Terms of use
Last updated: 10 September 2026.
The short version: your files are yours, you're responsible for what you store and share, and the service is young — some safety nets are still being built.
1. Who these terms are for
The service is provided by ID of Life Ltd, Keilaranta 1, 02150 Espoo, Finland (Business ID 3593234-2). These Terms of Use apply to everyone who uses the ID of Life service at idof.life — whether through a personal account or a company account. By creating an account or using the service, you agree to these Terms; if you do not agree, do not use it.
Most of these Terms apply the same way to every account. A few sections are marked as applying only to personal accounts or only to company accounts — everything else applies to both.
2. Eligibility
You must be at least 18 years old to register or to start a paid subscription — that is the line for registration and subscriptions alike, with no lower age or parental-consent alternative. We do not knowingly create accounts for anyone younger, though we do not currently verify age at sign-up. By registering, you confirm you meet this requirement and have full legal capacity under the laws of your country of residence.
3. What the service is (and is not)
Your files are stored on a private, company-operated file-storage network based on IPFS technology, hosted on servers within the European Union — closed to outsiders, so knowing a file's identifier does not let anyone else retrieve it. Identical content is stored only once.
Today, files are stored unencrypted on that network: access is controlled by your account login and our server-side permissions, not by a key only you hold. Client-side encryption, where a key only you hold protects your files even from us, is on our roadmap with no date committed; the "encryption" toggle you may see in the service is inactive and marked "coming soon". We would rather say this plainly than let anything elsewhere imply a guarantee that does not exist yet.
There is no blockchain in the service today. A field associated with your account may resemble a wallet address; it is not connected to any blockchain or smart contract and should not be relied on for anything.
4. Your account and security
You register with a username, email address and password, authenticated by email, password and a session token — there is no wallet and no cryptographic key that only you hold. Signing in issues a short-lived access token (1 hour) and a longer-lived refresh token (30 days) so you do not have to re-enter your password constantly; both are stored on our side, neither is a key you must safeguard yourself.
Company accounts — who is bound (company accounts only). If you register or activate a company account, the person accepting these Terms on the organisation's behalf (the "Admin") confirms they are authorised to bind that organisation — these Terms then form a binding agreement between us and the organisation, not between us and each individual person who later uses the account. People invited to use a company account ("Members") are not a party to these Terms: their right to use the service comes entirely from their organisation's subscription, even if they separately hold their own personal account under a different agreement with us. The organisation is responsible for informing its Members of any internal rules for using the service.
You are responsible for all activity under your account, including any API keys you create, and for keeping your credentials confidential — tell us promptly at hello[at]idof.life
if you suspect unauthorised access. Password recovery today is manual, through that address; because there is no user-held cryptographic key, losing your password does not make your data cryptographically unrecoverable. You may download your files at any time while your account is active and in good standing.
5. Subscriptions, billing and renewals
Payments are processed by Stripe (Stripe Payments Europe, Ltd., Ireland; Stripe, Inc., United States). Card details are entered only on Stripe's own pages and never pass through our servers.
Subscriptions renew automatically at the end of each billing cycle (monthly or annually) unless you cancel before the renewal date in your account settings. Cancelling stops future billing; it does not by itself trigger a refund.
Refunds and withdrawal right (personal accounts only) — company accounts have no statutory right of withdrawal. EU consumers have a 14-day right of withdrawal from distance contracts. For digital services, this right can end earlier once the service has been fully performed, but only if we first obtained your prior express consent to that and your acknowledgment that you thereby lose the withdrawal right, and only if we also offer a working withdrawal mechanism. Honestly stated: we do not have that two-step checkout consent or an on-site withdrawal mechanism today, so we do not treat the withdrawal right as waived — if you are a consumer within the 14-day window, you may withdraw by writing to hello[at]idof.life
, even though a dedicated button does not exist yet. Subject to that right, fees already paid are otherwise non-refundable.
When you subscribe you provide a billing address (legal name, address, VAT ID if applicable, company registration number, invoice details), used for invoicing and shared with Stripe for that purpose. We may introduce additional payment methods, including cryptocurrency, in the future; none exist today.
6. What you may not upload or do
You must not use the service to upload, store, share, or transmit content that is illegal under Finnish, EU or applicable international law; contains Child Sexual Abuse Material or promotes exploitation; contains malware, viruses, ransomware or other malicious code; infringes a third party's intellectual property rights; is defamatory, harassing, threatening or otherwise abusive; or violates someone else's privacy or personal-data rights.
We do not proactively scan or analyse the content of your files. We do not currently have a working technical capability to disable a single file by its content identifier — an attempt at this was disabled as broken and unsafe, since identical content can belong to more than one user. Where we receive a valid legal order identifying a specific account, we may suspend or restrict that account. As a hosting service under the EU Digital Services Act we are expected to provide an electronic notice-and-action mechanism for reports of illegal content; honestly stated, we do not have one that meets the requirement today — a plain email does not satisfy it on its own, and building a compliant mechanism is a known, tracked gap.
7. Account suspension, termination and deletion
You may stop using the service and request deletion of your account at any time by writing to hello[at]idof.life
. We may suspend or terminate your account if you breach these Terms, fail to pay subscription fees, or if required by law enforcement via a valid order identifying your account.
Closing an account, or a breach not related to payment, leads to deactivation, then a 30-day grace period so an accidental or disputed closure can be reversed, then permanent deletion. The end of a subscription — a trial ending, a payment failing, or you cancelling a paid plan — follows a different, longer schedule: a 30-day read-only period, then your account is locked, then your files are kept for up to 150 days before deletion, so a billing problem does not cost you your files before you have had a real chance to fix it. Stripe payment records and the raw payment-webhook data we receive are moving to a six-year retention period — the same as our accounting records — instead of being kept indefinitely.
Deletion is real and automated: your files (unpinned from storage), pending shares, memberships and invitations, and the account record itself are removed by an automated process, not a manual or symbolic one. Stated honestly: web-server access logs and database backups are each deleted automatically after at most 100 days, and records required for accounting purposes are kept regardless of account deletion, for the period Finnish law requires. We do not use blockchain technology, so there is no separate, unchangeable ledger entry that would survive deletion.
8. Your content
Files you upload remain yours; we claim no rights to them beyond what is technically necessary to store, replicate and deliver them at your request. You must hold the rights to content you store and share. You choose who receives a share or a public link and through which channel, and you are responsible for that choice — a public link can be opened by anyone who has it until it expires or you revoke it. How we handle the personal data involved in storing and sharing your files is described in our privacy policy, not repeated here.
9. Disclaimers and limitation of liability
The service is provided on an "AS IS" and "AS AVAILABLE" basis, without warranties of any kind, to the extent permitted by applicable law. There is no blockchain in the service today; do not rely on any claim of immutability, here or elsewhere.
Cap on liability (company accounts only) — to the maximum extent permitted by applicable Finnish law, our total liability toward a company account for any claim arising out of these Terms is limited to the total amount your organisation paid us for the service in the twelve months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under mandatory law, including for gross negligence, wilful misconduct, or death or personal injury. For personal accounts we do not apply a liability cap: a cap phrased this way would likely be found unfair and unenforceable against consumers under Finnish law anyway, so we rely instead on the protection mandatory consumer-protection law already gives you.
We are not liable for data loss resulting from lost or compromised login credentials, except where mandatory law requires otherwise. The service is under active development; we aim for continuous availability but do not commit to a specific service level at this time.
10. Governing law and dispute resolution
These Terms are governed by the laws of Finland, excluding its conflict-of-law rules. Any dispute is subject to the competent courts of Finland. Mandatory consumer-protection rules of your country of residence remain unaffected where applicable.
11. Changes to these Terms
We may update these Terms from time to time. We treat a change as substantial — and announce it in the service at least 30 days before it takes effect — when it increases prices, introduces a new material obligation, restricts your rights, or changes what personal data we process and why. Typos, clarifications and new features that do not affect your data do not count as substantial. If you object to a substantial change, you can close your account before it takes effect; continued use after that point means you accept the new Terms.
12. Contact
For questions about these Terms, write to hello[at]idof.life .