Terms of Service

These are the terms you agree to by using Vilkax. They are the canonical contract - the in-app consent flow links to this exact text, and your consent record stores the version, the SHA-256 of the text you were shown, and the moment you accepted it, so either of us can establish later which version applied.

What Vilkax is

Vilkax is a warning system. It examines the messages, links, wallets and device signals you choose to share with it, and gives you an opinion about risk across the channels you opt in to (forwarded messages, registered wallets, device security telemetry).

What Vilkax does not undertake

We do not undertake to detect every threat. No detection system does. Vilkax will miss real scams (false negatives) and will flag safe things as risky (false positives). Both are inherent to the technology, not defects in the service. Vilkax is an aid to your own judgement and never a substitute for it.

You remain in control of, and responsible for, your own decisions - in particular any decision to send money, share credentials, install software, grant access to a device, or act on a message. A "clean" or low-risk verdict is not an instruction to proceed and is not a guarantee of safety. If a verdict conflicts with your instincts, your bank's advice, or a warning from someone you trust, do not rely on the verdict.

What Vilkax is not

• A financial advisor.
• A lawyer.
• A bank, a payment provider, or a fraud-reimbursement scheme.
• A replacement for emergency services or law enforcement. If your life or anyone else's is in immediate danger, call your local emergency number first. If you believe you have been defrauded, contact your bank and the police first, then tell us.
• An insurance product. The optional Insurance add-on is governed by its own separate terms.

Availability

Vilkax is provided on an "as available" basis. Protection depends on things outside our control: your device, its operating-system permissions, battery-optimisation settings, network connectivity, and the platforms whose messages you ask us to check. Where a platform changes or restricts its interfaces, features that depend on it may be degraded or withdrawn. We do not promise uninterrupted or error-free operation, and consumer plans carry no service-level commitment.

Alerts and delivery

Alerts travel over channels we do not control - push services, SMS carriers, email providers, messaging platforms. We cannot guarantee that an alert will arrive, arrive intact, or arrive in time. Do not use Vilkax as the only channel by which you would learn something urgent.

Age and eligibility

You can open a Vilkax account yourself if you are 14 or older - the digital-consent age in Lithuania, where Vilkax is established (this threshold varies between 13 and 16 across EU member states; where your country's higher threshold applies to you, that age governs). If you are below the age that applies to you, a parent or guardian must consent to your use of Vilkax. Account creation includes an explicit confirmation of this, and we keep a record of it. Parents and guardians can reach us about a child's account at any time through our contact form (select the privacy topic) - see the "Children and families" section of the Privacy Policy for how family features like KIN handle a child's data.

Acceptable use

• One person per account. No password sharing.
• Don't submit content you don't have the right to scan.
• Don't use Vilkax to attack, surveil, or harm anyone.
• Honour rate limits. Polite scrapers are tolerated; rude ones get blocked + ASN-banned.

Using Vilkax for business purposes - protecting employees, routing a company's mail or traffic through it, or calling the Protect API on behalf of an organisation - is governed by our Business Terms and the accompanying Data Processing Agreement, not by these consumer terms.

Safety tips and early warnings

Vilkax does not only react to things that have already gone wrong. Where the context suggests a category of risk, it may show you general safety guidance before anything suspicious has happened - for example, tips about paying a deposit when you are looking at rental listings, or about upfront fees and guaranteed returns when investment offers are in view.

These tips are general safety education, not a finding about the person, page, listing or company in front of you. A tip does not mean we have detected a scam, and it is not an accusation against anyone involved. Equally, the absence of a tip does not mean there is no risk - we show guidance only where we recognise the context, and we will often not recognise it. Tips are not financial, legal or professional advice, and acting or not acting on one remains your decision.

What your device and its operating system allow us to see

Vilkax can only examine what the platform and you allow it to. Apple, Google, Microsoft and the messaging platforms each decide what an app on their operating system may access, and those rules differ by platform, by version, and by the permissions you grant. Some protections are therefore unavailable on some platforms, weaker on others, and can stop working when a platform changes its rules or you change a permission.

This means protection is not uniform across your devices, and Vilkax cannot see messages, apps or activity that the operating system does not expose to it. We show you, in the app, which protections are active on each device and which are unavailable and why. Where a protection is switched off, unavailable, or never granted the permission it needs, it cannot protect you - and we are not responsible for a threat that reached you through a channel we were not permitted to see.

What Vilkax cannot do for you

• Recover money. Vilkax cannot reverse a payment, recall a transfer, or recover funds or crypto. Only your bank, payment provider or the authorities can attempt that, and we make no representation that they will succeed.
• Act as your agent. We do not deal with your bank, an exchange, a platform or the police on your behalf, and we cannot make a report for you.
• Replace your other security. Vilkax is one layer. It does not replace antivirus, device updates, two-factor authentication, or your bank's own controls.
• Give professional advice. Nothing Vilkax outputs - including AI-generated explanations and assistant answers - is legal, financial, tax, medical or investment advice.
• Produce forensic evidence. Exports, reports and audit records are provided for your own use and convenience. They are not prepared as, and we do not certify them as, evidence for legal proceedings.

Content from other people, and content you share

Some things you see in Vilkax originate with someone else - a report shared with you, a message forwarded into a circle, a community submission, or a link inside content being scanned. We do not author, endorse or vouch for any of it, and opening a link found in scanned content is your decision. Treat a shared report as you would treat the message it came from.

When you share a report, a scan or a location, you are choosing who sees it, and you are responsible for what you send and to whom. Do not submit someone else's private information where you have no right to, and be aware that a message you forward for scanning contains whatever the sender put in it.

Your responsibilities

Keep your credentials and second factor secure. Keep the app updated - detection improves only in current versions. Keep the permissions enabled for the protections you have chosen, and don't disable a protection and then rely on it. Where a loss is caused or made worse by not doing these things, that is relevant to what we owe you under "Liability" below - if the loss would not have happened, or would have been smaller, had a protection been enabled, a permission granted, or the app kept up to date, that is taken into account.

Your licence to use Vilkax, and the permission you give us

We grant you a personal, non-exclusive, non-transferable right to use Vilkax on your own devices for your own protection, for as long as your account is open and these terms are kept. That right is not a sale: the software, the models, the detection rules and everything else that makes up the service remain ours or our licensors'. You may not copy, resell, rent out, reverse engineer or attempt to extract the detection logic from Vilkax, and you may not use its output to build or train a competing service.

What you send us stays yours. When you submit a message, a link, a wallet address or a file to be checked, you keep every right in it. You give us only the permission we need to do the thing you asked for: to receive that content, analyse it, produce a verdict, and show that verdict to you - together with the limited storage described in the Privacy Policy. That permission is confined to those purposes, it does not let us publish your content or train models on it, and it ends when the content is discarded after the check.

Where you submit something written by someone else, you confirm you are entitled to have it checked. Feedback you choose to send us about the service - a bug report, a suggestion - we may use freely and without obligation to you.

Subscription, billing, refunds

• The Free tier (Pack) is free forever and not a trial.
• Paid tiers (Wolf, Pack Guardian) bill monthly or yearly via Stripe.
• Upgrades take effect immediately and prorate. Downgrades take effect at the next renewal.
• Our refund policy: a full refund within 14 days of your first paid sign-up. After that, no prorated refunds - but you keep the tier through the end of the current period.
• You can cancel from inside the app in two taps. No win-back gauntlet.

Your statutory right of withdrawal. If you are a consumer in the EU or EEA, you have 14 days from the conclusion of the contract to withdraw, without giving a reason. Because the service starts immediately, we ask you at checkout to expressly request that performance begin during that period and to acknowledge that, once the service has been fully performed, the right of withdrawal is lost - and that for a partly performed service you pay a proportionate amount for what was supplied before you withdrew. Our refund policy above sits on top of that statutory right and never replaces it. Nothing in these terms limits your statutory rights.

If the service doesn't match what we described

If Vilkax does not conform to the description in these terms and on our website, you are entitled under EU digital-content law, as implemented in Lithuania, to have it brought into conformity - and where that is impossible, disproportionate, or not done within a reasonable time, to a proportionate price reduction or to terminate and receive a refund. Tell us first through the contact form; we would rather fix it than argue about it.

Liability

What we do not exclude, and cannot. Nothing in these terms limits or excludes our liability for death or personal injury caused by our negligence; for fraud or fraudulent misrepresentation; for intentional harm or gross negligence; for your mandatory rights as a consumer under the law of your country of residence, including the conformity remedies above; or for anything else that cannot be limited by law.

What we are responsible for. Subject to that, we are responsible for loss you suffer that is a foreseeable consequence of our breach of these terms or of our failure to use reasonable care and skill in providing the service.

What we are not responsible for. We are not responsible for loss caused by the fraud of a third party rather than by our breach; for your decision to act, or not act, on a verdict; for a threat we did not detect, where our detection was operated with reasonable care; for loss arising because a protection was switched off, a permission withheld, an app version left out of date, or a device compromised; for the acts of people you invite into a KIN circle; for a threat that reached you through a channel the operating system or your permissions did not let us see; for your reliance on general safety guidance as though it were a finding about a specific person or offer; or for loss that was not foreseeable when the contract was made.

Cap. Subject to the first paragraph of this section, our total liability arising out of or in connection with the service in any twelve-month period is limited to the greater of (a) the total amount you paid us in the twelve months before the event giving rise to the claim and (b) EUR 100. Where you pay us nothing, (b) is the whole of it.

AI and automated processing

Parts of Vilkax use AI systems and machine-learning models. Where you are interacting with an AI system, or reading AI-generated text, this is disclosed at that point in the app. AI output can be wrong or incomplete, and everything in "What Vilkax does not undertake" applies to it in full. You can request an explanation of - and human review of - any automated decision affecting your account, as described in the Privacy Policy.

Beta and experimental features

Features labelled beta, preview or experimental are provided for evaluation, may change or be withdrawn without notice, and are excluded from the conformity section above. The liability carve-outs still apply to them in full.

Termination

You can terminate any time from inside the app. We may suspend or terminate accounts that violate the acceptable-use clauses above; you'll get notice unless the abuse is so active that notice would prolong the harm.

You can export your data at any time from Settings. Terminating does not by itself erase your data - use Settings, then "Schedule account deletion", or ask us. Retention and deletion are described in the Privacy Policy.

Changes to these terms

We may change these terms - for example to reflect new features or a change in law. For changes that are to your disadvantage we will give you at least 30 days' notice by email and in-app, and you may reject them by terminating before they take effect, with a pro-rata refund of any prepaid period. Minor changes that do not affect your rights take effect on publication. We keep every version with the date it applied and a hash of its text, so you can always obtain the exact version you accepted.

Complaints and disputes

Complain to us first. Use the contact form. We aim to acknowledge within 5 working days and resolve within 30. Most disputes end here.

If you are not satisfied, consumers in the EU or EEA may refer the dispute to the consumer-dispute body competent in their country of residence; consumers in Lithuania may apply to the State Consumer Rights Protection Authority (Valstybine vartotoju teisiu apsaugos tarnyba).

Governing law

The Vilkax service is operated by Vilkaks UAB (registered company ID 308049358), with its registered office in Klaipėda, Lithuania. These terms are governed by the laws of the Republic of Lithuania, where Vilkaks UAB is established, and any disputes are resolved in the competent courts of Lithuania - without prejudice to any mandatory consumer protections of your own country of residence, and without depriving you of the right to bring proceedings in the courts of your own country.

General

• Force majeure. Neither of us is liable for a failure caused by events beyond reasonable control - including outages at infrastructure providers, state action, and network-level attacks - for as long as the event lasts. If it lasts more than 30 days, either of us may terminate the affected service and you receive a pro-rata refund.
• Severability. If a term is found unenforceable, the rest stands, and that term applies to the maximum extent the law allows.
• No waiver. A delay in enforcing a term is not a waiver of it.
• Assignment. You may not transfer your account. We may assign these terms to a successor in a merger or acquisition, on notice to you; if that is to your disadvantage you may terminate and receive a pro-rata refund.
• Notices. We contact you at the email address on your account, and in the app. Keep that address current: a notice we send there is treated as received. You reach us through the contact form.
• Third parties. No one other than you and us has rights under these terms.
• Sanctions. You may not use Vilkax if you are subject to EU, UK, US or UN sanctions, or located in a territory subject to comprehensive sanctions, and you confirm that you are not.
• Survival. The sections on what we do not undertake, liability, complaints and disputes, governing law and this General section survive termination.
• Entire agreement. These terms, the Privacy Policy and any tier-specific terms are the whole agreement between us on this subject.

Hearth

Hearth is a private journal companion, not a healthcare service. Hearth's safety classifier may surface crisis-line numbers and supportive resources when patterns indicate harm, but Hearth does not provide medical, psychological, or emergency services and is not a substitute for professional help or for calling local emergency services.

KIN (trusted-circle location)

KIN lets you share live location with people you've explicitly invited and approved. You are responsible for who you invite. Vilkax does not vouch for the conduct of circle members. KIN visibility is determined by each member's share settings - including yours - at the moment of each read; we never publish your location to anyone outside circles you've joined, and we never operate a public map. You can pause or revoke sharing at any time from the KIN page, and pings older than 24 hours are deleted automatically.

Last updated: 2026-08-22 · Version v4 (rewrote the scope of what Vilkax undertakes and the liability section - mandatory carve-outs stated first, then what we are responsible for, then a capped floor; added availability, alerts, your responsibilities, the statutory right of withdrawal, conformity remedies, AI disclosure, beta, changes-to-terms notice, complaints and ADR, and a General section; added safety-tips-are-not-a-finding, the platform-and-permission limits on what we can see, what Vilkax cannot do for you, and content from other people; pointed business use at the Business Terms; v3 added the Age and eligibility clause - consent age 14 in Lithuania, parental consent below it; v2 added Hearth and KIN clauses)