Terms of use

1. Provider and scope

The account and the sync service are provided, and the license is granted, by:

Carlo Nölle
Bonner Straße 18
50677 Cologne
Germany

Email: hello@codeattack.io

("we", "us"). These terms govern the contract between you and us on the Kajero account, the sync service at sync.kajero.eu (the "service") and the Kajero license (the "license"). Terms of your own do not become part of the contract, even if we do not object to them.

2. What these terms do not cover

• The apps. Kajero for Mac and for iPhone and iPad works without an account. Its source code, including that of the sync server, is published under the GNU Affero General Public License, version 3 (AGPL); nothing in these terms limits the rights the AGPL gives you. Apps you build from the source code have every feature without a license; to sync with our service, they need one like any other build (section 5). For the iPhone and iPad app from the App Store, Apple's standard license agreement for apps (Licensed Application End User License Agreement) applies as well.
• The purchase. On this website the license is sold by Polar (Polar Software, Inc.) as merchant of record; you buy it from Polar under the terms Polar shows in its checkout. In the iPhone and iPad app it is sold by Apple as an in-app purchase; you buy it from Apple under the Apple Media Services Terms and Conditions. The seller handles payment, invoice, taxes, refunds and your statutory right of withdrawal. What the license includes, and our voluntary promise of money back, are part of these terms (sections 5 to 8).
• AI providers. AI requests go from your device straight to the provider you chose, under your own agreement with it. We are not party to it. What the provider charges for its use is between you and the provider; the license does not include it.
• Apple and Google. If you sign in with them, their terms apply to that sign-in.

3. Conclusion of the contract

You conclude the contract by creating an account: in the Mac app in Settings › Account › Sign In…, which opens our sign-in page in your browser, or in the iPhone and iPad app in Settings at the end of the Folders lane › Account. Both refer to these terms and the privacy policy before you sign in. You choose Apple, Google, a passkey or a code we send by email. Until the sign-in is complete you can correct your entries: enter another email address, request a new code, or cancel the sign-in at Apple or Google. With your first successful sign-in the account is created and the contract is concluded.

The license becomes part of the contract when you buy it. If you buy it on this website without an account, the contract on the license comes about with the purchase, and these terms apply to it without the provisions on the account and the service. Polar's checkout and the purchase in the app refer to these terms before you pay.

The contract languages are German and English. We do not store the contract text for you; the current version of these terms is on this page, where you can save or print it.

If you are under 18, you need the consent of a parent or guardian to create an account.

4. The service

The service syncs your notes, folders, tags, whiteboards, their history, the keys of your AI providers OpenAI, Anthropic, Google Gemini and OpenRouter, and attachments between the devices you sign in to the same account. Your devices encrypt all of it before it leaves them. The service keeps a copy of the key, wrapped through a key service, so that every device you sign in to receives the key without a code; the privacy policy explains this in its section 10. Once the trial of your account has ended, syncing needs the license (sections 5 and 7).

Each account includes storage for attachments: 5 GiB and 50,000 objects in total. Removing an attachment from a note does not free its space yet; deleting the account does. When the storage is used up, new attachments stay on your device while notes keep syncing.

Sign-in codes by email are limited per address to 5 codes per 15 minutes and 20 per 24 hours, and to 10 checks per 15 minutes and 30 per 24 hours. The apps tell you when you reach a limit.

We operate the service with due care, but we do not promise that it is available at any particular time or without interruption. It can be unavailable during maintenance and updates, after faults or attacks, or when our hosting providers fail. Meanwhile the apps keep working with the notes on your device, and they sync once the service is back.

5. What is free, and what the license includes

Writing, reading, organizing, search, import and export are free in the apps on Mac, iPhone and iPad, without a time limit and with or without an account. They need no license, and we never lock your notes.

The license is bought once, for one person and all of that person's devices. It includes:

• the AI features of the apps, with an AI provider you connect (section 2)
• the command line tool kajero and its MCP server
• sync between your devices through the service, with the storage of section 4
• every update of version 1 (1.x)

A license for version 1 keeps syncing after a version 2 appears, without an upgrade. There is no subscription, and nothing renews.

The license belongs to the purchase, not to an account. A purchase on this website counts for the account with the email address you bought it with, a purchase in the app for the account you are signed in to when you buy it; with an account, the license counts on every device you sign in to it. Without an account, you activate the license key from a purchase on this website on up to 3 Macs; sync always needs an account.

On request, we move a license bought on this website to another email address by hand; write to hello@codeattack.io.

6. Buying the license

The license cannot be bought yet, neither on this website nor in the app; this website will say when it can. Until then, section 7 says what applies.

You buy the license on this website from Polar, or in the iPhone and iPad app from Apple as a one-time in-app purchase (section 2). The purchase in the app needs an account; sign in before you buy. Both give the same license and unlock the same account: a license bought in one place counts on every device signed in to the account. A license bought with a discount code is the same license.

The price is the one the seller shows before you buy: Polar in its checkout, Apple in the app.

7. Trial

There are two trials. Both are free of charge, last 14 days and end by themselves; nothing is charged and nothing renews.

• The trial of an account starts when you create the account (section 3). During it you can use everything the license includes, sync included, on every device you sign in to.
• The trial on a Mac starts the first time you open Kajero on that Mac. During it you can use the AI features, the command line tool and its MCP server there, also without an account. The Mac keeps the start in its Keychain, so reinstalling Kajero does not start the trial again.

Until the license can be bought (section 6), there is no time limit: with or without an account, you can use everything the license includes, and nothing pauses or stops. For an account created before then, and on a Mac where Kajero was first opened before then, the 14 days start on the day the license can be bought. If you have an account, we tell you by email beforehand.

When the trial of your account has ended and the account has no license, sync pauses for it: your devices no longer exchange changes through the service. What you synced stays with the service, and sync resumes once the account has a license.

On a device that no running trial covers and that has no license, neither through the account it is signed in to nor, on a Mac, through an activated license key, the AI features, the command line tool and its MCP server stop.

Your notes stay on every device. You can keep writing, reading, searching, importing and exporting them (section 5); we never lock them.

8. Money back, and the end of a license

If you bought the license on this website, you get your money back within 14 days after the purchase, without giving a reason. Write to hello@codeattack.io; Polar refunds the payment. This promise is voluntary and comes in addition to your statutory rights, including your right of withdrawal, which Polar handles (section 2).

If you bought the license in the iPhone and iPad app, Apple decides on refunds under its own terms; you ask Apple for one, for example at https://reportaproblem.apple.com. We cannot refund such a purchase ourselves. Apple tells us when it has refunded a purchase.

A refund ends the license, whether Polar or Apple refunded the payment. Your account is then as it would be after its trial (section 7): sync pauses, the AI features, the command line tool and its MCP server stop, and your notes stay on every device and can be exported. A license key from the refunded purchase stops working on your Macs as well.

9. Your notes and your own copies

We do not read what you sync, and we do not search, check or correct its content. Technically we can open it, as the privacy policy explains in its section 10. If you lose a device, sign in on another one and your synced notes come back from the service, as long as sync is not paused (section 7).

Sync is not a backup: a deletion or change on one device reaches all of them. Keep your own copies of what matters to you. The notes stay on each of your devices; the Mac app backs them up automatically once a day and keeps the 14 newest backups on your Mac, and it exports all notes and attachments as Markdown files, in the app or with the kajero export command.

We back up the database of the service daily and keep each backup for 30 days, to restore the service after a failure, not to restore single accounts or notes. Attachments are not in these backups.

10. Your duties

• Keep your devices and your sign-in methods safe from others, and tell us at hello@codeattack.io as soon as you suspect that someone else uses your account. Whoever can sign in to your account receives your synced notes, so this includes the email account you sign in with.
• Use an email address or sign-in method you keep access to; without it you cannot sign in again. You can change the address in the app as long as you still receive codes at the current one.
• Comply with the law when you use the service, in particular criminal law and the copyright, trademark, personality and data protection rights of others.

11. Prohibited use

You must not:

• store illegal content with the service, in particular content that is criminal, harms minors or infringes the rights of others
• use the service for anything other than syncing your own data between your own devices, for example as storage for others or to distribute content or malware
• circumvent the limits of section 4 or the trial of an account (section 7), for example with several accounts for one person, or with automated requests beyond those the Kajero apps send
• attack the service: probe it for vulnerabilities, overload it, access accounts or data that are not yours, or disturb its operation. The source code of the apps and of the server is public, and you may study, change and run it under the AGPL; tests against our running service need our prior consent. Please report vulnerabilities to hello@codeattack.io.

We do not monitor or check stored content. We act on notices (section 12), on orders of courts and authorities, and on what we can see without opening content: accounts, sign-ins, the number and size of stored objects and the number of requests.

12. Reporting illegal content

Anyone can tell us about content stored with the service that they consider illegal (Art. 16 of the Digital Services Act, Regulation (EU) 2022/2065, "DSA"). Send the notice by email to hello@codeattack.io, with the subject "Notice under Art. 16 DSA". It should contain:

• a substantiated explanation of why the content is illegal
• a clear indication of where the content is: name the account, for example by its email address, and describe the content, or give other facts that identify the account or the stored object
• your name and email address, unless the notice concerns one of the offences in Articles 3 to 7 of Directive 2011/93/EU (sexual abuse and sexual exploitation of children)
• a statement that you are convinced in good faith that the information in the notice is accurate and complete

We confirm receipt without delay. We decide on the notice in a timely, careful, non-arbitrary and objective manner, by a person and without automated means, and tell you our decision and the remedies against it.

To decide on a notice, we can open the content of the reported account on the sync service; the privacy policy explains in its section 10 why that is technically possible. We do so only for that notice and only as far as the decision needs, and we record that we did. We can act on the account and on its stored encrypted objects: block or delete objects, restrict the account, suspend or close it. If we learn of facts that suggest a criminal offence involving a threat to the life or safety of persons, we inform the competent authorities (Art. 18 DSA).

13. Restrictions and statement of reasons

If the service is used against section 11 or the law, or if a court or authority orders it, we can restrict it for the account concerned (Art. 14 DSA). In proportion to the case we:

• block or delete individual stored objects
• limit sign-ins, uploads or the storage of the account
• suspend the account for a period
• close the account (termination for cause, section 15)

Before we decide, we weigh the rights and legitimate interests of everyone involved, including your fundamental rights. A person decides; automated means only enforce the limits of section 4 and the sign-in limits, which pause further attempts for at most a day.

If we restrict your account, we tell you by email at the latest when the restriction takes effect, with a statement of reasons (Art. 17 DSA): what we restricted and for how long, the facts and circumstances, whether we acted on a notice, the provision of law or of these terms we rely on, and your remedies. You can reply to that email; we then review the decision again. You can also go to court. We do not inform you if a court or authority forbids it or if it would hinder the prevention or prosecution of a criminal offence.

14. Contact points

Our single point of contact for the authorities of the member states, the European Commission and the European Board for Digital Services (Art. 11 DSA), and for the users of the service (Art. 12 DSA), is:

Email: hello@codeattack.io
Phone: +49 221 42364393

You can write to us in German or English. A person answers; there is no automated system.

We are a micro enterprise within the meaning of Recommendation 2003/361/EC and therefore publish no transparency reports (Art. 15(2) DSA).

15. Term, termination, deleting the account and the end of the service

The contract runs for an indefinite period.

You can end it at any time, without notice, by deleting your account: on the Mac in Settings › Account › Delete account, on the iPhone and iPad in Settings at the end of the Folders lane › Account › Delete account. Deleting removes in one step the account, its sign-ins, passkeys, sessions, encrypted records and wrapped keys from the database; the service then deletes your attachments from storage. Copies in the backups of the database are deleted after 30 days at the latest. We keep the id of the deleted account and the time of deletion, so that your other devices learn that the account was deleted; the privacy policy lists in its section 10 what else remains for a limited time. The notes on your devices stay.

Deleting the account does not end your license, because the license belongs to the purchase (section 5). A new account with the email address you bought it with on this website takes it over; a purchase in the app you restore in a new account with Restore purchases in the app. For this we keep the state of the license after the account is deleted, for a purchase on this website with the email address it was bought with, as the privacy policy explains in its section 6.

We can end the contract with two months' notice by email, for example if we discontinue the service. Until then you can keep using it, and your notes stay on your devices.

If we discontinue the service, we email every account with this notice and explain how to export its notes. The notes stay on every device. We do not refund the price of the license then, not even in part; section 8 and your statutory rights remain unaffected. With a last update of the apps we remove the license check, so that the AI features, the command line tool and its MCP server keep working without the service.

The right of both parties to terminate for cause without notice remains (§ 314 of the German Civil Code, BGB). Cause for us is in particular a serious, or after a warning a repeated, breach of section 11, or an order of a court or authority. Where the breach allows it, we first warn you or restrict the account under section 13.

16. Changes to the service

We develop the service further. We can change it where the change is reasonable for you, taking your interests into account, in particular for technical or security reasons, because of new legal requirements, or because our hosting providers change their services. We do not charge for a change.

If a change impairs your use of the service more than slightly, for example lower limits, we tell you by email at least six weeks before it takes effect. You can then end the contract free of charge by deleting your account, up to 30 days after the change takes effect.

17. Changes to these terms

We can change these terms with effect for the future for a valid reason: a change in the law or in case law, a change of the service under section 16, or a gap in these terms that has become apparent. We send you the changed terms by email at least six weeks before they take effect, with the changes marked.

The changes count as accepted if you do not object before they take effect; we point this out in the email. If you object, the previous terms continue to apply, and we can end the contract with two months' notice under section 15. A change to the main obligations, that is, to what the service does or what the license includes, or to the account being free of charge, needs your express consent.

18. Liability

We are liable without limitation:

• for intent and gross negligence
• for injury to life, body or health
• under the German Product Liability Act (Produkthaftungsgesetz)
• to the extent of a guarantee we have given

For slight negligence we are liable only for the breach of an essential contractual obligation, that is, an obligation whose fulfilment makes the proper performance of the contract possible in the first place and on whose fulfilment you may regularly rely. This liability is limited to the damage that is typical for the contract and foreseeable when it was concluded. Otherwise we are not liable for slight negligence.

For the loss of data we are liable, within these limits, only for the effort of restoring it from copies you keep as section 9 describes.

These rules also apply to the liability of our representatives and vicarious agents. Statutory provisions that limit our liability further for a service provided free of charge remain unaffected.

19. Data protection

How we process personal data for the account and the service is set out in the privacy policy, in particular in its sections 6 and 9 to 12: https://kajero.eu/en/privacy

20. Governing law and place of jurisdiction

The law of the Federal Republic of Germany applies. If you are a consumer with your habitual residence in another country, this choice of law does not deprive you of the protection of the mandatory provisions of the law of that country (Art. 6(2) of the Rome I Regulation).

If you are a merchant, a legal entity under public law or a special fund under public law, the exclusive place of jurisdiction for all disputes arising from this contract is Cologne. For consumers, the statutory place of jurisdiction applies.

21. Consumer dispute resolution

We are neither obliged nor willing to take part in dispute resolution proceedings before a consumer arbitration board (§ 36 of the German Consumer Dispute Resolution Act, VSBG).

22. Final provisions

These terms are available in German and English; both versions are equally binding.

If a provision of these terms is or becomes invalid, the rest of the contract remains valid; the statutory provisions take the place of the invalid one (§ 306 BGB).