01Subject
These Terms govern the use of QCloak ("the Application"), a messaging service with quantum-resistant, post-quantum end-to-end encryption. By using the Application you accept these Terms in full. If you do not accept them, do not use the service.
02Access requirements
Access is reserved for users who:
- are at least 18 years old;
- hold a valid registration code, issued by the organization that owns the domain they belong to;
- provide a verifiable phone number or email address, or sign in with their company credentials (Microsoft Entra ID).
The registration code is personal, can be used only once and expires. It must not be passed on to others.
03Account and security
3.1 You are responsible for the device on which you use the Application and for the activities carried out with your account.
3.2 Multiple devices. Your account can be linked to multiple devices at the same time. Each device generates and holds its own independent cryptographic key pair: if one device is compromised or removed, the security of the other devices linked to the same account is not affected.
3.3 Private keys cannot be recovered. They are generated and held exclusively on each device. Losing the device, uninstalling the Application or deleting its data means permanently losing access to the encrypted history on that device. This is a direct consequence of the security model adopted: there is no recovery mechanism, neither on the server nor from the provider.
3.4 You must promptly report any unauthorized use of your account to info@quantum2pi.com.
04Permitted use
You agree not to use the Application to:
- spread content that is unlawful, defamatory, obscene, violent, or that incites hatred or discrimination;
- harass, threaten or stalk other users;
- send unsolicited commercial communications (spam);
- infringe third-party intellectual property rights;
- spread malware or attempt to compromise the service infrastructure;
- impersonate others or falsify your identity;
- circumvent technical security measures, including those that keep domains separate.
05User content
5.1 You remain the owner of the content you send. Because it is end-to-end encrypted, the provider has no access to it and does not use it for any purpose.
5.2 You are solely responsible for what you send and for the consequences of its distribution.
5.3 Reports and blocking. You can block a user (who will no longer be able to send you messages) and report users or individual messages with the dedicated functions. Reports are reviewed by moderators; because the content is encrypted, you may be asked to provide further information.
5.4 The provider may suspend or deactivate accounts that violate these Terms, after reviewing the reports received.
06Service availability
6.1 The service is provided "as is". We do not guarantee that it is always available, uninterrupted or error-free.
6.2 We may suspend it temporarily for maintenance, updates or security reasons.
6.3 Message delivery. The Application attempts to deliver messages in real time and, if it cannot, keeps the message on the server until it is delivered. If the organization has enabled the "delete after reading" option, the message is removed from the server immediately after delivery. We do not guarantee long-term storage of messages on the server.
07Encryption and its limits
7.1 The Application encrypts message content on the sending device with AES-256-GCM, protecting the session key with the scheme configured by the organization, which may include post-quantum algorithms (ML-KEM-768, FIPS 203).
7.2 Encryption protects messages in transit and on the server. It does not protect against: compromised devices, screenshots or recordings made by the recipient, unauthorized physical access to an unlocked device.
7.3 Verify the identity of the people you talk to by comparing the Safety Number (verification code) through an independent channel. The Application flags key changes, which may indicate a change of device or an interception attempt.
08Limitation of liability
To the extent permitted by law, the provider is not liable for indirect damages, loss of data or loss of profit arising from the use or malfunction of the service. Liabilities that cannot be excluded by law, including those towards consumers, remain unaffected.
09Termination
9.1 You can stop using the service at any time by deleting your account from the Application (Profilo → Elimina definitivamente il mio account, i.e. Profile → Permanently delete my account). This action is irreversible.
9.2 The provider may suspend or close the account if these Terms are violated, or at the request of the organization that owns the domain.
10Changes to the Terms
Any changes will be published in this section. Continued use after publication constitutes acceptance of the new conditions.
11Governing law and jurisdiction
These Terms are governed by Italian law. The court of Naples has jurisdiction over any dispute, without prejudice to the mandatory jurisdiction of the consumer's court.