Dignity Labs

Terms of Service

Suracode — App Addendum

Effective Date: 9 May 2026 · Last Updated: 9 May 2026

This addendum supplements the Dignity Labs Base Terms of Service. By using Suracode, you agree to both the base terms and this addendum. If there is any conflict, this addendum prevails for Suracode.

S1. Description of Service

Suracode is a family safety application built around four features:

VERIFY — Create and share an encrypted family code word to verify each other's identity during phone or video calls. Daily rotating gestures add a second factor for video calls that AI cannot predict.
CHECK — Check suspicious messages against 700+ known scam indicators using on-device pattern matching. On supported devices, on-device AI provides additional analysis. Pro adds threat intelligence lookups against external databases for URLs, phone numbers, and email addresses.
SIGNAL — Daily opt-in check-in. One voluntary tap to let family members know you are OK. Not continuous GPS tracking. Not surveillance. The absence of a signal is passive awareness.
VAULT — Encrypted family emergency information. Medications, allergies, emergency contacts, insurance numbers, documents. Encrypted with the family key. Every member can read. Each person maintains their own entries.

The App is designed to help families protect themselves against voice impersonation scams, including those using artificial intelligence, and to keep important safety information accessible within the family.

S2. Account and Family Groups

S2.1 Account Authentication

The App uses Google Sign-In or Apple Sign-In to authenticate your identity. Authentication is handled entirely by Supabase Auth, our backend infrastructure provider. When you sign in:

Your Google or Apple credentials are verified by the respective provider
Supabase Auth creates a session linked to an anonymous unique identifier (UUID)
We do not store your email address, display name, or authentication credentials in our application database
Your identity within the App is represented solely by an anonymous UUID

You are responsible for maintaining the security of your Google or Apple account. We are not liable for any unauthorised access resulting from compromise of your third-party authentication credentials.

S2.2 Family Groups

Creating a family: Any user can create a family group
Joining a family: Others join by entering an invite code shared by an existing member
Invite codes: The invite code contains both a join code and encryption key material (format: SC3-JOINCODE-ENCRYPTIONKEY). Invite codes expire after 7 days.
Equal members: All family members have equal status. There is no admin role. Any member can change the code word, generate invites, check in, and use all available features. All actions are logged and visible to every member.
Member limits: Maximum 20 members per family. Maximum 5 families per user.
Leaving a family: Any member can leave at any time. If the departing member is the subscriber (see Section S5.2), the family reverts to the free tier.
No member removal: No member can remove another member from a family group. If a family member needs to be excluded, the other members should leave and create a new family group without that person.

S2.3 Your Responsibilities

In addition to the general responsibilities in the base terms, you are responsible for:

Keeping your PIN secure
Only inviting trusted family members
Not sharing invite codes publicly or with strangers
Sharing invite codes through secure channels (in person, encrypted messaging, etc.)
Notifying family members if you believe security has been compromised

S2.4 Audit Trail and Transparency

All safety-critical actions within a family group — including safe word changes, membership changes, check-ins, and vault entry additions — are logged and visible to every member of that family group. No member can make changes to the family's safety infrastructure without those changes being recorded and visible to all other members.

S3. Suracode-Specific Prohibited Use

In addition to the general prohibited uses in the base terms, you must NOT:

Abuse the scam checker by uploading inappropriate content
Use SIGNAL check-ins to monitor, track, or coerce any person
Use the VAULT to store highly sensitive credentials such as banking passwords, PINs, Social Security or National Insurance numbers, or credit card security codes
Use any output of the App — including risk levels, votes, gesture checks, or audit records — as evidence, proof, or supporting material in any legal, regulatory, insurance, banking, or dispute resolution proceeding (see Section S7.9)
Stage or fabricate reliance on any feature of the App to support a claim against any party

S4. Free Tier

The free tier of Suracode works offline, without authentication, and without payment:

Feature	Detail
CHECK — Pattern matching	On-device analysis against 700+ known scam indicators. Nothing leaves your device.
CHECK — On-device AI	Where device hardware supports it (Apple Foundation Models on iOS, Gemini Nano on Android), additional AI analysis runs entirely on your device. Availability depends on your device model and operating system version.
CHECK — QR decode	Scan QR codes to check URLs before visiting them
VERIFY — Single-device safe word	Create and reveal a family code word on one device
Security	PIN and biometric protection

S5. Pro Features and Pricing

Pro includes all free features plus:

Feature	Detail
VERIFY — Multi-device sync	Safe word syncs across all family members' devices in real-time via end-to-end encryption
VERIFY — Daily gesture	Daily rotating verification gesture for video calls. A second factor that AI cannot predict.
CHECK — Threat intelligence	URLs, phone numbers, and email addresses extracted from scanned messages are checked against external threat databases (Google Web Risk, IPQS, EmailRep) via our server. No message content is shared.
SIGNAL — Check-ins	Daily opt-in check-in system. One tap. Family sees the signal. Missed check-in notifications to family members.
VAULT — Emergency info	Encrypted family emergency information. Medications, allergies, contacts, insurance, documents. End-to-end encrypted. File attachments supported.
Multi-family	Create or join up to 5 family groups
Up to 20 family members	Per family group

S5.1 Pricing

Monthly Subscription: £3.99/month
Billed monthly. Auto-renews unless cancelled at least 24 hours before the end of the current billing period.

Annual Subscription: £34.99/year
Billed annually. Auto-renews unless cancelled at least 24 hours before the end of the current billing period.

Lifetime Purchase: £99.99 one-time
A one-time payment that provides Pro features without recurring charges. "Lifetime" refers to the operational lifetime of the Service — meaning for as long as Dignity Labs Ltd continues to make the App available. If Dignity Labs Ltd voluntarily and permanently discontinues the Service, no refund is owed. Temporary unavailability (including app store removal, maintenance, or service interruptions) does not constitute discontinuation. The lifetime purchase is non-refundable after 14 days (or such longer period as required by applicable consumer law).

S5.2 Family Subscription

Any family member can subscribe to Pro. When a member subscribes, Pro features are extended to all members of that family group ("Family Subscription"). Under a Family Subscription:

The subscribing member selects a Pro plan and all members of their family group receive Pro features
If the subscribing member cancels their subscription, Pro access ends for all family members at the end of the current billing period
If the subscribing member leaves the family group, Pro access ends for the remaining members immediately unless another member subscribes independently
Each family group requires its own subscription — if you are a member of multiple family groups, Pro access applies only to the group linked to the subscription
The subscribing member's billing relationship is with their app store provider (Google or Apple), not with Dignity Labs Ltd — see Section S5.3 for cancellation instructions

S5.3 How to Cancel

You may cancel your subscription at any time through your app store account settings:

Google Play: Open the Google Play app → tap your profile icon → Payments & subscriptions → Subscriptions → Suracode → Cancel subscription
Apple: Open Settings → tap your name → Subscriptions → Suracode → Cancel Subscription

Cancellation takes effect at the end of the current billing period. You retain access to Pro features until that date. Deleting the App from your device does not cancel your subscription — you must cancel through your app store. We do not process cancellations directly. Cancelling your subscription is no harder than subscribing.

S5.4 Cooling-Off Rights

If you are a consumer in the United Kingdom, European Union, or European Economic Area, you have a statutory right to cancel your subscription within 14 days of purchase without giving a reason. This right applies to your initial subscription and to any renewal that commits you to a further period of 12 months or more (such as an annual plan).

To exercise this right, cancel through your app store account (see S5.3) or contact us at [email protected]. If you have already used Pro features during the cooling-off period, you may be charged a proportionate amount for the service received. Refunds under cooling-off rights will be processed within 14 days of receiving your cancellation request.

S5.5 What Happens When Your Subscription Ends

If your Pro subscription expires or is cancelled, your account reverts to the free tier at the end of the current billing period. You retain access to all free tier features. Pro features (threat intelligence lookups, multi-device safe word sync, daily gesture, SIGNAL check-ins, VAULT, and multi-family) become unavailable. Existing vault entries remain readable but you cannot create new entries until someone in the family resubscribes. Data associated with Pro features is retained on our servers for 90 days in case you resubscribe. After 90 days, Pro-only data may be deleted.

S6. Encryption

S6.1 How It Works

When you create a family, an encryption key is generated on your device
This key is combined with a join code to create an invite code
You share this invite code with family members via text, email, or in person
The encryption key portion never passes through our servers separately — it's only transmitted when you choose to share it
Your code word and vault entries are encrypted on your device before transmission using AES-256-GCM
Our servers store only encrypted data — we cannot decrypt it
Only devices with the family key can decrypt the code word and vault entries

S6.2 What This Means

Even if our servers were compromised, your code word and vault entries would remain protected
Dignity Labs staff cannot read your code word or vault contents
Law enforcement requests cannot reveal your code word or vault contents (we don't have the key)
You control who receives the invite code and how it's shared

S7. Suracode-Specific Disclaimers

S7.1 No Guarantee of Scam Prevention

IMPORTANT: Suracode is a communication tool designed to help verify identity. It is NOT a guarantee against scams or fraud. We cannot guarantee that scammers will not find ways to circumvent identity verification. The App is one layer of protection, not a complete security solution. You should always exercise caution with unexpected requests for money or personal information.

S7.2 Scam Checker — What It Is and What It Is Not

The Scam Checker compares content you submit against a database of known scam indicators that we maintain. Where your device supports it, on-device AI may provide additional analysis. The results are provided for information only. They are not advice, not a recommendation, and not an assurance of any kind. We do not accept responsibility for anything you do or do not do based on a Scam Checker result.

The Scam Checker works by pattern-matching against known indicators at the time of analysis. It cannot identify every scam — particularly new methods, targeted attacks, or threats not yet in our database. A result showing low or no risk does not mean the content is safe, legitimate, or free from fraud.

By using the Scam Checker, you acknowledge and agree that:

(a) No automated system can detect every fraudulent or deceptive message.

(b) The Scam Checker is one tool among many — it does not replace your own judgement, independent checks, or professional advice.

(c) You are solely responsible for any decision you make about a message, regardless of the risk level the Scam Checker returns.

(d) We do not guarantee that our scam indicators database is complete, accurate, or up to date, or that results based on it will be correct.

(e) Our indicators database is compiled internally by Dignity Labs Ltd. It does not claim to cover all known scam methods or to include intelligence from law enforcement, regulators, or consumer protection bodies.

(f) The Scam Checker does not monitor or scan your messages automatically — you choose what to submit. Pattern analysis and on-device AI analysis happen on your device. For Pro subscribers, URLs, phone numbers, and email domains extracted from scanned text may be sent to external threat databases via our server for additional checking.

(g) Screenshots and images you submit to the Scam Checker never leave your device. Message content and extracted text are not transmitted. Pro features send only extracted URLs, phone numbers, and email domains to external threat databases — no message content is shared. See our Privacy Addendum for details.

(h) Dignity Labs Ltd does not owe you a duty of care or advisory obligation in connection with the Scam Checker or its results.

(i) The Scam Checker may produce false positives (legitimate content flagged as suspicious) and false negatives (fraudulent content not flagged). Neither gives rise to any claim against Dignity Labs Ltd.

(j) You must not treat any risk level or assessment as the deciding factor in whether to act on a message.

(k) On-device AI analysis, where available, uses third-party AI models provided by Apple (Apple Foundation Models) and Google (Gemini Nano). We do not control the accuracy or behaviour of these models. AI-generated analysis is supplementary to pattern matching and is subject to the same limitations described in this section.

To the fullest extent the law allows, Dignity Labs Ltd is not liable for any loss, damage, cost, or harmful outcome of any kind arising from reliance on any Scam Checker result — including financial loss, identity theft, unauthorised transactions, data compromise, or emotional distress.

This does not exclude liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under the Consumer Rights Act 2015, the Consumer Protection from Unfair Trading Regulations 2008, or other mandatory law.

This clause is drawn to your attention through (i) the first-use acknowledgement screen shown before you first use the Scam Checker, (ii) the "About this tool" button on the Scam Checker screen, and (iii) these Terms. This clause is written in plain language as required by section 68 of the Consumer Rights Act 2015.

All rights and remedies are fully reserved.

S7.3 On-Device AI

Where supported by your device hardware, the App may use on-device AI models (Apple Foundation Models on iOS, Gemini Nano on Android) to provide supplementary scam analysis. This analysis runs entirely on your device — no data is sent to our servers or to Apple or Google for this purpose. On-device AI availability depends on your device model, operating system version, and whether the required AI models have been downloaded to your device by the operating system. We do not control AI model availability, updates, or removal by Apple or Google. On-device AI results are informational only and are subject to all disclaimers in Section S7.2.

S7.4 SIGNAL Check-Ins (Pro Feature)

The SIGNAL check-in feature is a voluntary, opt-in daily check-in. It is not continuous tracking, GPS monitoring, or surveillance. The absence of a check-in is informational only — it does not constitute an alert or an emergency signal. Missed check-in notifications are informational, not alerts. Suracode is not a substitute for emergency services. In any emergency, call 999 (UK), 911 (US), or your local emergency number.

We cannot guarantee delivery of check-in notifications. Push notification delivery depends on device settings, network conditions, and platform services.

S7.5 VAULT (Pro Feature)

The VAULT stores encrypted emergency information. It is not a substitute for professional password managers for highly sensitive credentials such as banking passwords. The App cannot guarantee protection against all forms of attack. Security relies on your device and PIN/biometrics.

Information you add to the VAULT is visible to all members of your family group. You are responsible for only sharing information with trusted family members and understanding that all family members can read all vault entries.

S7.6 Scam Alerts

Scam alerts are sourced from third-party organisations including NCSC, Action Fraud, FCA, Which?, UK Finance, and others. We do not guarantee accuracy, completeness, or timeliness of alerts. Alerts are for informational purposes only. We are not responsible for third-party content or inaccuracies. Alerts may be cached locally for offline access and are filtered by region based on your device locale.

S7.7 Deepfake Video Call Check (Pro Feature)

The gesture verification feature is one layer of protection against deepfake video calls, not a guarantee. It may not detect all deepfake technologies, especially as AI advances. It should be used alongside other verification methods. The App displays the gesture to you only — it does not record, monitor, or verify whether any person performed the gesture, and cannot confirm or deny anyone's identity.

S7.8 Additional Liability Exclusions

In addition to the exclusions in the base terms, Dignity Labs Ltd shall not be liable for:

Any losses arising from scams, fraud, or identity theft
Any losses arising from reliance on scam checker results, on-device AI analysis, scam alerts, or family votes
Any losses arising from deepfakes or AI-generated impersonation
Any losses arising from missed or failed check-in notifications
Any losses arising from the use of any App output in any legal, regulatory, insurance, or dispute resolution proceeding

S7.9 Additional Indemnification

In addition to the indemnification in the base terms, you agree to indemnify Dignity Labs Ltd against claims arising from:

Your external sharing of screenshots or other content
Your use of any App output in any legal, regulatory, insurance, or dispute resolution proceeding

S7.10 Evidentiary Limitations and Anti-Fraud Provision

No output of this App — including risk levels, votes, gestures, check-in records, vault entries, audit records, or any other feature — is intended for use as evidence, proof, supporting material, or due diligence in any legal, regulatory, insurance, banking, financial, or dispute resolution proceeding of any kind.

This applies to every feature of the App:

(a) Scam Checker results — A low-risk or no-risk result does not prove that a message is safe, legitimate, or free from fraud. It cannot be used as evidence of due diligence, verification, or good faith in any proceeding or claim.

(b) On-device AI analysis — AI-generated analysis does not constitute expert opinion, professional assessment, or verified fact. It cannot be used as evidence of any of these things.

(c) Deepfake gesture check — The gesture check does not prove that a video caller's identity has been verified. The App cannot confirm or deny anyone's identity. It cannot be used as evidence of identity verification.

(d) Family code word — Successful or unsuccessful use of a code word does not prove that any person's identity has been confirmed or denied. It cannot be used as evidence of identity verification.

(e) SIGNAL check-ins — Check-in records do not prove a person's location, wellbeing, or availability. The absence of a check-in does not prove distress, danger, or incapacity. Check-in records cannot be used as evidence of any of these things.

(f) VAULT entries — Vault entries are user-created content. They do not constitute verified medical records, legal documents, or official emergency information. They cannot be used as evidence of accuracy or completeness.

(g) Audit logs — Logs maintained by the App are for internal purposes only. They are not designed or intended as forensic, legal, or regulatory evidence.

(h) Using any App output in the ways described in this section is expressly prohibited under Section S3 and is a material breach of these Terms.

Dignity Labs Ltd is not liable for any consequence arising from anyone using any App output in any proceeding, claim, or dispute.

S8. Data Deletion

You can delete your Suracode data at any time by:

In-App: Settings → Delete Account (full cascade: removes your membership, check-ins, vault entries, and all associated data from our servers)
Leave Family: Settings → Leave Family (removes your data from that family group)
By Request: Email [email protected]

Account deletion will remove your anonymous UUID from all family groups, delete your memberships, check-ins, vault entries, and all associated data from our servers, delete all local data (PIN, encryption key) from your device, and if you are the last member, the entire family group is deleted. Audit log entries are retained with an orphaned identifier for legal protection purposes.

We will process deletion requests within 30 days.

S9. Summary of Key Points

Topic	Summary
What is this?	A family safety app: verify identity (VERIFY), check suspicious messages (CHECK), daily check-ins (SIGNAL), and encrypted emergency info (VAULT)
Is it free?	CHECK (on-device pattern matching + AI) and single-device safe word are free, forever, no account required
How much is Pro?	£3.99/month, £34.99/year, or £99.99 lifetime
Who can subscribe?	Any family member. One subscription covers the whole family group.
Are all members equal?	Yes. There are no admin or special roles. All actions are logged and visible to everyone.
Can you guarantee scam prevention?	No — this is one layer of protection, not a complete solution
Can I use results as evidence?	No — no output is intended for use in any legal, insurance, or dispute proceeding
What about my data?	End-to-end encrypted. On-device analysis never leaves your phone. Pro sends only URLs, phone numbers, and email domains to threat databases. See Privacy Addendum
Can I cancel anytime?	Yes, via your app store account (see Section S5.3)

This addendum was last updated on 9 May 2026.