Legal

Terms of use

Last updated 1 November 2026. Please read these terms — they explain what you can expect from us and what we expect from you.

1. Agreement

These terms are an agreement between you and PasswordPal ("we", "us"), which operates PasswordPal. By creating an account or using PasswordPal, you agree to these terms and our Privacy policy. If you're using PasswordPal for an organisation, you confirm you're authorised to accept these terms on its behalf.

2. Your account

  • You must be at least 16 years old, or use PasswordPal as part of a family plan with a parent's or guardian's permission.
  • Give us a real email address that you control and keep it up to date — it's how we reach you and how password resets work.
  • You're responsible for activity on your account. Tell us promptly if you think someone else has accessed it.

3. Your master password and recovery key

Important: your vault is encrypted with your master password, which we never receive. We cannot recover your master password or decrypt your vault.

You're responsible for remembering your master password and keeping your recovery key safe. If you lose both, the only option is to reset your account, which permanently erases the items in your vault. We are not responsible for data that can't be recovered because a master password and recovery key were lost.

4. Acceptable use

You must not:

  • use PasswordPal for anything unlawful, or to store or share material you don't have the right to;
  • try to access accounts or data that aren't yours, or probe, scan or test the security of the service without our written permission (we welcome responsible reports through our contact page);
  • interfere with or overload the service, or use automated means to create accounts or send invitations;
  • resell or redistribute the service without our agreement.

We may suspend or close accounts that break these rules or put other users or the service at risk.

5. Plans and payment

  • Free: up to 8 passwords and notes, with the features described on our website. We may change free plan limits with reasonable notice; we will never delete items because a limit changed.
  • Premium, Family and Teams are paid yearly subscriptions at the price shown when you subscribe. Teams are charged per seat, with a minimum of 4 seats.
  • Payments are processed by Stripe. Subscriptions renew automatically at the end of each year until cancelled. Prices are in the currency shown at checkout and include GST where applicable.
  • We'll give you at least 30 days' notice before a price change applies to your next renewal, and you can cancel before it does.

6. Free trials

New accounts receive a 7-day Premium trial. A family or team created during that time shares the same trial period (it ends on the same day), and each person gets one trial only. Trials don't require payment details and are not automatically converted into paid subscriptions. When a trial ends:

  • a personal account returns to the Free plan. Nothing is deleted, but only your first 8 items (the oldest) stay available. Any items above that are locked and hidden until you upgrade or delete other items to make room, although you can still export them. You can't add items while over the limit or start new shares;
  • a family or team becomes inactive until the owner subscribes — shared collections are hidden but not deleted.

One trial per person. We may change or end trial offers for new sign-ups at any time.

7. Cancelling and refunds

You can cancel any time from Plan & billing → Manage subscription. Your paid features continue until the end of the period you've paid for, and then your account (or family/team) moves to the Free plan or becomes inactive. Except where required by law (see section 12), payments are non-refundable and we don't provide refunds or credits for partial periods. If you believe you've been charged in error, contact us.

8. Families and teams

  • The person who creates a family or team is its owner and is responsible for its subscription and for who they invite. Owners and admins can add and remove members and control access to shared collections.
  • Items placed in a shared collection can be viewed (and, where permitted, changed or deleted) by members with access. Removing someone stops future access, but can't undo what they've already seen — change sensitive passwords when people leave.
  • If the owner deletes the family or team, or their account, shared collections are permanently deleted for everyone. Members' personal vaults are not affected.

9. Your content

You own everything you store in PasswordPal. You give us permission only to store, transmit and back up your encrypted data so we can provide the service. Because it's encrypted end to end, we cannot read it. You can export your data at any time.

10. The service

We work hard to keep PasswordPal secure and available, but we can't promise it will be uninterrupted or error-free. We may change, add or remove features. We'll give reasonable notice of changes that significantly reduce what you've paid for, and you may cancel if you don't accept them. We strongly recommend keeping an occasional export of important information in a safe place.

11. Ending your use

You can delete your account at any time in Account settings. We may suspend or close your account if you seriously or repeatedly breach these terms, if required by law, or if we stop providing the service — in which case we'll give you reasonable notice (where we can) so you can export your data, and refund any unused prepaid amount for a paid plan.

12. Australian Consumer Law

Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these terms excludes, restricts or modifies any right or remedy, or any guarantee, warranty or other term implied or imposed by law that cannot lawfully be excluded or limited. If you're entitled to a refund or other remedy under the Australian Consumer Law, you'll receive it.

13. Liability

To the extent permitted by law, and subject to section 12: (a) we are not liable for any indirect or consequential loss, or for loss of data that results from lost master passwords or recovery keys, or from your devices being compromised; and (b) where our liability for failing to comply with a consumer guarantee can be limited, it is limited to supplying the service again or paying the cost of having it supplied again. Our total liability to you in any 12-month period is limited to the amount you paid us in that period.

14. General

  • These terms are governed by the laws of South Australia, Australia, and you and we submit to the courts of that state.
  • We may update these terms. We'll change the date at the top and, for significant changes, notify you by email or in the app before they apply. Continuing to use PasswordPal after that means you accept the updated terms.
  • If any part of these terms is unenforceable, the rest continues to apply.
  • Questions? Please use our contact form.