Terms Of Service
These Terms of Service are a binding agreement between you and Felix Mokaya (felixmokayabeatz) covering BeatzLock Authenticator: the mobile and desktop apps, the BeatzLock account and sync service, the update and download service, the ratings and feedback features, and the BeatzLock pages on the felixmokayabeatz.com website.
By creating a BeatzLock account, signing in, enabling sync, downloading an update, submitting a rating, or otherwise using BeatzLock, you agree to these terms. If you do not agree, do not use the app or the service.
These terms are versioned. This version accompanies BeatzLock Authenticator. Earlier published versions remain available in the document archive linked from the Terms of Service page, so you can always read the version that applied when you agreed to it.
1. Who provides BeatzLock
BeatzLock Authenticator is provided by Felix Mokaya (felixmokayabeatz).
Support and legal contact: support@felixmokayabeatz.com
Website: https://www.felixmokayabeatz.com
References to "BeatzLock", "we", "us", and "our" in this document mean the provider named above.
2. What BeatzLock is
BeatzLock Authenticator generates time-based one-time password (TOTP) codes for accounts you add to it, and offers optional services around that core function. Depending on your platform and version, BeatzLock provides:
· Local storage of OTP accounts on your device.
· Adding accounts by scanning a QR code with your camera, or by entering the issuer, label, and secret by hand.
· An optional BeatzLock account, used for cloud sync, recovery, and device management.
· Optional end-to-end encrypted cloud sync of your OTP accounts across your devices.
· App lock using a PIN or your device biometrics.
· Backup and recovery codes.
· Device session management, including naming, reviewing, and revoking the devices signed in to your account.
· Sign-in approval from an already trusted device, so you can sign in on a new device without re-entering everything.
· Security and account notifications, delivered in-app and by push.
· Update checks and app downloads.
· App ratings, reviews, and suggestions.
BeatzLock is a security tool. It reduces certain risks. It cannot guarantee that you will never lose access to an account, and it is not a substitute for keeping your own independent recovery options for accounts that matter to you.
3. Eligibility
You must be at least 13 years old to use BeatzLock. If the law where you live sets a higher minimum age for agreeing to online services or for consenting to the processing of your personal data, you must meet that higher age instead.
If you use BeatzLock on behalf of an organisation, you confirm that you are authorised to accept these terms for that organisation.
4. Your BeatzLock account
Local OTP code generation works without an account. A BeatzLock account is needed only for the online features: cloud sync, recovery, device sessions, notifications, and cross-device sign-in approval.
Your email address is your login. You may sign in with a password, with Google Sign-In on the website, or by approving the sign-in from a device that is already signed in to your account. Email verification codes are used to confirm that an address belongs to you.
You agree to give accurate account information, to keep your password and email account secure, and to keep your recovery material somewhere safe. You are responsible for activity carried out through your account, except where that activity results from a failure on our side to protect the service.
If you believe your BeatzLock account, your email account, or your recovery codes have been compromised, change your password, revoke the affected device sessions from inside the app, and contact support@felixmokayabeatz.com as soon as you can.
5. Your responsibilities
You are responsible for:
· Keeping your device, email account, password, PIN, and biometric enrolment secure.
· Storing your recovery and backup codes somewhere safe and private.
· Confirming that a code from BeatzLock works before you remove an OTP account from another authenticator or disable another second factor.
· Checking that scanned or manually entered OTP details are correct.
· Keeping the app updated when security or reliability updates are released.
· Reviewing your active device sessions and revoking any you do not recognise.
· Using BeatzLock only for lawful purposes.
You must not:
· Break, overload, probe, scan, reverse engineer, or otherwise abuse the service or its infrastructure.
· Use BeatzLock to access accounts you do not own or are not authorised to manage.
· Upload malware, harmful content, or unlawful data.
· Interfere with other users, their devices, or their sessions.
· Bypass or attempt to bypass app locks, authentication, rate limits, or other protective measures.
· Resell, sublicense, or commercially redistribute BeatzLock without written permission.
6. Licence
Subject to these terms, you are granted a personal, non-exclusive, non-transferable, revocable licence to install and use BeatzLock Authenticator on devices you own or control, for your own use or the internal use of your organisation.
BeatzLock, its name, its design, and its code remain the property of the provider and its licensors. Nothing in these terms transfers ownership to you. Your OTP data and your feedback remain yours, on the terms described below.
7. Encryption, sync, and what we cannot recover
Cloud sync is optional and off until you turn it on. When it is on, your OTP account data is encrypted on your device before it is sent, and the sync service stores only that encrypted payload. The service does not hold your OTP secrets in a readable form.
This design has a consequence you should understand before you rely on it:
· Your synced data is unreadable without the correct key material.
· If you lose your password, your recovery codes, your backup codes, and every device that holds your key material, we cannot decrypt your OTP accounts for you. No support request can undo that.
· Changing your account password may require your synced data to be re-encrypted.
· Deleting an OTP account on one device propagates that deletion to your other devices once they sync.
Alongside the encrypted payload, the service stores the account metadata it needs to run: your account record, device sessions, sync status and timestamps, version counters, deletion markers, and security event records.
8. Backup and recovery codes
Backup and recovery codes are as sensitive as a password. Anyone holding a valid code may be able to regain access to your BeatzLock account or the data tied to it.
Store them offline and privately. Do not photograph them into a cloud gallery, paste them into a chat, or keep them only on the device they protect. If you think a code has been exposed, generate a new set immediately; generating a new set invalidates the old one.
9. Device sessions and sign-in approval
Each device signed in to your BeatzLock account creates a device session. Sessions record enough to let you tell your devices apart and revoke the ones you do not recognise: a device label, device type, an identifier for the device, the network address the session was seen from, and when it was last active.
You may be able to designate a primary device. Where the app supports approving a sign-in from an existing device, approving a request grants the requesting device access to your account. Approve a request only when you initiated it yourself and can confirm the device shown is yours.
Revoking a session ends that device's access. Revoke any session you do not recognise, and change your password afterwards.
10. Notifications
BeatzLock sends security and account notifications, such as sign-in alerts, password and PIN changes, backup code generation, and sign-in approval requests. Push delivery uses Firebase Cloud Messaging, a Google service.
Security notifications are part of how the service protects your account, so they cannot be turned off entirely. You can control push permission through your device's operating system settings, but doing so means you may not learn about account activity promptly.
11. Ratings, reviews, and feedback
If you submit a rating, review, comment, or suggestion, you grant BeatzLock permission to store it, display it publicly on the ratings pages, edit it for formatting or length, and use it to improve the app. Where you have signed in, the display name you choose may be shown alongside your review, and we may publish a reply to it.
Do not put secrets in a review. Never submit OTP codes, OTP secrets, passwords, recovery codes, backup codes, or personal information about anyone else.
Reviews that are abusive, unlawful, deceptive, spam, or that expose someone's private information may be hidden or removed. You may edit or delete your own review through the app or the ratings page.
12. Updates and changes to the app
BeatzLock may issue updates, bug fixes, security patches, new features, and changes to existing features. Some features require a recent version of the app, and older versions may stop working with the online service.
We may change, suspend, or withdraw a feature where that is needed for security, reliability, legal compliance, maintenance, or product reasons. Where a change removes something you rely on, we will give notice where it is reasonable to do so.
13. Third-party services and accounts
BeatzLock helps you hold OTP codes for other people's services, but it does not control those services. Your use of a third-party account stays subject to that provider's own terms, security rules, and recovery process.
If a third-party service rejects a code, changes its sign-in flow, locks your account, or requires a different recovery method, you must resolve that with the third party. BeatzLock also relies on third-party providers for hosting, email delivery, push messaging, sign-in with Google, and app distribution, each governed by its own terms.
14. Privacy
The BeatzLock Privacy Policy explains what information is collected, why, how long it is kept, and what choices you have. It forms part of your agreement with us. By using BeatzLock you also accept the Privacy Policy for the same version of the app.
15. Security, and the limits of it
BeatzLock uses measures intended to protect the service and your data, including client-side encryption of synced OTP data, token-based sessions, device session controls, app lock, rate limiting, and server-side hardening.
No app, network, server, encryption design, or device is completely secure. You accept that residual risk, and you agree to keep independent recovery options for accounts that are important to you.
16. Availability
BeatzLock may be unavailable at times because of maintenance, updates, network problems, hosting provider incidents, defects, security events, or circumstances outside our control.
Generating codes for accounts already on your device does not require our servers and should continue to work offline. Sign-in, sync, recovery, notifications, device session management, update checks, ratings, and loading these legal documents do require server access.
17. No professional advice
BeatzLock is a general-purpose authentication tool. It does not provide legal, financial, medical, compliance, or professional security advice, and it is not certified for any particular regulatory regime.
Deciding whether BeatzLock is appropriate for your personal, business, or organisational use, including any compliance obligations you have, is your responsibility.
18. Disclaimer of warranties
BeatzLock is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, we disclaim all warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement, and we do not warrant that the app or service will be uninterrupted, error-free, or fully secure.
Some jurisdictions do not allow certain warranty exclusions, so parts of this section may not apply to you. Nothing here removes rights you have as a consumer that cannot be waived.
19. Limitation of liability
To the fullest extent permitted by law, BeatzLock and its provider will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of data, loss of access to accounts, loss of profits, or business interruption, arising out of or connected to your use of BeatzLock.
To the fullest extent permitted by law, our total aggregate liability arising out of or connected to BeatzLock is limited to the greater of the amount you paid us for BeatzLock in the twelve months before the claim, or fifty United States dollars.
Nothing in these terms limits liability that cannot lawfully be limited, including liability for death or personal injury caused by negligence, or for fraud.
20. Indemnity
You agree to indemnify and hold harmless the provider of BeatzLock against claims, losses, and reasonable costs arising from your unlawful use of the service, your breach of these terms, or your infringement of another person's rights. This does not apply to the extent the claim results from our own breach or negligence.
21. Suspension and termination
You may stop using BeatzLock at any time. You may delete your account, or request deletion, using the controls in the app or by contacting support.
We may suspend or terminate access if you breach these terms, create a security risk, abuse the service, or where continuing to provide the service to you becomes legally or technically impractical. Where it is reasonable and lawful to do so, we will give notice and an opportunity to put things right first.
On termination, your licence ends. OTP accounts already stored on your device stay on your device until you remove them or uninstall the app. Server-side data is handled as set out in the Privacy Policy.
22. Governing law
These terms are governed by the laws of the Republic of Kenya, without regard to conflict-of-law rules, and the courts of Kenya have jurisdiction over disputes arising from them.
If you are a consumer resident elsewhere, this does not deprive you of the protection of mandatory consumer law in your country of residence, or of the right to bring proceedings there where that right cannot be excluded.
23. Changes to these terms
We may update these terms. Each update is published as a new version with its own date, and the version it replaces is moved to the public archive rather than deleted, so you can compare them.
Where a change is significant, we will give notice in the app, on the website, by email, or by another reasonable method before it takes effect. Continuing to use BeatzLock after a change takes effect means you accept the updated terms. If you do not accept them, stop using the service and delete your account.
24. General
If any provision of these terms is found unenforceable, the rest stays in force and the unenforceable provision is applied as closely as possible to its original intent. A delay in enforcing a right is not a waiver of it. You may not assign these terms without our consent; we may assign them as part of a transfer of the service, on notice to you.
These terms, together with the Privacy Policy for the same version, are the entire agreement between you and us about BeatzLock.
25. Contact
For questions about these terms:
Felix Mokaya (felixmokayabeatz)
Email: support@felixmokayabeatz.com
Website: https://www.felixmokayabeatz.com
Apps Website: https://www.apps.felixmokayabeatz.com
Portfolio Website: https://www.portfolio.felixmokayabeatz.com