Terms of service.

1. Agreement

These Terms of Service (the "Terms") govern your use of Flagship, operated by the Flagship team ("Flagship", "we", "us", "our"). By creating an account, buying hardware, or using any of our hosted endpoints (flagshipserver.com, flagship.services, *.flagship.services), you agree to these Terms. If you don't agree, don't use the service.

You must be at least 13 years old, or the age of digital consent in your jurisdiction, whichever is higher. If you're using Flagship on behalf of a company, you confirm you have authority to bind that company.

2. Your account

Your Flagship identity is anchored in your phone. We never see the private key. That has consequences:

• If you lose the phone and have not enabled iCloud Keychain / Google Block Store recovery, your account is unrecoverable. We can't recover it for you. We are explicit about this during setup.
• You are responsible for the security of your phone and your unlock factor (PIN, Face ID, Touch ID).
• You are responsible for actions taken from a paired device until you revoke its key.

Usernames are first-come-first-served and cannot be transferred. They are 3 to 30 characters: lowercase letters, digits and single hyphens, never at the start or end. We reserve the right to reclaim usernames that impersonate trademarks, public figures, or our own brand.

3. Hardware

Flagship does not sell hardware today. This section will apply only if we start offering pre-built boxes.

3.1 What you're buying

If you buy a pre-built Flagship box, you own the hardware outright on delivery. There is no remote disable, no "as-a-service" lockout, no firmware-level kill switch we control. The hardware will continue to function without our cooperation indefinitely.

3.2 30-day return

You may return the hardware within 30 days of delivery for a full refund of the purchase price. The hardware must be in working condition, complete with all included accessories, and packed reasonably. We pay return shipping inside the United States; outside the US, you pay return shipping. If the unit was dead-on-arrival or failed within 30 days through no fault of yours, we pay both ways.

3.3 Warranty

Pre-built boxes carry a one-year limited warranty against manufacturing defects. We'll repair or replace, our choice. The warranty does not cover physical damage, liquid damage, lightning, modifications, or wear on consumable components (we don't ship any, but for clarity).

3.4 Shipping and risk of loss

Risk of loss transfers on delivery to the carrier we ship with. Lost-in-transit shipments are our problem and we'll make you whole; we file the claim.

4. Subscriptions and billing

Flagship does not sell subscriptions or any other paid service today. Every feature is free, and nothing can be bought from us. This section will apply only if we start offering paid add-ons.

4.1 What you're subscribing to

Subscriptions cover optional add-ons we run on your behalf: push-notification volume, peer-backup matchmaking, hosted AI, and so on. The free tier (bring-your-own-hardware) doesn't require a subscription.

4.2 Cancel anytime

You can cancel any subscription at any time by emailing billing@flagship.services. We prorate the unused portion of the current period and refund within 10 business days. We don't have cancellation fees.

4.3 Price changes

We may change subscription pricing on 30 days' notice. If we do, existing subscribers are grandfathered on the prior price for at least 12 months. Hardware prices we set at order time are locked for that order.

4.4 Failed payments

If your payment fails we'll retry, then notify you. If it's still failing 14 days later, we'll suspend the affected add-on (not your account, not your subdomain). We don't sell your data to recover unpaid invoices.

4.5 Taxes

Prices are exclusive of sales tax, VAT, and similar. Where we collect tax, it's added at checkout. Where you owe tax we don't collect (some import duties), that's on you.

5. Acceptable use

You agree not to use Flagship, and not to operate services on a Flagship server, to:

• Store, distribute, or facilitate the creation of child sexual abuse material (CSAM). We will report and revoke without warning.
• Distribute malware, ransomware, exploit kits, or content designed to compromise other people's systems.
• Send unsolicited bulk email or messages ("spam"), or operate spam-supporting infrastructure (open relays, link laundries).
• Run phishing sites or impersonate third parties to deceive.
• Conduct denial-of-service attacks against any third party or any part of our infrastructure.
• Violate intellectual property rights you don't have permission to use.
• Engage in illegal activity under applicable law in your jurisdiction or ours.

"Spam-storage" (using your Flagship as a static-file or media host for spam links sent through other channels) also counts.

If you become aware that a server you control is being used for any of the above, take it down. If we become aware first, we'll act on the routing layer.

6. Our content and software

The Flagship name, logos, and marketing assets are ours. The source code is under BUSL-1.1 (becomes Apache 2.0 on 2030-05-03); see the LICENSE file in the repository for the full text. You may use, modify, and self-host the source under those terms; you may not use the Flagship name to imply endorsement of a fork without our written permission.

7. Your content

Anything you store on your Flagship server is yours. We do not claim a license to it, do not back it up centrally, and structurally cannot read it. The flip side: we cannot recover it for you, and we cannot moderate it. That tradeoff is the product.

Your voi.ci page is different: you publish it to our servers so anyone can see it, and section 8 covers it.

The one thing your server shares with us is a repo adaptation: the changes it made so a public open-source repo runs on Flagship, sent without anything that identifies you. You let us publish it, under that repo's own license, so other Flagship servers that import the same repo can use it.

8. voi.ci pages and Messages

You can publish a public page at voi.ci/<your username> (a photo, a display name, a short bio, links and posts) and let people with a Flagship account send you messages from it. You can also message other people's pages. This section adds rules for that. The rest of these Terms still apply.

8.1 Your page is public

Anyone can see your page, and it uses the same username as your apps and servers, so people can connect them. Only an admin device of your account can publish it. You can change it at any time, and deleting your account deletes it.

8.2 The rules

Before you first publish a page or send a message, the app asks you to agree to these rules. Your page and your messages must not contain:

• illegal content, including child sexual abuse material (which we report to the authorities and act on without warning);
• harassment, bullying or threats;
• nudity or sexual content, or graphic real-world violence outside a news context;
• spam, or messages sent in bulk to people who didn't ask for them;
• content that pretends to be someone else, or a page made to look like another person's or organization's;
• content that infringes someone else's copyright, trademark or other rights.

Section 5 (Acceptable use) applies to pages and messages too.

8.3 Reports, blocks, removal and bans

• Anyone can report. Every page has a "Report this page" link, and the app has Report on every message. You can also write to us (see /abuse).
• You can block. A page owner can block a visitor. The visitor isn't told; their new messages don't reach you.
• We review reports. A person at Flagship reviews each report. We aim to act on reports about pages and messages within 24 hours.
• We can remove a page. If a page breaks these rules or the law, we take it down: it stops showing on voi.ci and can't be published again until we restore it.
• We can stop an account from sending messages. If an account sends messages that break these rules, we ban it from Messages. Its servers and apps keep working. A ban also marks the phone it was used from, so a new account on that phone can't use Messages either.
• We tell you why, and you can appeal. The app tells you when we remove your page or ban your account, with the reason. You can appeal (/abuse#appeal).
• Limits. To slow spam, new accounts can start only a few new conversations a day, and a visitor can send only a few messages until you reply. These limits may change.

8.4 What we can and can't see

Messages are end-to-end encrypted: only the sender and the page owner's devices can read them. Visitors appear to a page owner under a name made for that page ("Visitor 4F3A"), never their username. Each message carries a tag that names the sender's account, sealed so that only Flagship can open it with a key we keep offline. We open it only when someone reports that message, to act on the report. The privacy policy lists everything we learn.

8.5 Permission to show your page

Your page stays yours. By publishing it you give us permission to store it, copy it to our servers and show it to anyone who visits voi.ci, only to run the page, until you change it or delete your account.

9. Copyright complaints (DMCA)

If you think something on a voi.ci page infringes your copyright, send a notice to our designated agent. We respond to notices under the U.S. Digital Millennium Copyright Act (17 U.S.C. § 512).

Designated agent:
[OWNER TO FILL BEFORE LAUNCH: the designated agent's name, exactly as registered at copyright.gov]
[OWNER TO FILL BEFORE LAUNCH: the agent's postal address, as registered]
[OWNER TO FILL BEFORE LAUNCH: the agent's phone number, as registered]
Email: abuse@flagship.services (subject "DMCA notice")

9.1 What a notice must include

• your physical or electronic signature;
• what work you say is infringed;
• the exact address of the material (for example https://voi.ci/name, and which post or photo);
• your name, postal address, phone number and email;
• a statement that you believe in good faith that the use is not authorized by the copyright owner, its agent or the law;
• a statement, under penalty of perjury, that the notice is accurate and that you are the copyright owner or allowed to act for them.

A notice that knowingly misstates infringement can make you liable for damages (17 U.S.C. § 512(f)).

9.2 What we do

When a notice is complete we remove or disable the material, usually by taking the page down, and tell the page owner, with a copy of the notice (we may remove the sender's personal contact details if the law allows).

9.3 Counter-notice

If your page was taken down and you believe that was a mistake or a misidentification, you can send a counter-notice to the same agent. It must include:

• your physical or electronic signature;
• what was removed and where it was before;
• a statement, under penalty of perjury, that you believe in good faith it was removed by mistake or misidentification;
• your name, address and phone number, and a statement that you consent to the jurisdiction of the federal district court for your address (or, if you are outside the United States, any judicial district in which Flagship may be found), and that you will accept service of process from the person who sent the notice or their agent.

We forward the counter-notice to the person who sent the notice. Unless they tell us within 10 business days that they have filed a court action, we restore the page 10 to 14 business days after we received the counter-notice.

9.4 Repeat infringers

We ban from voi.ci pages and Messages any account that repeatedly infringes copyright.

10. Disclaimers

Except for the express hardware warranty in §3.3, the service is provided "as is" and "as available," without warranty of any kind, express or implied. To the fullest extent permitted by law, we disclaim all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.

We do not warrant that the service will be uninterrupted, error-free, or secure against every conceivable threat. We do warrant, in good faith, the architectural properties described in /security, and we'll fix breaches of those properties as security issues, on the timeline in our security policy.

11. Limitation of liability

To the maximum extent permitted by law, our total aggregate liability arising out of or related to these Terms or the service will not exceed the greater of (a) one hundred US dollars ($100) or (b) the amount you paid us in the twelve months preceding the event giving rise to the claim.

Neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, or business opportunities, even if advised of the possibility.

Some jurisdictions don't allow these limits. If you live in one, the limits above apply only to the extent permitted there.

12. Indemnification

You'll defend, indemnify, and hold us harmless from third-party claims arising out of (a) your violation of these Terms, (b) your violation of applicable law, or (c) your content (including services you publish).

13. Termination

You may terminate at any time by deleting your account from the phone app. We may suspend or terminate your account on notice if you breach these Terms; for serious breaches (CSAM, active phishing, ongoing attack) we may act immediately and notify after.

On termination: routing entries for your subdomain are revoked, your voi.ci page and its messages are deleted, sub-processor data scheduled for deletion within 30 days (subject to billing-record retention in §2.4 of the privacy policy), the hardware you bought remains yours.

14. Governing law

These Terms are governed by the laws of the State of Delaware, United States, excluding its conflict-of-laws rules. The U.N. Convention on Contracts for the International Sale of Goods does not apply.

15. Dispute resolution

If we have a dispute, both sides agree to first try to resolve it by emailing legal@flagship.services with a written description and a proposed resolution. We'll respond within 30 days.

If that doesn't work, the dispute will be resolved by binding individual arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules, in English, in Delaware (or by phone / video where reasonable). Each side bears its own attorneys' fees except as the arbitrator awards. You and Flagship each waive the right to a jury trial and to participate in a class action.

You may opt out of this arbitration clause by mailing legal@flagship.services within 30 days of accepting these Terms; opting out doesn't affect any other provision. Nothing here prevents either side from seeking injunctive relief in court for IP infringement or unauthorized access.

16. Changes to these terms

We may update these Terms. If a change is material, we'll post a note in the dashboard, update the date at the top, and email account-holders at least 14 days before it takes effect. Continued use after that means acceptance. If you don't accept, terminate your account before the effective date.

17. Miscellaneous

• Entire agreement. These Terms (with the privacy policy and any plan-specific terms) are the whole deal between you and us regarding the service.
• Severability. If a clause is unenforceable, the rest stands.
• No waiver. Not enforcing something once doesn't waive it.
• Assignment. You can't assign these Terms without our written consent. We may assign in a merger, acquisition, or sale.
• Force majeure. Neither side is liable for delays caused by events beyond reasonable control (natural disaster, war, internet outage, etc.).

18. Contact

Legal questions: legal@flagship.services.
Billing questions: billing@flagship.services.
Postal: Flagship, address available on request.