Password Bunny

Password Bunny Legal

Terms of Use

These Terms describe how you may use Password Bunny and how our local-first, zero-knowledge-style security model, third-party sync providers, and paid access work.

Effective date: May 2, 2026
Important: Password Bunny does not store or recover your master password. Losing it may permanently lock you out of your vault.

These Terms are written specifically for Password Bunny's current product model: a local-first password manager with optional third-party sync targets, browser and platform credential integrations, and paid entitlements that may affect editing access.

1. Scope and Acceptance

These Terms of Use ("Terms") are between you and passwordbunny, Inc. ("Password Bunny," "we," "us," or "our") and govern your access to and use of Password Bunny websites, web applications, desktop applications, mobile applications, browser extensions, local integrations, and related services we make available (collectively, the "Services"). By accessing or using the Services, you agree to these Terms. If you do not agree, do not use the Services.

If you use the Services on behalf of a company, team, or other organization, you represent that you have authority to bind that organization to these Terms.

Our Privacy Policy is incorporated into these Terms by reference and explains how we collect, use, and protect information in connection with the Services.

2. Eligibility

You must be at least 16 years old, or the minimum age required to use digital services where you live, to use the Services. By using the Services, you represent that you meet that requirement and that you are legally able to enter into this agreement.

3. Your Account and Login Verification

Some parts of the Services require an account or verified email address. You agree to provide accurate information and to keep your login credentials, verification codes, devices, and recovery methods secure.

You are responsible for activity that occurs through your account or verified email, unless that activity results directly from our breach of these Terms or applicable law.

You may not share, sell, rent, transfer, or allow another person to use your account, license, entitlement, verification code, or paid access unless we expressly allow it.

4. Local-First Security Model and Master Password

Password Bunny is designed as a local-first password manager. Your vault is primarily stored on your device and, if you enable sync, in the cloud storage provider or storage target you choose.

You must create and maintain a master password to protect access to your vault. Your master password is critical to the security of your data.

We do not store your master password, do not know your master password, and do not have a practical way to recover it for you. If you lose your master password, you may permanently lose access to your vault data.

Biometric unlock, device unlock, operating system keychains, and similar convenience unlock methods do not replace your master password. You may still need your master password to access, recover, migrate, or decrypt your vault.

5. Vault Data, Sync Targets, and Third-Party Services

You may choose to sync your encrypted vault with third-party providers or storage targets, such as Google Drive, iCloud, OneDrive, Dropbox, user-controlled NAS, WebDAV-compatible storage, or other supported services. Your use of those third-party services is governed by their own terms and privacy policies.

We provide the software and transport needed to work with supported providers, but we do not control third-party providers, their availability, their account decisions, their data handling, their security practices, their pricing, or their policy changes.

Provider outages, account suspension, authentication failures, quota limits, deleted files, changed APIs, provider security incidents, or provider policy changes may affect your ability to sync, access, restore, or delete vault data. We are not responsible for those third-party services.

You are responsible for maintaining backups, exports, device access, provider account access, and any deletion or retention choices for vault data stored on your devices or in sync targets you choose.

7. Software License, Updates, App Stores, and Third-Party Components

The Services are licensed, not sold. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to install and use the Services for your personal or internal business use.

We may provide updates, patches, fixes, or new versions automatically or manually. Some updates may be required for security, compatibility, licensing, or continued operation.

The Services may include or depend on open-source software, third-party libraries, platform APIs, browser APIs, operating system services, or app store services. Those components may be subject to separate licenses, notices, or terms.

8. App Store and Platform Terms

If you download or purchase the Services through the Apple App Store, Google Play, Chrome Web Store, or another third-party platform or marketplace, that platform's terms also apply to your use of the Services.

For Services obtained through the Apple App Store, Apple is not a party to these Terms and is not responsible for the Services, support, maintenance, warranties, claims, or liabilities relating to the Services. To the extent required by Apple's rules, Apple and its subsidiaries are third-party beneficiaries of these Terms and may enforce these Terms against you.

Platform providers may impose technical, billing, refund, eligibility, family sharing, region, device, or account restrictions that we do not control.

9. Acceptable Use

You may use the Services only in compliance with applicable law and these Terms. You may not:

  • use the Services to violate law, regulation, or another person's rights.
  • attempt to bypass licensing, entitlement, verification, security, or access controls.
  • copy, resell, rent, sublicense, distribute, or exploit the Services except as expressly permitted by us or applicable law.
  • reverse engineer, decompile, disassemble, or attempt to extract source code from the Services, except where applicable law prohibits that restriction.
  • interfere with or disrupt the Services, including by introducing malware, scraping in a harmful way, abusing APIs, or attempting unauthorized access.
  • use the Services to facilitate unlawful, fraudulent, harassing, abusive, or rights-infringing activity.
  • use the Services in violation of export control, sanctions, or similar laws.

10. Autofill, Credential Provider, and Passkey Features

Password Bunny may provide autofill, credential-provider, import, migration, password generation, one-time code, and passkey-related features. These features are intended to help you manage credentials, not to replace your judgment.

Autofill, credential-provider, and passkey features may not work with every website, app, browser, operating system, or form. Autofill may fail or behave unexpectedly when a website or app does not follow common HTML, accessibility, platform, or credential-management conventions.

You are responsible for reviewing generated passwords, selected accounts, destination websites or apps, passkey actions, and imported data before you rely on them. You remain responsible for the consequences of saving, filling, sharing, rotating, exporting, importing, or deleting credentials.

11. Our Intellectual Property

The Services, including our software, designs, text, graphics, trademarks, logos, and other service content, are owned by Password Bunny or its licensors and are protected by applicable intellectual property laws.

Except for the limited license expressly granted in these Terms, we and our licensors reserve all rights in and to the Services.

If you provide feedback, suggestions, or ideas about the Services, you grant us the right to use them without restriction or compensation to you.

12. Your Data and Limited Rights We Need to Operate

As between you and us, you retain your rights in the vault data, account data, and other materials you submit or store through the Services.

You give us a limited right to process account information, entitlement information, support requests, diagnostics, and other materials you provide only as needed to operate, secure, improve, and support the Services, and as described in our Privacy Policy.

13. Beta Features and Service Changes

We may label some features as beta, preview, experimental, or early access. Those features may be incomplete, may change materially, or may be discontinued at any time.

We may modify, suspend, or discontinue any part of the Services, including supported platforms, providers, or features, at any time. Where required by law, we will provide notice before material adverse changes take effect.

14. Termination

You may stop using the Services at any time. We may suspend or terminate your access if you violate these Terms, create risk for users or us, fail to satisfy payment obligations, or if we are required to do so by law.

Termination does not automatically delete data stored with third-party providers or data remaining on your own devices. You are responsible for exporting, backing up, removing, or deleting your local data and disconnecting third-party services if you stop using Password Bunny.

Sections that by their nature should survive termination will survive, including provisions about intellectual property, your data responsibilities, disclaimers, limitation of liability, indemnity, dispute resolution, and general terms.

15. Electronic Communications and Notices

You agree that we may communicate with you electronically about the Services, including by email, in-app notice, website posting, account notice, or other reasonable electronic means.

Electronic communications may include operational messages, legal notices, security notices, payment notices, product updates, and changes to these Terms or other policies. You are responsible for keeping your email address and account contact information current.

16. Disclaimers

The Services are provided "as is" and "as available" to the maximum extent permitted by law. We disclaim all warranties, express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, and quiet enjoyment.

We do not guarantee that the Services will be uninterrupted, error-free, secure against every threat, compatible with every device or provider, or that any specific feature will remain available.

No security product can eliminate all risk, and no password manager can prevent every device compromise, phishing event, account takeover, provider outage, or user mistake.

17. Limitation of Liability

To the maximum extent permitted by law, Password Bunny and its affiliates, officers, employees, contractors, and licensors will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, goodwill, business opportunity, data, or use.

To the maximum extent permitted by law, our total liability for claims arising out of or relating to the Services will not exceed the greater of (a) the amount you paid us for the Services in the 12 months before the event giving rise to the claim or (b) USD $50.

Nothing in these Terms excludes or limits liability that cannot be excluded under applicable law.

18. Indemnity

To the maximum extent permitted by law, you will indemnify and hold harmless Password Bunny and its affiliates, officers, employees, contractors, and licensors from third-party claims, liabilities, damages, judgments, losses, and expenses, including reasonable attorneys' fees, arising out of your misuse of the Services, your violation of these Terms, or your violation of another person's rights.

We will give you reasonable notice of any indemnified claim, allow you to control the defense if appropriate, and cooperate reasonably at your expense. You may not settle a claim in a way that admits fault by us or imposes obligations on us without our written consent.

19. Export Control and Sanctions

You must comply with all applicable export control, sanctions, import, and trade compliance laws when using the Services. You may not use, download, export, re-export, or transfer the Services in violation of those laws.

You represent that you are not located in, organized under the laws of, or ordinarily resident in a country or territory subject to comprehensive sanctions, and that you are not listed on any applicable restricted-party list, unless your use is authorized by applicable law.

20. Governing Law, Venue, and Dispute Resolution

These Terms and any dispute arising out of or relating to the Services will be governed by the laws of the State of Delaware, without regard to conflict-of-law rules.

Before starting a formal claim, you and Password Bunny agree to try to resolve the dispute informally by contacting the other party and allowing a reasonable opportunity to resolve it.

To the maximum extent permitted by law, disputes arising out of or relating to these Terms or the Services will be resolved by binding individual arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules, with Delaware as the arbitral seat, unless the claim qualifies for small claims court or either party seeks injunctive or equitable relief for intellectual property, security, or unauthorized access issues. Hearings may be conducted remotely, in writing, or as otherwise required by the AAA Consumer Arbitration Rules.

You may opt out of this arbitration agreement by sending a written notice to support@passwordbunny.ai within 30 days after you first accept these Terms. Your opt-out notice must include your name, the email address associated with your Password Bunny account if any, and a clear statement that you opt out of arbitration. Opting out of arbitration does not opt you out of any other part of these Terms.

For any claim that is not subject to arbitration, you and Password Bunny consent to the exclusive jurisdiction and venue of the state and federal courts located in Delaware.

To the maximum extent permitted by law, disputes must be brought only on an individual basis and not as a plaintiff or class member in any class, consolidated, collective, or representative action.

21. General Terms

You may not assign or transfer these Terms or your rights under them without our prior written consent. We may assign or transfer these Terms in connection with a merger, acquisition, financing, reorganization, sale of assets, or by operation of law.

If any provision of these Terms is found unenforceable, the remaining provisions will remain in effect. Our failure to enforce a provision is not a waiver of our right to do so later.

These Terms, together with the Privacy Policy and any purchase terms shown at checkout or required by an app store, are the entire agreement between you and us regarding the Services.

Neither party is responsible for delay or failure to perform caused by events beyond its reasonable control, including natural disasters, war, labor disputes, internet or hosting failures, provider outages, governmental action, or other force majeure events.

These Terms do not create a partnership, joint venture, agency, employment, or franchise relationship between you and Password Bunny.

Except for Apple and its subsidiaries where required for Apple App Store distribution, there are no third-party beneficiaries to these Terms.

22. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will post the updated Terms and update the effective date above. Your continued use of the Services after the updated Terms become effective means you accept the revised Terms.

23. Contact

Questions about these Terms can be sent to support@passwordbunny.ai.