The "Last updated" date will change, the current text is always available in the App under Settings › About › Terms of Use and on our website, and where a change is material we will give notice in the App at least 30 days before it takes effect, except where a change must take effect sooner to comply with law. Continued use after a change takes effect is acceptance of it. If you do not agree, stop using the App and delete it. Section 14.8 gives you a separate right to reject a change to the arbitration section.
If you send us suggestions, bug reports or ideas, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use them for any purpose, without obligation or compensation to you. Please do not send us confidential information, and never send us a real credential.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, NON-INFRINGEMENT AND QUIET ENJOYMENT. WE DO NOT WARRANT THAT RECOGNITION WILL BE ACCURATE, THAT ANY KEY THE APP PRODUCES WILL BE CORRECT, VALID OR FIT FOR YOUR PURPOSE, THAT THE APP WILL BE ERROR-FREE OR UNINTERRUPTED, OR THAT DATA WILL NOT BE LOST. NO ADVICE OR INFORMATION, ORAL OR WRITTEN, CREATES ANY WARRANTY.
9.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE AND OUR AFFILIATES, LICENSORS AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, BUSINESS, DATA, CREDENTIALS, GOODWILL OR SECURITY, OR FOR THE COST OF ROTATING, REISSUING OR REMEDIATING ANY CREDENTIAL, ARISING OUT OF OR RELATING TO THE APP, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY.
9.2 OUR TOTAL LIABILITY FOR ALL CLAIMS RELATING TO THE APP WILL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US FOR THE APP IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND (B) USD 20.
9.3 THESE LIMITS APPLY TO ANY THEORY OF LIABILITY, INCLUDING CONTRACT, TORT, NEGLIGENCE AND STRICT LIABILITY, AND ARE A FUNDAMENTAL BASIS OF THE BARGAIN BETWEEN US. THEY DO NOT APPLY TO LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED BY LAW, INCLUDING LIABILITY FOR FRAUD, OR FOR DEATH OR PERSONAL INJURY CAUSED BY NEGLIGENCE. SEE ALSO SECTION 15.
To the extent permitted by law, you will defend, indemnify and hold harmless us, our affiliates and our licensors from and against any claim, demand, loss, damage, fine, penalty, cost and expense (including reasonable legal fees) arising out of or relating to: your breach of these Terms; your misuse of the App; your use, storage, export or disclosure of any credential you handled with the App; your violation of any law or of any third party's rights; or the acts of any agent, service or person to whom you made a credential available.
11.1 These Terms take effect when you first use the App and continue until terminated.
11.2 They terminate automatically if you breach them. We may also suspend or terminate your license if we are required to by law or by Apple.
11.3 On termination you must stop using the App and delete it. Termination does not entitle you to a refund except where law requires one, and refunds are in any case Apple's to give (Section 3.3).
11.4 Sections 1.3, 1.4, 2.3, 4, 5, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17 and 18 survive termination.
12.1 Acknowledgement. These Terms are between you and us only, not Apple Inc. ("Apple"). We, not Apple, are solely responsible for the App and its content.
12.2 Scope of license. The license in Section 2 is limited to a non-transferable license to use the App on Apple-branded products that you own or control, as permitted by the Usage Rules.
12.3 Maintenance and support. We are solely responsible for providing any maintenance and support for the App as specified in these Terms or required by law. Apple has no obligation to furnish any maintenance or support services.
12.4 Warranty. We are solely responsible for any product warranties, express or implied by law, to the extent not effectively disclaimed. In the event of any failure of the App to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price for the App to you; to the maximum extent permitted by law, Apple has no other warranty obligation whatsoever with respect to the App, and any other claims, losses, liabilities, damages, costs or expenses attributable to any failure to conform to any warranty are our sole responsibility.
12.5 Product claims. We, not Apple, are responsible for addressing any claims by you or a third party relating to the App or your possession or use of it, including (i) product liability claims; (ii) any claim that the App fails to conform to any applicable legal or regulatory requirement; and (iii) claims arising under consumer protection, privacy or similar legislation.
12.6 Intellectual property. In the event of any third-party claim that the App or your possession and use of it infringes that third party's intellectual property rights, we, not Apple, are solely responsible for the investigation, defence, settlement and discharge of any such claim.
12.7 Legal compliance. You represent and warrant that (i) you are not located in a country subject to a U.S. Government embargo or designated by the U.S. Government as a "terrorist supporting" country; and (ii) you are not listed on any U.S. Government list of prohibited or restricted parties.
12.8 Developer contact. Luis Masmela Blanco. Our current contact address for support and for legal notices is published on the Support page of our website (see Section 19), which is the single place we keep it current.
12.9 Third-party terms. You must comply with applicable third-party terms when you use the App, including the terms of any service whose credentials you handle with it.
12.10 Third-party beneficiary. Apple and Apple's subsidiaries are third-party beneficiaries of these Terms and, upon your acceptance, Apple will have the right (and will be deemed to have accepted the right) to enforce these Terms against you as a third-party beneficiary.
13.1 Except as Sections 14 and 15 provide otherwise, these Terms and any dispute arising out of them are governed by the law of the jurisdiction in which the Developer is established, as stated on the Support page of our website (see Section 19), without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
13.2 Section 14 (arbitration) is governed by the U.S. Federal Arbitration Act for the users to whom it applies.
13.3 Nothing in this Section deprives you of the protection of the mandatory law of your own country of residence (Section 15).
This Section applies to you if you are a resident of the United States. If you are a consumer resident in the EU, EEA, UK, Switzerland or Australia, it does not apply to you (Section 15).
14.1 Informal resolution first. Before filing a claim, you and we agree to try to resolve any dispute informally. Send written notice to the other party (to us: the contact address on our Support page, subject "Dispute Notice") describing the dispute, the facts, and the relief sought, and then confer in good faith for at least 60 days. The notice must be signed by you personally, not only by counsel. This step is a condition precedent to arbitration, and the limitation period in Section 17 is paused while it runs.
14.2 Agreement to arbitrate. If the dispute is not resolved, any dispute, claim or controversy arising out of or relating to these Terms or the App (a "Dispute") will be resolved by binding individual arbitration administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules (the "Rules"), rather than in court, except as Section 14.4 states. The arbitrator, not a court, decides all threshold questions, including arbitrability, except that a court decides the enforceability of the class waiver in 14.5 and of the batching provision in 14.6.
14.3 Procedure. Arbitration is conducted by a single neutral arbitrator; by document submission, telephone or videoconference, or in the county where you live if an in-person hearing is held, unless the parties agree otherwise. Fees are allocated per the Rules, and if your claim is for less than USD 10,000 we will pay all AAA filing, administration and arbitrator fees unless the arbitrator finds the claim frivolous. The arbitrator may award any individual relief a court could award, must apply the limitations in Sections 8, 9 and 17, and must issue a reasoned written decision. Judgment on the award may be entered in any court of competent jurisdiction.
14.4 Exceptions. Either party may (a) bring an individual claim in small claims court if it qualifies; (b) seek injunctive or equitable relief in court to protect intellectual property or to stop unauthorised use or disclosure; and (c) bring a claim that applicable law does not allow to be arbitrated.
14.5 Class action and jury waiver. YOU AND WE AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, CONSOLIDATED, PRIVATE ATTORNEY GENERAL OR REPRESENTATIVE PROCEEDING, AND EACH WAIVES THE RIGHT TO A JURY TRIAL. The arbitrator may not consolidate more than one person's claims or preside over any form of representative proceeding. If this Section 14.5 is found unenforceable for a particular claim, that claim (and only that claim) will proceed in court, and the courts identified in Section 13 have exclusive jurisdiction over it; the rest of Section 14 remains in force for every other claim.
14.6 Mass arbitration. If 25 or more similar demands are filed by or with the assistance of the same counsel or coordinated entities, the demands will be administered in batches of up to 50, one arbitrator per batch, with the parties selecting 25 demands per side for the first batch and the remaining batches stayed until the first batch is decided. Fees are owed per batch, not per demand. The limitation period in Section 17 is paused for every stayed demand. A court may enforce this provision.
14.7 30-day opt-out. You may opt out of this Section 14 by sending us written notice within 30 days of first accepting these Terms, stating your name and that you opt out of arbitration. Send it to the contact address on our Support page with the subject "Arbitration Opt-Out"; the step-by-step instructions are on the arbitration opt-out page of our website (Section 19). Opting out costs nothing, affects no other part of these Terms, and will not be held against you.
14.8 Changes. If we change this Section after you accept these Terms, you may reject the change by sending us notice within 30 days of the change taking effect, in which case the version you accepted governs Disputes that arose before the change.
14.9 Survival. This Section survives termination of these Terms and of your license.
15.1 Nothing in these Terms limits any right you have as a consumer under the mandatory law of your country of residence that cannot be excluded by contract, including under EU Directives 2019/770 and 2011/83, the UK Consumer Rights Act 2015 and the Australian Consumer Law. Sections 8, 9 and 17 apply only to the extent those laws allow.
15.2 If you are a consumer resident in the EU, EEA, UK or Switzerland, Section 14 does not apply to you. You may bring proceedings in the courts of your country of residence, and the mandatory consumer law of that country applies to you regardless of Section 13. Statutory rights of withdrawal for digital content are handled by Apple under Apple's terms, because Apple is the seller of record.
15.3 For Australian consumers: our goods and services come with guarantees that cannot be excluded under the Australian Consumer Law. You are entitled to a replacement or refund for a major failure and to compensation for any other reasonably foreseeable loss or damage. To the extent permitted by law, our liability for a failure to comply with a consumer guarantee is limited to re-supplying the App or paying the cost of having it re-supplied.
16.1 The App uses encryption. The only cryptography in it is provided by Apple's operating system and consists of standard, published algorithms called through Apple's own published interfaces (Keychain and Data Protection for storage, and CryptoKit's HPKE with X25519, HKDF-SHA256 and ChaCha20-Poly1305 for the sealed hand-off to your own Mac). The App implements no cryptographic primitive of its own, contains no third-party cryptographic library, and provides no encryption service to any third party. On that basis it qualifies for the standard exemption from U.S. export-control classification obligations, and both app targets declare ITSAppUsesNonExemptEncryption = false.
16.2 You may not export, re-export or use the App in violation of any applicable export-control or sanctions law, including the U.S. Export Administration Regulations and the sanctions programmes administered by the U.S. Office of Foreign Assets Control, and you represent that you are not a person or in a place that those laws prohibit.
To the extent permitted by law, any claim arising out of or relating to these Terms or the App must be brought within one year after it arises, or it is permanently barred. This Section does not apply where the law of your country of residence gives you a longer non-excludable period.
18.1 Entire agreement. These Terms, together with the Privacy Policy and the Usage Rules, are the entire agreement between you and us about the App and replace any prior agreement about it.
18.2 Severability. If a provision is held unenforceable, it is modified to the minimum extent necessary to make it enforceable, or severed if it cannot be, and the rest of these Terms remain in force. Section 14.5 has its own rule.
18.3 No waiver. A failure to enforce a provision is not a waiver of it.
18.4 Assignment. You may not assign these Terms. We may assign them to a successor in connection with a merger, acquisition or sale of assets, on notice to you.
18.5 Force majeure. Neither party is liable for a failure to perform caused by an event beyond its reasonable control.
18.6 Notices. We may give you notice in the App, through the App Store, or on our website. You give us notice at the contact address on our Support page.
18.7 Headings are for convenience only. The English version of these Terms controls over any translation.
18.8 No third-party beneficiaries other than Apple under Section 12.10.
Luis Masmela Blanco, developer of Secrets Daemon.
The Support page is the single place we keep our current contact address and the jurisdiction in which we are established, so that this document never goes stale.