Terms of Service

Effective Date: [TO BE FILLED at v1.0 launch] Last Updated: 2026-05-21 (draft)

DRAFT for legal counsel review. This is the engineering team's first-pass draft. The acquisition-survival language (§8) and AI disclosure language (§5) are not negotiable — they are foundational commitments to users carried forward from spec §13.

1. What Apna is, and what you're agreeing to#

Apna is a personal agent app. By using it, you're agreeing to these Terms of Service ("ToS") plus our Privacy Policy.

Apna is provided as-is. You can stop using it at any time. We can stop offering it (subject to the acquisition-survival commitments in §8 below). Neither side is locked in.

2. Who can use Apna#

You can use Apna if:

You are at least 13 years old (US) or the local age of digital consent (EU GDPR Art. 8: typically 16).
You agree to use Apna for lawful purposes only.
You agree not to use Mira's voice cloning (Phase 6 Personal Voice) to impersonate someone who has not given consent for that specific use. This includes impersonating yourself in fraudulent ways (e.g., synthesizing your voice to deceive a third party in a contractual or financial transaction).

3. Your account and identity#

Your Apna identity is a decentralized identifier (DID) derived from a private key generated on your device. The private key never leaves your device. We cannot reset your account or recover your identity — by design.

If you lose access to all your devices simultaneously without a backup, your account is gone. We cannot help. This is the security trade-off: no central reset means no central attack vector.

You may use any handle for your apna.me/<handle> URL, subject to:

No impersonation of real people or entities (other than yourself)
No trademarks you don't own
No slurs, harassment, or illegal content
No squatting on common names with the intent to resell

We reserve the right to release a handle that violates these rules. We will give you 30 days notice and provide an export option (per §6.1 of the Privacy Policy) before reassigning the handle.

4. What Apna does and doesn't do#

4.1 What Apna does#

Runs a personal agent (Mira) on your phone that can remember things you tell it, schedule things on your calendar, and communicate with other people's agents on your behalf
Stores your memory locally in an encrypted database
Routes encrypted messages between your agent and other Apna users' agents
(Pro tier) Provides a dedicated phone number that Mira can answer on your behalf

4.2 What Apna does NOT do#

Read the content of your messages
See your contacts, calendar events, or voice recordings
Train AI on your data
Sell your data
Share your data with advertisers or data brokers
Function offline (we need internet for agent-to-agent messaging)
Replace your existing apps (calendar, contacts, messaging — Apna integrates with them, doesn't replace them)

5. AI use and Personal Voice (Phase 6)#

Apna uses AI. We disclose this prominently in onboarding and in Settings. Important rules:

5.1 Stock Mira voice (default)#

Mira speaks in a default "Mira voice" — a generic, non-personal voice. Outbound utterances carry an AudioSeal watermark to indicate they're AI-generated.

5.2 Personal Voice (opt-in only)#

If you complete the 15-minute Personal Voice training (Settings → Personal Voice), Mira can synthesize speech in your voice. This is governed by additional restrictions:

(a) Anti-impersonation gate — training fails if our speaker-embedding model (ECAPA-TDNN) detects that mid-flow audio samples come from a different person.

(b) Per-conversation opt-in — Mira cannot use your voice for any specific conversation without your explicit per-conversation authorization, OR a "standing rule" you have set covering that situation.

(c) AudioSeal watermark — every cloned-voice utterance is watermarked. This cannot be disabled. This is a hard requirement of EU AI Act Article 50 and our own foundational principles.

(d) In-band disclosure — every cloned-voice utterance begins with "Hi, this is Mira speaking for [your name]." This is on by default. You can disable it in Settings, but disabling requires a hard double-confirmation flow. Disabling disclosure does NOT disable the AudioSeal watermark.

(e) Your responsibility — by using Personal Voice, you take legal responsibility for everything Mira says in your voice. We log every utterance (in your local AI Disclosure Log) for your audit purposes. We do not log them on our backend. If you give Mira a standing rule to "screen calls in my voice," you're responsible for any liability that flows from those utterances.

5.3 You agree NOT to use Personal Voice to:#

Defraud anyone (financial transactions, contracts, etc.)
Impersonate someone other than yourself
Deceive someone in a context where deception would be unlawful (e.g., depositions, regulatory inquiries)
Generate content for illegal harassment

We may suspend your Personal Voice feature (without affecting the rest of your account) if we receive a credible legal complaint about its misuse. Disputes about feature suspension are governed by §11 below.

6. Subscriptions (Pro tier)#

6.1 What's included#

The Pro tier ($5/month, billed via Apple's In-App Purchase / Google Play Billing / Stripe depending on platform) includes:

A dedicated VoIP phone number via Telnyx that Mira can answer on your behalf
Conditional call forwarding helpers (your existing carrier line can forward to Mira when busy/unanswered)
All current free-tier features (memory, agent-to-agent messaging, apna.me/<handle> link)

6.2 Billing#

Monthly recurring, auto-renewing unless cancelled before the next renewal date
Payment method on file is charged on the billing date
Failed payments: 7-day grace period; after that, Pro features are suspended (free tier remains usable)
Cancellation: one tap from Settings → Subscription. Effective end of current billing period. No retention dark patterns; we will not ask you to "wait" or call support to cancel.

6.3 Refunds#

Subject to the applicable platform's refund policy (Apple, Google Play, Stripe). We do not provide refunds outside of those platform mechanisms.

6.4 Pricing changes#

We will notify you 30 days in advance of any price change. Continued use after the change date constitutes acceptance. If you don't want to accept the price change, cancel before the change date.

7. Acceptable use#

You agree not to:

Use Apna for anything illegal in your jurisdiction
Use Apna to harass, threaten, or harm others
Attempt to circumvent the security mechanisms in Apna (Double Ratchet, AudioSeal watermarks, etc.)
Use automated tooling to send spam through the Apna network (we may rate-limit agents that exceed reasonable usage)
Reverse-engineer the proprietary parts of Apna for competitive purposes (the open-source mobile clients are fair game post-v1.5; the backend signaling protocol is documented)

Violations may result in account suspension or termination. Subject to the acquisition-survival commitments in §8, you remain entitled to export your data even if your account is suspended.

8. Acquisition-survival ("Day-1 commitment")#

This section is non-negotiable and intentionally binding. We've included it because Apna users are extraordinarily sensitive to acquisition risk — our reference is Rewind/Limitless, which was acquired by Meta in December 2025 and kill-switched 14 days later (EU users lost access immediately).

If Apna is acquired, sold, restructured, or wound down, you have the following rights, which survive the transaction:

8.1 90-day continued service window#

We will maintain Apna's service for a minimum of 90 days after the acquisition or wind-down announcement, to allow you to export your data. This commitment is funded from a dedicated escrow account established at launch.

8.2 No plaintext data transfer#

Since we cannot decrypt your messages or read your memory graph, the maximum possible data transfer to any new owner is: DIDs, public AgentCards, push tokens, and encrypted envelope routing metadata. No plaintext content. No session keys. Ever.

If the new owner attempts to compel us to break this commitment, we will publicly disclose the attempt before complying with any court order.

8.3 30-day acquisition disclosure#

We will publish the full terms of any acquisition or restructuring within 30 days of the event, including: identity of the acquirer, financial terms (subject to confidentiality limitations), governance changes, and any planned changes to this ToS or the Privacy Policy.

8.4 No silent policy changes#

The new owner cannot change this ToS or the Privacy Policy without obtaining affirmative consent from each existing user. Default consent is "no." Continued use after notification without affirmative consent does NOT constitute consent.

8.5 Hostile acquisition / wind-down protection#

If a new owner refuses to honor commitments (8.1)-(8.4), the existing engineering team commits to immediately publishing:

The iOS and Android client source code under a permissive license (MIT or Apache 2.0)
The full wire-format specifications (already partially documented at docs/implementation/golden/ as of v1.0)
The cryptographic protocol details (already in spec §5)

This enables users to migrate to an independently-operated clone. We've designed the wire formats to make this clone-operable from day one.

8.6 Notification mechanism#

We will notify you of any acquisition or wind-down via:

In-app notification
Email (if you have provided one)
AirDrop (iOS) / Nearby Share (Android) push to your trusted contacts (so even if our channels are gagged, the news reaches you peer-to-peer)
Publication at apna.com/announcements (or equivalent)

9. Disclaimers#

Apna is provided "as is." We do not warrant that it will be uninterrupted, error-free, or compatible with every device. We do not warrant any specific outcome from using Mira — Mira is an AI agent and can make mistakes.

In particular:

Mira may misremember things, hallucinate details, or make incorrect assumptions about your preferences. The Settings → Memory Inspector lets you correct Mira's memory at any time.
Mira may say things you wouldn't say. If you've authorized Mira to act on your behalf via a standing rule, you take responsibility for those actions.
Mira's responses are not legal, medical, financial, or professional advice. If Mira gives you advice in those areas, treat it as a first draft to consult with a real human professional, not as a final answer.

10. Limitation of liability#

To the maximum extent permitted by applicable law:

We are not liable for indirect, incidental, special, or consequential damages
Our maximum aggregate liability for any claim arising from your use of Apna is the greater of: (a) $50, or (b) the amount you paid us in the 12 months preceding the claim
Nothing in this ToS limits liability for matters that cannot be limited under applicable law (e.g., death or personal injury caused by negligence)

EU users: the limitations above do not exclude statutory consumer rights that cannot be waived under applicable consumer protection law (e.g., 2-year warranty under EU consumer directives, where applicable).

11. Disputes and governing law#

These ToS are governed by the laws of [TO BE FILLED — Delaware or California recommended for US-based entity].

Mandatory pre-litigation contact: Before initiating any formal dispute, you agree to contact us at [TO BE FILLED] and give us 60 days to attempt informal resolution.

Class action waiver: To the extent permitted by applicable law, you agree that any disputes will be brought in your individual capacity and not as a member of any class action.

EU users: Notwithstanding the above, you retain your right to bring disputes in the courts of your member state of residence, in accordance with EU consumer protection law.

Arbitration vs court: [TO BE FILLED based on counsel's recommendation — current draft does NOT include mandatory arbitration; recommend against pre-litigation arbitration clauses given user-trust-sensitivity of the product.]

12. Termination#

You can terminate by:

Deleting the Apna app from your device (this stops billing for Pro tier on next renewal)
Settings → Privacy → Delete Everything (this also deletes your local data and your backend-side AgentCard registration)

We can terminate your account if you violate these ToS, subject to the data-export rights in Privacy Policy §6.1. Termination does not waive the acquisition-survival commitments in §8.

13. Changes to these Terms#

We will notify you in-app and via the notification channels in §8.6 at least 30 days before any material change. Continued use after the change date constitutes acceptance. For non-material changes (typo fixes, clarifications), we will note the "Last Updated" date but not provide individual notice.

Pre-acquisition policy change limit: We will not make material changes to these ToS in the 90 days before any planned acquisition or restructuring. This prevents the "sneak a bad policy change in before the deal closes" scenario.

14. Contact#

Support: [TO BE FILLED: support@apna.com] Legal notices: [TO BE FILLED — registered agent address] Acquisition / merger inquiries: [TO BE FILLED]

Legal disclaimer (DRAFT): This document is a first-pass engineering-team draft. It does not constitute legal advice. Final language is subject to review by qualified counsel in each jurisdiction where Apna is offered. The acquisition-survival commitments in §8 are reflective of our foundational design principles and engineering architecture, not necessarily standard ToS language; counsel may need to translate them into legally enforceable language while preserving their substance.