Terms of Service — Krest

Last updated: 2026-06-11

Template notice. This is a carefully drafted starting point, not legal advice. Before launch, have it reviewed by a lawyer for your jurisdiction and fill in every <…> placeholder. The bracketed operator details must match PRIVACY.md and IMPRESSUM.md.

By downloading, installing or using the Krest app ("Krest", "the app") you agree to these Terms of Service ("Terms"). If you do not agree, do not use the app.

1. Who provides Krest

Operator:   <Firma / Inhaber>
Address:    <Strasse, PLZ, Ort, Land>
Email:      <legal@deine-domain.de>

The Krest protocol is open source under the MIT License. These Terms govern your use of the app and the optional convenience services (Anchoring Relay, Lookup Service, Share Relay) operated by the operator named above.

2. What Krest is

Krest is a cryptographic verification system for camera-captured media. It lets you:

• Verified (Capture) — sign a photo/video with your device's Secure Enclave

at the moment of capture.

• Anchored — bind the hash of any file to the Bitcoin blockchain in time,

without the file ever leaving your device.

• Fortress — multi-signature groups across hardware secure elements.

Krest is account-less: there is no sign-up, no user profile, no tracking. Your private keys never leave your device's Secure Enclave.

3. What "verified" means — and what it does not

This section is essential to using Krest correctly.

• A "verified" result is a cryptographic proof that a specific sequence of

bytes was signed by a genuine Apple Secure Enclave and anchored to Bitcoin at a given time, and that the bytes have not changed since. It is binary: content is either verified or not. There are no confidence scores.

• A "verified" result is not a statement about the truth, meaning,

legality or context of what the media depicts. It proves integrity and origin, not the honesty of the person who pointed the camera.

• "Unverified" does not mean "fake." It only means a proof could not be

established — e.g. the media was edited, re-encoded, or never carried a Krest proof. Absence of verification is never an accusation of forgery.

• Any modification (crop, filter, colour/recompression beyond the capture

encoding) permanently invalidates a Verified proof by design. This is intended behaviour, not a defect.

You agree not to present Krest results in a way that overstates what they prove.

4. Acceptable use

You agree not to use Krest to:

• capture, anchor, share or verify content that is illegal where you are, that

infringes others' rights, or that depicts others without a lawful basis;

• attempt to forge, tamper with, or misrepresent a verification result;
• attack, overload, reverse-engineer for circumvention, or disrupt the relays

or other users' use of the service;

• use the service in violation of applicable export, sanctions or privacy law.

You are solely responsible for the content you capture and for how you use the proofs Krest produces. You retain all rights to your content — the operator claims no ownership of your media.

5. The convenience services are not the trust anchor

Verification in Krest is trustless: it can be performed independently against the Bitcoin blockchain and your device's signature, without any Krest server. The Anchoring Relay, Lookup Service and Share Relay are convenience services only. The operator does not warrant their continuous availability, and may modify, suspend or discontinue them. This does not affect the verifiability of proofs already anchored to Bitcoin.

Krest depends on third parties outside the operator's control — in particular the Bitcoin network (anchoring timing depends on network conditions and is not guaranteed within any specific window) and Apple (App Attest, StoreKit, iOS). The operator is not responsible for outages or changes in those systems.

6. Paid features (when enabled)

Krest is free to download and verification is always free. The operator may offer optional paid features via Apple's In-App Purchase:

• Subscriptions (auto-renewable) granting a monthly allowance of immediate

"force-anchors" and additional features.

• Force-anchor packs (one-time, consumable, non-expiring credits), which may

be purchased only while a subscription is active.

When paid features are live:

• Billing, renewal and cancellation are handled by Apple under your Apple ID

and Apple's terms. Subscriptions renew automatically until cancelled at least 24 hours before the period ends; manage or cancel them in your Apple ID settings.

• Purchased pack credits do not expire and remain usable, subject to Section 4.
• Refunds are handled by Apple according to Apple's policies; the operator

cannot issue App Store refunds directly.

• Prices and allowances may change prospectively; changes never affect a billing

period already paid for.

Legal review needed (do not ship Section 6 as-is): in the App Store model Apple is normally the merchant/contracting party for in-app purchases, which shifts the consumer right of withdrawal (Widerrufsrecht, § 356 BGB / EU Consumer Rights Directive) and the immediate-performance waiver for digital content onto Apple's flow. Confirm with a lawyer whether you must provide your own Widerrufsbelehrung, and align this section with Apple's required EULA terms (Schedule to the Apple Developer Agreement) before enabling purchases.

7. Disclaimer of warranties

Krest is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. The operator does not warrant that the app or services will be uninterrupted, error-free, or that any anchor will confirm within a particular time. Nothing in Krest constitutes legal, forensic or evidentiary advice, and a Krest proof is not a substitute for expert testimony or a court's evaluation of evidence.

8. Limitation of liability

To the maximum extent permitted by applicable law, the operator is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of data, profits or goodwill, arising from your use of or inability to use Krest. Mandatory statutory liability — in particular under German law for intent, gross negligence, injury to life, body or health, and under the German Product Liability Act — remains unaffected. For the breach of essential contractual obligations (cardinal obligations), liability for slight negligence is limited to the foreseeable, contract-typical damage.

9. Changes to these Terms

The operator may update these Terms as the app evolves. The "last updated" date reflects the latest revision; material changes will be announced in the app changelog. Continued use after a change constitutes acceptance.

10. Governing law and jurisdiction

These Terms are governed by the law of <Land — z. B. der Bundesrepublik Deutschland>, excluding its conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods (CISG). Mandatory consumer protection provisions of your country of residence remain unaffected. Place of jurisdiction, to the extent legally permissible, is <Gerichtsstand / Ort>.

11. Contact

<legal@deine-domain.de>

See also: PRIVACY.md (data handling) and IMPRESSUM.md (provider identification under § 5 DDG). German version: AGB.md.