Kiskis

Terms of Service

Effective date: April 26, 2026 · Last updated: April 26, 2026

These Terms of Service ("Terms") govern your use of the Kiskis service ("Service") provided by Todd Hoff ("Kiskis", "we", "us"). By creating an account or using the Service you agree to these Terms.

1. The Service

Kiskis is a secure configuration and API key delivery platform for iOS developers. It allows developers to upload application secrets and configuration, and deliver them securely to iOS apps at runtime using Apple's App Attest hardware attestation.

2. Accounts

You must be at least 18 years old to create an account.
You are responsible for maintaining the security of your account credentials. You are responsible for all activity that occurs under your account.
You must provide accurate information when creating your account. Impersonating another person or organization is prohibited.
One person or legal entity may not maintain more than one free account.

3. Acceptable Use

You may use the Service only for lawful purposes. You may not:

Upload content that is illegal, harmful, or violates third-party rights.
Use the Service to distribute malware, ransomware, or any malicious code.
Attempt to probe, scan, or test the vulnerability of the Service or any related system.
Circumvent or attempt to bypass any rate limits, authentication, or access controls.
Use the Service to store or transmit data in violation of applicable privacy laws (GDPR, CCPA, etc.).
Resell or sublicense access to the Service without prior written consent.
Use the Service in any application that could cause death, personal injury, or severe environmental damage (e.g., medical devices, aircraft control systems).

4. Your Content

You retain all ownership of the content you upload (configs, secrets, binary blobs). By uploading content you grant us a limited, non-exclusive license to store, process, and transmit it solely to provide the Service.

You are solely responsible for the content you upload and for ensuring you have the right to upload it. We do not inspect the plaintext content of your configs (and cannot in Zero-Knowledge Mode). We are not responsible for any loss or damage resulting from content you upload.

5. Plans, Billing, and Refunds

Free plan — available at no charge subject to usage limits stated on the pricing page. We reserve the right to modify free plan limits with 30 days' notice.
Paid plans — billed monthly in advance via Stripe. Prices are listed on the pricing page and may change with 30 days' notice to existing subscribers.
Overage — if your monthly active users (MAU) exceed your plan limit, the Service continues but you will be prompted to upgrade. We will not cut off production traffic as a billing lever.
Cancellation — you may cancel at any time. Your subscription remains active until the end of the current billing period. No prorated refunds are issued for partial months.
Refunds — we offer a full refund within 14 days of your first paid subscription if you are not satisfied. After that, all payments are non-refundable except where required by law.
Taxes — prices do not include taxes. You are responsible for applicable taxes in your jurisdiction.

6. Service Level and Availability

We target 99.9% monthly uptime for the config delivery API. We will make reasonable efforts to notify you in advance of planned maintenance. We do not offer a formal SLA or uptime credit at this time.

Config delivery to iOS devices relies on Apple's App Attest service, which is operated by Apple. We are not responsible for outages or degradation caused by Apple's infrastructure.

7. Security Responsibilities

You are responsible for rotating secrets at the upstream provider (Stripe, OpenAI, etc.) if you believe a secret has been compromised. Kiskis can stop delivering a secret within seconds of revocation, but any secret already cached on end-user devices may remain accessible until the cache TTL expires (typically 1 hour by default, configurable). We are not liable for losses arising from cached secrets on offline devices.

Keep your provisioning keys secret. Treat them like Stripe secret keys — store in a password manager, CI secrets store, or AWS Secrets Manager. Never commit them to version control.
Do not embed Kiskis provisioning keys (kk_prod_...) inside your iOS app binary.
Revoke any key you believe has been compromised immediately using the dashboard or CLI.

8. Data and Privacy

Our collection and use of personal data is described in our Privacy Policy, which is incorporated into these Terms by reference.

9. Intellectual Property

The Kiskis service, dashboard, and documentation are owned by us and protected by intellectual property law. The iOS SDK and CLI are open source — see the applicable license in each repository.

We do not acquire any intellectual property rights over your content.

10. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

11. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT SHALL KISKIS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) USD $100.

12. Indemnification

You agree to indemnify, defend, and hold harmless Kiskis and its operators from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service; (b) your violation of these Terms; (c) your content; or (d) your violation of any third party's rights.

13. Termination

You may terminate your account at any time by deleting it in the dashboard or emailing support@kiskis.dev.

We may suspend or terminate your account immediately if you violate these Terms, engage in abusive or illegal activity, or if we are required to do so by law. We will give reasonable notice where practical.

On termination, your right to use the Service ends immediately. Your uploaded configs and data will be deleted within 30 days unless required to be retained by law.

14. Changes to These Terms

We may update these Terms. Material changes will be communicated by email to registered accounts at least 14 days before taking effect. Continued use after the effective date constitutes acceptance of the new Terms. If you do not agree, you must stop using the Service and may cancel your subscription before the changes take effect.

15. Governing Law and Disputes

These Terms are governed by the laws of the State of California, United States, without regard to its conflict of law provisions. Any dispute arising from these Terms or the Service shall be resolved by binding arbitration in San Francisco, California, except that either party may seek injunctive relief in any court of competent jurisdiction.

16. Miscellaneous

Entire agreement — these Terms, together with the Privacy Policy, constitute the entire agreement between you and Kiskis regarding the Service.
Severability — if any provision is found unenforceable, the remaining provisions remain in full effect.
Waiver — failure to enforce any provision does not constitute a waiver of future enforcement rights.
Assignment — you may not assign these Terms without our consent. We may assign these Terms in connection with a merger or acquisition.

17. Contact

Questions about these Terms: support@kiskis.dev