Terms & Disclaimer
Version: 1.0
Effective Date: October 25, 2025
Last Updated: November 15, 2025
⚠️ Important Information About Credential Security
This application stores authentication credentials (passkeys) on your personal NFC card and maintains an encrypted cache on your device.
YOUR RESPONSIBILITY
By using this application, you acknowledge and accept full responsibility for:
- Physical Security: Keep your device and NFC card physically secure at all times
- PIN Protection: Protect your PIN and never share it with anyone
- Credential Security: You are solely responsible for the security of your credentials
- Device Security: Use strong device security measures (PIN, biometric authentication, encryption)
- NFC Card Storage: Store your MIFARE DESFire EV3 NFC card in a secure, private location
COMPANY LIABILITY LIMITATIONS
Phenomenal Aktiebolag is NOT responsible for:
- Lost, stolen, or compromised credentials
- Unauthorized access to your accounts
- Data loss due to device failure, NFC card damage, or user error
- Security breaches resulting from shared or weak PINs
- Any damages (direct, indirect, incidental, or consequential) resulting from use of this application
- Loss or damage to NFC cards
- Incompatibility with specific websites or services
SECURITY RECOMMENDATIONS
We strongly recommend the following security practices:
- Strong Device Lock: Use a strong device lock (PIN, pattern, or biometric)
- Secure NFC Card Storage: Keep your NFC card in a secure, private location when not in use
- Never Share Credentials: Never share your credentials or PIN with anyone
- Keep Software Updated: Keep your device operating system and the app updated
- Multiple NFC Cards: Consider maintaining backup NFC cards in secure locations
- Monitor Activity: Regularly review your passkey usage and report suspicious activity immediately
- Strong PINs: Use strong, unique PINs (avoid sequences, repeating digits, or common patterns)
HARDWARE REQUIREMENTS
This application requires:
- MIFARE DESFire EV3 NFC Card: Required for passkey storage (not optional)
- NFC-Enabled Android Device: Device must support NFC communication
- Compatible Android Version: Android 9.0 (API level 28) or higher recommended
SOFTWARE "AS IS" WARRANTY DISCLAIMER
This application is provided "AS IS" without warranty of any kind, either express or implied, including but not limited to:
- Warranties of merchantability
- Fitness for a particular purpose
- Non-infringement
- Accuracy or completeness
- Continuous availability or error-free operation
DATA STORAGE MODEL
Primary Storage: All passkeys are stored on your personal MIFARE DESFire EV3 NFC card with PIN-protected access control. The encryption key is derived from your PIN with PBKDF2-HMAC-SHA256 (600,000+ iterations, card UID as salt) and used to authenticate with the card’s AES-128 application keys.
In-Memory Session Cache: Passkeys loaded from the card are held in RAM only for the active session. Each private key is envelope-encrypted with AES-256-GCM using a non-exportable Android Keystore wrapping key. Nothing about a passkey persists on the device’s disk.
No Cloud Storage: No data is transmitted to or stored on any cloud servers or remote systems.
USER ACCEPTANCE
By using this application, you acknowledge that you:
- Have read and understood this disclaimer
- Accept full responsibility for your credential security
- Understand the hardware requirements (NFC card is mandatory)
- Accept all risks associated with credential storage on NFC cards
- Agree that Phenomenal Aktiebolag has no liability for lost, stolen, or compromised credentials
- Understand this software is provided "AS IS" without any warranties
UPDATES TO TERMS
We may update these terms from time to time. When we make material changes:
- The version number will be incremented
- You will be required to re-accept the updated terms within the app
- The updated terms will be published on this website
GOVERNING LAW
These terms are governed by the laws of Sweden. Any disputes shall be resolved in Swedish courts.
CONTACT INFORMATION
If you have questions about these terms:
Phenomenal Aktiebolag
Email: support@phenomenal.se
Website: https://phenomenal.se
RELATED DOCUMENTS