Updated: 1 November 2026.
1. Provider, product and scope
The provider and contracting party is schukai, postal address Eichenstraße 26, 82290 Landsberied, Germany, email: hey@schukai.com. Full legal-provider details are in the imprint. These terms describe Community and Hosted Team 1.0 for Android, Linux and the associated browser features. The Android package is com.schukai.withincells. The separate privacy notice applies to personal data.
Google Play is the primary sales channel for the paid offering. As an alternative, schukai offers Hosted Team to business customers through an individual offer and invoice. A schukai-operated online shop is planned for later and does not currently exist; these terms do not offer ordering through a schukai web checkout. Android purchases through Google Play are also subject to the contract, payment and store terms disclosed before purchase. The applicable document version and required information must be accessible when the actual contract is formed. A public page alone does not establish valid incorporation.
2. Community and Hosted Team
Community is free and allows encrypted local transfers between paired devices, including professional use. It requires no paid Hosted entitlement.
Hosted Team covers one organization with at most five simultaneously active internal devices, including the administrator device. Membership, roles, device keys and valid server-side entitlement determine access. A client switch or purchase-status display alone grants no additional rights. Additional capacity requires a separate offer.
The intended Hosted scope includes encrypted request/response transfer, the organization inbox, encrypted templates, domain proof, Secure Drop and configurable notifications. Domains and external delivery destinations must meet the applicable proof and security requirements. Purchasing Team grants no access to other organizations or their content.
3. Price, orders and term
The intended direct offer is EUR299 net per organization per year, plus VAT where applicable. The price displayed before ordering and the incorporated specific offer are binding. There is no free consumer trial.
Google Play displays the localized consumer price applicable to the purchase, including the taxes taken into account there. The annual term, any automatic renewal and its price, and cancellation method must be disclosed in the actual store offer before purchase. A direct offer's net price is not presented as a consumer's final price.
Direct orders are offered exclusively to business customers through hey@schukai.com. An inquiry is not an order. schukai sends a specific offer in text form identifying the organization, service scope, price, payment due date, commencement, contract-year end and incorporated document versions. The contract is formed when schukai receives unmodified acceptance within the offer's binding period. An activation code alone forms no contract and does not change the agreed term.
schukai issues an invoice referencing the accepted offer and agreed service period. The invoice alone creates no additional contract and changes no agreed term. Activation uses a code associated with the ordering organization under the offer's payment and activation provisions. A delay by schukai in initial provision does not shorten the service period owed. The contract confirmation states specific commencement and expiry dates; the applicable time zone is Europe/Berlin.
For new B2B direct contracts, the term is one contract year from commencement as stated in the offer. Unless cancelled, the contract renews for another contract year. You may cancel at any time with effect at the end of the current contract year without an additional advance-notice period. Cancellation must reach schukai by 23:59:59 Europe/Berlin on the final day of that contract year. A contract year is not the calendar year.
Cancellation by email to hey@schukai.com is sufficient, with information allowing the contract to be identified, such as the offer number and organization. schukai confirms receipt and expiry in text form. An absent confirmation does not invalidate cancellation received in time. The right to terminate for cause remains unaffected. This new rule does not retroactively change earlier contracts. A direct purchase does not cancel an existing Play subscription. Any switch is expressly coordinated with regard to term and entitlement to avoid an unintended duplicate order.
This B2B renewal clause does not apply to Google Play. The final price, initial term and mandatory rights for the actual market must be disclosed before purchase. For covered consumer subscriptions in Germany, automatic renewal after the initial term must not create another fixed annual commitment; the renewed relationship must be cancellable at any time with no more than one month's notice. Annual billing does not remove this right. The actual plan and purchase screen must implement these rights.
Manage and cancel subscriptions through Google Play, Payments and subscriptions → Subscriptions, or Google Play subscriptions. Uninstalling alone does not cancel a subscription. For German subscriptions with billing periods longer than a month, starting on or after 1 March 2022, Google describes immediate cancellation and a proportional refund after the initial term; the steps available for your purchase are shown in Google Play. An absent store option does not restrict statutory rights.
For content acquisition, the reviewed German Google Play terms name Google Commerce Limited as an additional contracting party, and Google Ireland Limited for store operation. schukai's role as provider of its software and Hosted service remains separate; the store contracting party for your purchase is identified in your order confirmation.
4. Entitlements, restoration and review access
The service verifies purchase evidence and current validity for the intended app, organization and environment. Purchase evidence replaces neither membership nor possession of private device keys. Transfer or restoration must meet the ownership, abuse-prevention and key requirements; a purchase alone does not restore lost content keys.
Complimentary review rights are a separate entitlement source, limited in time and capacity. They are neither a paid subscription nor a consumer trial. Normal organization, key and security rules apply; they expose no customer data or operator access.
Expiry, revocation or justified suspension can restrict new Hosted operations. Intended local Community use and promised local export/deletion facilities do not thereby become newly paid rights. A service or verification outage grants no new paid rights; its precise handling must match the approved service scope.
5. Security, keys and backups
WithinCells supports controlled transfer of sensitive content. Users protect their devices, check recipients and keep required private keys and recovery materials outside a single device. A password already inserted can remain in a destination application or compromised device. Retiring a message does not revoke that password at its destination.
Encrypted Relay payloads are deleted on completion or expiry and are not backed up or WAL-archived. Server loss can irretrievably lose unexpired Relay content. At the planned launch, implementation and verification of production Control backups are deferred until after release. The documented operator exception runs from 2026-10-27T22:14:10Z until 2026-11-10T22:14:10Z (exclusive). Before implementation and verification, no available or recoverable Control backup is promised; loss of durable Control data may also be permanent. Expiry of the exception does not establish that a backup has been implemented.
Separate encrypted Control backups, including encrypted templates and entitlement metadata, are planned. A backup implemented later does not retrospectively restore previously lost data and does not recover private content keys or arbitrary individual historic records. Scope, retention and recovery of backups implemented later are described in the applicable operational schedule. Internal RPO/RTO targets create no additional availability or recovery guarantee without an express agreement.
Where schukai processes personal data for the organization, the required data processing agreement with specific schedules and subprocessor details must be concluded before use. Content encryption does not replace that assessment.
6. Licence and acceptable use
schukai grants a simple, non-exclusive right to use the acquired offer within its scope. Professional Community use is permitted. Third-party rights and separate open-source licences remain unaffected. Unlawful acquisition of secrets, unauthorized disclosure, attacks on others' systems and circumvention of entitlement or security controls are prohibited. Statutorily permitted activities remain permitted.
7. Updates, changes and incidents
schukai provides legally required updates, including security updates, and communicates them through the intended distribution channel. Security, platform, legal or protocol requirements can require changes. Statutory information, change and termination rights apply to further changes; a general change clause does not remove an essential agreed service. A security incident may require temporary restriction, limited to the necessary extent.
8. Consumer rights, defects and liability
Withdrawal, refunds and mandatory consumer rights follow applicable law and the procedure supplied for the actual purchase. Activation alone does not waive withdrawal rights. Their expiry requires the applicable statutory conditions and declarations. For Play purchases, use the withdrawal and refund procedures in your order confirmation and Google Play. You may also contact hey@schukai.com; this does not restrict mandatory rights. The alternative direct channel in section 3 is exclusively for business customers and offers no consumer web checkout.
Statutory remedies for defects remain intact. schukai is liable without limitation for intent, gross negligence, injury to life, body or health, and where mandatory law requires it. Liability for slightly negligent breach of essential contractual duties is limited to foreseeable loss typical of the contract. Mandatory liability is not restricted.
9. End of contract and new versions
Cancellation or expiry does not automatically erase local organization data or private keys. Back up or export required local data before uninstalling. Server deletion, permitted retention and backup expiry follow the privacy/operational rules and applicable legal duties; contract end does not promise immediate removal of all metadata.
German law applies, without displacing mandatory consumer protection at the consumer's habitual residence or statutory jurisdiction. New terms change an existing contract only through a legally valid process. schukai is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board. The previous version continues to govern contracts validly concluded under it unless a valid amendment is agreed.