Terms of Use & Privacy Policy

1. Introduction

These Terms of Use and Privacy Policy govern your use of the Priceri Wallet web and mobile application (the "Application"). By accessing or using the Application, you agree to be bound by these Terms.

2. Zero-Knowledge Architecture and Privacy

The Application is built on a strict Zero-Knowledge security model:

• Client-Side Encryption: All sensitive data (including loyalty card numbers, notes, custom names, and tags) is encrypted on your device using AES-256-CBC before being synchronized.
• Key Derivation (PBKDF2): Your symmetric decryption key is derived locally from your password using PBKDF2 with 10,000 iterations. This key is kept only in session memory and is never transmitted to our servers.
• No Operator Access: Because we do not store or transmit your password or keys, we cannot access, decrypt, or share your stored loyalty cards under any circumstances.

3. Family Sharing Cryptography

If you use the Family Sharing feature, group keys are securely encrypted for each member individually using asymmetric cryptography. The server merely acts as a relay for encrypted packages and has no capability to decrypt family cards.

4. Offline Storage and PWA

The Application utilizes IndexedDB and a PWA Service Worker to run offline. Your cards are stored locally on your device. Data safety is coordinated via the Web Locks API to prevent database conflicts.

5. Final Provisions

The Application is provided free of charge, with no advertising and no tracking of user behaviors. The operator reserves the right to modify these terms.