Terms of Service

The short version. This summary is here to help you read the rest; it is not a substitute for it.

• You subscribe to a dedicated Hoodik instance that we run for you. You administer it.
• Everything is end-to-end encrypted. Your password and your encryption keys stay on your devices and never reach us, so we cannot read your files, their names, or their contents.
• Because we cannot read your content, the only things we can do about an abuse complaint or a legal order are to disable a shared link, or suspend or close your instance, and to give an authority the same encrypted export you can download yourself. Encrypted data is unreadable without your password.
• You can export everything and leave at any time.
• If a law ever tried to force us to weaken the encryption or build a way to read your data, we would challenge it and, if we lost, close the service in that country rather than comply.

1. Who we are, and what these terms cover

Hoodik Cloud is operated by Hudik d.o.o., a company registered in Croatia (Kapelska 6, 31000 Osijek, Croatia; VAT ID HR15878994254). In these terms, "we", "us" and "our" mean Hudik d.o.o., and "you" and "your" mean the person or organisation that holds the account.

These terms form a binding contract between you and us. They apply when you subscribe to or use Hoodik Cloud (the "Service"). If you are agreeing on behalf of an organisation, you confirm that you are authorised to bind it.

2. What Hoodik Cloud is

When you subscribe, we provision a dedicated Hoodik instance for you (your "Instance"): its own application, its own database, and its own storage, kept separate from every other customer. You administer your Instance. You create and manage the user accounts on it, decide who may access it, control its files and its share links, and can start, stop and restart it.

We supply and operate everything your Instance runs on: the servers, storage, network, domain names, security certificates, backups, and the automation that sets it up and keeps it online. We keep the software updated by default, and you can change that (see section 9).

The files, file names and other data you and your users store on your Instance are your "Content". If you invite other people to your Instance, or give them access through a share link, they are your users and your responsibility (see section 19). Toward those people, the Instance is yours.

3. Your account and your encryption keys

You create your account in your browser or in a Hoodik app. As part of that, your device generates the encryption keys that protect your Content. Those keys are derived from, and protected by, a password that only you know.

If you lose your password or recovery key, your Content cannot be recovered by anyone, including us. We have no technical ability to reset your password or recover access. This is a direct result of how the encryption works, and it is the same protection that stops anyone else from reading your data. You are solely responsible for safeguarding your password and recovery key, and for keeping your own backups of important data.

4. Encryption: what we can and cannot see

Hoodik Cloud is end-to-end encrypted. Your files, their names and their thumbnails are encrypted on your device, using current, well-regarded, published cryptography, before they are uploaded. Your password is never transmitted to us (we verify your logins using a protocol that lets us confirm your password without ever receiving it), and the keys that decrypt your Content never leave your device. The exact algorithms we use are documented in our published security documentation.

We store only encrypted data, and we hold no key that can decrypt it. This includes files you share through a public link: those are decrypted in the recipient's own browser using a key contained in the link, never on our servers. We do not hold a master key, we operate no key escrow, and we will not build any capability to decrypt your Content.

To run the Service we do hold the operational credentials needed to provision, back up, monitor and recover your Instance. These let us keep the Service working and see technical information about it, such as how much storage you use and whether your Instance is healthy. They do not give us access to your decryption keys or to plaintext Content. We store only ciphertext. We access your Instance only for provisioning, health and maintenance, billing measurement, and to act on a valid legal order or a substantiated abuse report as described below.

Our web application is served from our published, source-available builds, and our mobile and desktop apps are distributed through the app stores rather than from our servers. We will not modify the software we serve to weaken encryption, add key escrow, or introduce any capability that would let us access your plaintext Content. If we are ever legally compelled to do so in a particular jurisdiction, we will discontinue the Service in that jurisdiction rather than comply (see section 8).

5. Acceptable use

You agree not to use Hoodik Cloud:

• for any unlawful purpose, or to store or share material you have no right to store or share;
• to store or distribute child sexual abuse material, or any other content whose possession or distribution is illegal;
• to attack, overload or interfere with the Service or its infrastructure, or to attempt to reach another customer's Instance or data;
• to send unsolicited bulk messages, distribute malware, or facilitate fraud;
• in a way that breaches the rights of others or applicable law.

You are responsible for what you and your users do on your Instance.

6. Illegal content and abuse reports

Because your Content is end-to-end encrypted, we cannot review it, and we do not monitor it. The only content on the Service that anyone outside your Instance can see is what you choose to publish through a public share link.

Anyone can report content they believe is illegal by writing to abuse@hoodik.io. Our Reporting Illegal Content page explains what a report must contain and how we handle it. What we are able to do about a valid report is limited by the encryption, and we act at the most precise level available to us: we can revoke a reported public link, disable the specific stored objects behind it, suspend your Instance, or terminate your account. We cannot read, edit or selectively remove files we have no key for.

If we act against your account, we will tell you what we did and why, and how you can challenge it, unless a law or an order prohibits us from telling you. Removing your access to the Service never deletes your data before your export window has closed (section 14), unless a court orders otherwise.

7. Legal and law-enforcement requests

We respond to valid legal orders under Croatian and EU law. Our Law Enforcement Guidelines set out exactly what information exists for us to produce, and what does not. In short: we can provide your account and billing details, technical information about your Instance, access logs kept for a limited period, and your stored data as encrypted data, the same export you can download yourself. We hold no keys, so no order can make us produce the readable contents of your files, because those contents do not exist in readable form on our side.

8. If a law tries to force us to weaken encryption

The Service only makes sense if we cannot read your data. If a general law or order would require us to weaken or bypass the encryption, to hold or escrow keys, or to add any ability to scan or read your Content, we will not build it. We will use all reasonable legal means to challenge the demand, and if we ultimately lose, we will stop offering the Service in the affected country rather than comply, giving you as much notice as the law allows, with your encrypted export available to you throughout.

Separately, an authority may serve an order about a specific account, and such an order may legally require us not to tell the affected customer. Where the law allows, we will notify you; where it does not, we will not mislead you, and our published transparency information (see the Law Enforcement Guidelines) is the safeguard that remains.

9. Software updates

By default, we keep your Instance's software up to date, which occasionally means a brief interruption. You can opt out and pin your Instance to a specific released version. If you opt out, we will still tell you when a security update is available for your pinned version and what not installing it risks; if you then choose not to update, we are not responsible for problems caused solely by the missing update.

Our automated systems do not change the software on a pinned Instance. We may still require a security update where a pinned version creates a material risk to the platform or other users: we will contact you and, if it is not resolved, may suspend the Instance under section 12. We will not silently change your software.

10. Fees, billing and renewal

Prices and the current plan are shown at checkout, in your local currency where available. Subscriptions are billed in advance and renew automatically for further periods until you cancel. Payment is handled by our payment provider acting as Merchant of Record: they are the seller of record for your purchase, issue your invoice, and handle any applicable tax. We receive payout reports from them, not your card details.

11. Cancellation and your right of withdrawal

You can cancel at any time; cancellation stops future renewals. If you are a consumer in the EU, you also have a statutory right to withdraw from a distance contract within 14 days. Full details, including how the withdrawal right works for a service that starts immediately, are in our Refund & Cancellation Policy, which forms part of these terms.

12. Suspension

We may suspend your Instance if:

• a payment fails and remains unpaid after we have attempted to collect it;
• we receive a valid legal order that requires it;
• we receive a substantiated report of illegal content, to the extent set out in section 6 and our Reporting Illegal Content page; or
• your Instance is causing a genuine security or stability risk to other customers or the platform.

We will tell you why, unless the law prevents us. We review every suspension we impose within 7 days and either restore your Instance or move to termination with reasons. If we suspended your Instance for a reason that was not your fault and it turns out to be unjustified, we will restore it and credit you for the affected period.

13. Termination

You may terminate at any time through cancellation (section 11). We may terminate your account for a serious or repeated breach of these terms, for illegal use, or where a suspension is not resolved, after the review described in section 12, and with reasons and a route to challenge the decision, unless the law prohibits us from notifying you. We may also stop offering the Service in a country under section 8, or discontinue the Service generally on reasonable notice; in either of those cases, and in any termination that is not due to your breach, you receive a pro-rata refund of any prepaid, unused period.

14. Exporting your data

You can export your data at any time. The export is your encrypted data together with a ready-to-run copy of Hoodik that you can host yourself, readable only with your own password. We provide what we hold, which is encrypted data; we never produce a readable, server-side export, because we cannot read your data.

After your subscription ends for any reason, your export remains available to you for a 30-day grace period, unless a legal order requires us to preserve the data and not release it, or your account was terminated for illegal content and the law requires us to act differently.

15. Keeping and deleting your data

We keep your Content while your subscription is active and during the 30-day grace period. After that, it is deleted; residual encrypted copies in our backups age out within approximately a further 7 days. We may keep data longer only where a law or a valid preservation order requires it, and only for as long as required. How we handle personal data more generally is set out in our Privacy Policy.

16. Service availability

We work to keep the Service reliable, but we provide it "as available" and do not promise a specific uptime level at this tier. Planned maintenance and updates may cause brief interruptions, which we keep as short as we reasonably can.

17. Warranties

We provide the Service with reasonable skill and care. Beyond what these terms and applicable law require, and beyond your non-excludable statutory rights, we do not make other promises about the Service, and we do not warrant that it will be uninterrupted or error-free. No encryption scheme is guaranteed to remain unbreakable against all future advances in computing or cryptanalysis. We use current, well-regarded algorithms and will not deliberately weaken the encryption model.

18. Our liability

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for intent or gross negligence, for a breach of your statutory rights as a consumer, or for anything that cannot be limited by law.

Subject to that, we are not liable for indirect or consequential loss, or for loss of profit. Our total liability to you for any claim arising out of or relating to the Service (including any claim relating to encryption, key management, data unavailability, or loss of access caused by the loss of your password or recovery key) is limited to the amount you paid us for the Service in the twelve months before the claim arose. Because you alone hold the keys to your data, keeping your own copies and safeguarding your password and recovery key are your responsibility, and we are not liable for data you lose access to because those were lost.

19. Your responsibility and indemnity

You are responsible for the Content on your Instance and for the users you give access to, and for granting access and sharing links with reasonable care. To the extent a third-party claim or penalty against us is caused by your breach of these terms or your unlawful use of the Service, you agree to cover our resulting reasonable costs, except to the extent the claim was caused by our own failure to meet our legal obligations. This does not limit your statutory rights, and it applies only as far as the law permits.

20. Data protection

Our handling of personal data is described in our Privacy Policy. For the Content on your Instance, you are the data controller and we act as your processor; the terms of that arrangement are set out in our Data Processing Agreement, which forms part of this contract and applies automatically, without you needing to sign a separate document.

21. Intellectual property

The Hoodik name and logo belong to Hudik d.o.o. The Hoodik server software is source available under the CC BY-NC 4.0 licence. These terms do not transfer any ownership of your Content to us; your Content remains yours.

22. Changes to these terms

We may change these terms for legal, security or service reasons. We will give you at least 30 days' notice by email or through the Service before a change takes effect, except where a change must apply sooner to comply with the law. If a change is to your disadvantage, you may terminate before it takes effect and receive a pro-rata refund of any prepaid, unused period. Continuing to use the Service after a change takes effect means you accept it.

23. Governing law and disputes

These terms are governed by the law of the Republic of Croatia. If you are a business, the courts of Osijek, Croatia have exclusive jurisdiction. If you are a consumer, you keep the protection of the mandatory laws of your country of residence, and you may bring proceedings in the courts there; nothing in these terms removes that right.

24. Contact

Hudik d.o.o., Kapelska 6, 31000 Osijek, Croatia.
General and account support: support@hoodik.io
Reports of illegal content and legal or authority requests: abuse@hoodik.io
Security issues: security@hudik.eu