Terms of Service

When you create an identity, an Ed25519 key pair is generated and stored exclusively on your device using hardware-backed secure storage. Your private key never leaves your device and is never transmitted to our servers. A Decentralized Identifier (DID) is derived from your public key and shared with our server to associate your identity.

You may register an account by verifying your email address or phone number. Registration links your DID to your contact information and enables features such as sync, notifications, and subscription management.

You are responsible for maintaining the security of your device and your cryptographic keys. If your device is lost, stolen, or compromised, your private key may be at risk. We recommend enabling biometric authentication and using the Shamir Secret Sharing key recovery feature (available on Pro and Enterprise tiers) to protect your identity.

The Service uses Ed25519 digital signatures to create cryptographically verifiable proofs of content origin and integrity. When you sign content, you create a binding cryptographic commitment that the content originated from your identity at a specific time.

The Service may embed C2PA (Coalition for Content Provenance and Authenticity) content credentials directly into media files. These embedded credentials are compliant with the C2PA standard and can be verified by any C2PA-compatible tool. C2PA credentials are public by design and viewable by anyone inspecting the file.

Content is classified with a provenance grade: "Captured" (taken directly with the device camera at signing time) or "Cygned" (selected from an existing source and signed). These grades indicate the method of acquisition, not a judgment of content quality or authenticity.

Verification confirms that a digital signature is valid and was created by the stated identity. It does not guarantee the accuracy, truthfulness, or legality of the signed content itself.

You retain full ownership of all content you sign using the Service. Signing content does not transfer any rights to us. We do not store your images or documents - only cryptographic hashes and metadata are transmitted to our servers.

The Cygn name, logo, visual identity, and all associated branding are the property of Cygn. You may not use the Cygn brand in a way that suggests endorsement, affiliation, or sponsorship without our prior written consent.

The underlying cryptographic protocol is the open-source Vouch Protocol, licensed under the Apache 2.0 license. The Vouch Protocol specifications are being donated to the W3C. Your use of the Vouch Protocol is governed by its own license terms.

Paid subscriptions are billed monthly or annually through Stripe or Razorpay, depending on your region. Payment is due at the beginning of each billing cycle. Prices are shown in your local currency where stated.

You may cancel your subscription at any time through the app or website settings. Cancellation takes effect at the end of your current billing period. You will retain access to paid features until the period ends.

We offer a full refund within 14 days of your initial subscription purchase if you are not satisfied. After 14 days, refunds are provided at our discretion. Contact support@cygn.me for refund requests.

The Free tier provides access to core Vouch Protocol features at no cost. Free tier features may be modified over time, but core cryptographic signing and verification will remain free.

The Service is provided "as is" and "as available" without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

While we use industry-standard cryptographic algorithms (Ed25519) and established standards (C2PA, W3C DID), no security system is infallible. We do not guarantee that signatures cannot be compromised if your device or private key is compromised.

To the maximum extent permitted by law, Cygn shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising from your use of the Service, even if we have been advised of the possibility of such damages. Our total liability for any claim arising from these Terms shall not exceed the amount you paid us in the 12 months preceding the claim.

The Service integrates with third-party services (Stripe, Razorpay, Sentry, etc.). We are not responsible for the availability, accuracy, or practices of these third parties.

You may terminate your use of the Service at any time by deleting your identity from the app or website. Deleting your identity removes your private key from your device. To request deletion of server-side data, contact privacy@cygn.me.

We may suspend or terminate your access to the Service if you violate these Terms, engage in abusive behavior, or use the Service for illegal purposes. We will make reasonable efforts to notify you before termination, except where immediate action is required to protect the Service or other users.

Upon termination, your right to use the Service ceases. Existing signatures and verification records remain valid and publicly accessible, as they are part of the cryptographic record. Sections 6, 10, 12, and 13 survive termination.