Terms of Service

These Terms of Service (“Terms”) govern your access to and use of the Atomic App Scanner (“Atomic Scanner”, the “Service”), operated by Atomic Security (“we”, “us”, “our”), a sole proprietorship (eenmanszaak) registered in the Netherlands. By creating an account, purchasing, or otherwise using the Service, you agree to these Terms. If you are using the Service on behalf of an organisation, you represent that you are authorised to bind that organisation, and “you” means that organisation.

1. Who we are

• Atomic Security — Keizersgracht 520H, 1017 EK Amsterdam, Netherlands
• KVK: 96494190
• BTW-id: NL005213092B78
• Contact: [email protected]

2. The Service

Atomic Scanner performs static analysis of Android application packages (APKs) that you upload. It decompiles the build and inspects its bytecode, resources, and manifest to produce a report of potential security and privacy issues, mapped to recognised standards (OWASP MASVS / MASTG). The Service analyses only the file you upload; it does not connect to, probe, or test your live servers, backend APIs, or any third-party system.

The Service is provided as software-as-a-service. We may add, change, or remove features over time. Detection rules and coverage evolve, and the number and type of checks may change.

3. Eligibility and accounts

You must be at least 18 years old and able to enter into a binding contract to use the Service. You are responsible for the accuracy of your registration details, for keeping your credentials and API keys confidential, and for all activity under your account. Notify us promptly at [email protected] if you suspect unauthorised use. You are responsible for the acts of everyone you invite into your workspace.

4. Acceptable use & authorisation

The Service is a security tool. You may use it only for lawful purposes and only on applications you are entitled to analyse. Specifically, you represent and warrant that, for every APK you upload, you either own it or have explicit authorisation from its owner to perform a security analysis of it.

Authorisation includes an application that is within the scope of a bug bounty or vulnerability-disclosure programme that permits its security testing — provided you comply with that programme’s rules, including any restrictions on reverse engineering, automated tooling, or handling of the application. You are responsible for confirming a target is in scope, and permitted to be analysed this way, before you upload it.

You are solely responsible for your use of the Service and any findings you act on. We may suspend or terminate accounts that breach this section.

5. Plans, credits & payment

The Service is offered as one-time scan purchases and as monthly subscriptions, at the prices shown at checkout. There is no free tier. Payments are processed by our payment provider (Stripe); we do not store your full card details.

• Subscriptions renew automatically each month until cancelled, and include a monthly scan allotment plus per-scan overage priced as shown for your plan. Your unused monthly allotment does not roll over — it resets each billing period. Separately purchased one-time scan credits do not expire.
• Prices are exclusive of any applicable VAT/turnover tax unless stated otherwise, which will be added where required.
• Non-payment. If a charge fails, we may suspend or downgrade your access until it is resolved.

6. Money-back guarantee

We stand behind the Service with a money-back guarantee on your first payment — whether a single scan or a subscription. If you are not satisfied, email us at [email protected] within 30 days of that first payment and we will refund it. The guarantee applies once per customer, to the first purchase only.

7. Cancellation

You can cancel a subscription at any time from your billing settings. Cancellation takes effect at the end of the current billing period; you keep access until then, and we do not pro-rate or refund the current period except under the money-back guarantee above or where mandatory consumer law requires otherwise. You can delete your uploads and results at any time.

8. Your content and data

You retain all rights to the applications you upload and to the reports the Service generates for you (“Your Content”). You grant us a limited licence to store and process Your Content solely to operate the Service and produce your results. We do not sell Your Content, share it for marketing, or use it to train models. Each upload is analysed in an isolated, network-isolated environment. How we handle personal data is described in our Privacy Statement.

9. Intellectual property

The Service, including its software, detection rules, user interface, and documentation, is and remains our property and that of our licensors, protected by intellectual-property law. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with your plan; no other rights are granted.

10. Availability

We work to keep the Service available and reliable, but we provide it on a commercially reasonable-efforts basis and do not guarantee uninterrupted or error-free operation. We may perform maintenance and may modify or discontinue features. Formal service-level commitments are available only under a separate Enterprise agreement.

11. Disclaimer

The Service assists you in identifying potential security and privacy issues. It is a tool, not a guarantee. Findings are provided for informational purposes and may include false positives, and the Service will not detect every vulnerability or issue in an application. A clean or partial report does not mean an application is secure. The Service is not a substitute for a comprehensive security assessment or professional advice, and you remain responsible for your own security decisions.

To the fullest extent permitted by law, the Service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, or that the Service will detect any particular issue.

12. Limitation of liability

To the fullest extent permitted by law, we will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill, arising out of or relating to the Service. Our total aggregate liability arising out of or relating to the Service will not exceed the amounts you paid us for the Service in the twelve (12) months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for intent or gross negligence, or a consumer’s mandatory statutory rights.

13. Indemnification

You will indemnify and hold us harmless from claims, damages, and costs (including reasonable legal fees) arising from your breach of these Terms — in particular your use of the Service on applications you were not authorised to analyse, or any unlawful use of the Service or its results.

14. Suspension and termination

You may stop using the Service and close your account at any time. We may suspend or terminate your access if you breach these Terms, if required by law, or to protect the Service or other users. On termination, your right to use the Service ends; we may delete your data a reasonable period afterwards, subject to legal retention obligations (see the Privacy Statement).

15. Changes to these Terms

We may update these Terms as the Service or the law changes. If we make material changes, we will take reasonable steps to notify you (for example, by email or an in-app notice). Your continued use of the Service after changes take effect constitutes acceptance. The date at the top shows when these Terms were last revised.

16. Governing law and disputes

These Terms are governed by the laws of the Netherlands. Any dispute will be submitted to the competent court in Amsterdam, the Netherlands, except where mandatory law (including consumer law) gives you the right to bring proceedings in another forum. If you are a consumer in the EU, you may also use the European Commission’s Online Dispute Resolution platform.

17. Contact

Questions about these Terms? Email [email protected].