Effective 19 August 2026 · signup policy public-alpha-2026-08
What this covers
Vulpio is the official clients, vulpio.app, app.vulpio.app, and the service that hosts Dens. Official software comes only from those origins. Do not install a build from anywhere else.
The current build is an early-access alpha. It can change, break, or lose data. Do not treat these terms, or the product, as a completed audit.
The service
Vulpio is community chat. Dens contain rooms. Invites are one link. Messages, attachments, and calls are end-to-end encrypted on member devices. You never pick a homeserver or a third-party client.
We operate the platform. Den owners and moderators operate their Dens. Encryption does not remove either of those jobs. It changes what evidence the platform can see unless someone reports it.
Eligibility
You must be at least 16 years old to create an account. You represent that this is true. We do not collect a government identity document, a facial biometric, or a mandated age-verification check to prove it.
If a territory would require us to run that kind of check on ordinary members, we do not offer signup there. That is the next section, not a hidden extra step after you register.
One person, one account, unless we agree otherwise in writing. You are responsible for the devices, password, and recovery key attached to the account.
Prohibited signup locations
New accounts are not offered from a territory whose applicable law would require Vulpio to do any of the following:
- Scan private messages — including client-side scanning, detection orders, or Chat Control / Child Sexual Abuse Regulation-style duties
- Collect government identity documents, facial biometrics, or a mandated digital-ID or age-verification check from ordinary members
- Weaken end-to-end encryption, escrow room keys, or install a lawful-access backdoor
- Provide the service in violation of comprehensive trade sanctions that apply to the operator
The restriction is for new registration only. Existing accounts are not disconnected, blocked from login, or denied message delivery solely because a later network address geolocates to an excluded territory. Abuse, sanctions, infrastructure security, and binding legal orders are separate policies. We will not label those as signup geoblocking.
At signup we derive a coarse country code from the request at a trusted edge. We do not store precise geolocation for this decision. We store the eligibility outcome, country code, policy version, and time.
A VPN, proxy, or trip does not change your legal obligations. Do not create an account in order to evade a territorial restriction.
Current excluded territories
As of 19 August 2026, new signups are not offered from:
- The United Kingdom, and other territories where the Online Safety Act or an equivalent age-assurance or private-message scanning duty applies. Mandatory age verification and retained powers to require scanning of private communications are incompatible with this service.
- European Union member states and the rest of the EEA (Iceland, Liechtenstein, Norway). Chat Control and the Child Sexual Abuse Regulation, DSA age-assurance, and member-state mandatory age-verification regimes — including France’s social-media age law — are incompatible with opening new accounts there.
- Australia. The Online Safety Act, eSafety age-assurance powers, and the social-media minimum-age regime are the kind of obligation this service will not take on.
- Comprehensively sanctioned countries and regions, including Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, Luhansk, Kherson, and Zaporizhzhia regions of Ukraine, plus any other territory we are forbidden to serve.
This published list can change when a law appears, is withdrawn, or the map is revised. The app’s signup screen is the live check: if registration is unavailable in your territory, you will see that before an account is created.
United States state laws aimed at adult websites do not currently close nationwide signup. If a binding obligation would require government-ID checks or scanning of ordinary Vulpio members, we will add the affected territory here and to the live eligibility policy.
Your account and recovery
Email is for verification, login recovery, security alerts, and service notices. A password reset restores the account. It does not, by itself, unlock old encrypted history. History comes back from a trusted device you still have, or from a recovery bundle protected by a recovery key you saved.
If every trusted device and the recovery key are gone, old conversations stay unreadable. The account can continue with a new identity generation after a visible reset. That is the honest failure case, not a staff override. We cannot reconstruct a recovery key you did not keep.
Dens and rooms
Den owners and appointed roles — Owner, Administrator, Moderator, Member — govern membership, rooms, and local rules. Kick, ban, lock, and report tools are part of the product.
Joining a Den is consent to that Den’s published rules, as long as those rules do not ask you to break these terms or the law. The platform may still act on account-level or infrastructure-level abuse when a Den does not.
Administrators can add a Den-owned bot as a visible encrypted participant, with scoped, revocable credentials. Treat a bot as a member of the room.
Acceptable use
You may not use Vulpio to:
- Exploit, traffic, or sexually abuse children, or share child sexual abuse material
- Doxx, stalk, or threaten people with credible violence
- Traffic malware, ransomware, or stolen credentials
- Run spam, signup farms, or scrape the service
- Keep infringing material up after a valid notice
- Attack the service, bypass rate limits, or probe other members’ accounts
- Sell, share, or farm accounts
- Pretend to be Vulpio staff, or impersonate someone in order to cause harm
There is no proactive scanning of message plaintext. If a member reports abuse, their client can submit a signed evidence bundle of the selected messages. The platform can inspect only that bundle and related service metadata. Community moderators handle Den membership; platform operators handle service accounts and legal obligations.
We may suspend or close accounts, Dens, or invites that violate these terms.
What stays visible
The privacy notes say this in full. In short: the service routes ciphertext. It can still see accounts, membership, room structure, delivery timing, that a call happened, and network metadata at the edge. Participants can still disclose content through reports, recordings, screenshots, or integrations they choose.
We will not claim anonymity, zero metadata, or that no government can obtain anything.
Your content
You keep whatever rights you already have in the messages and files you send. You grant Vulpio a limited license to store, route, and deliver the ciphertext and the service metadata required to operate Dens, rooms, invites, and calls. That license ends when the content is deleted from the service, except for copies we must keep for a report, a legal hold, or a backup retention window.
Software
Official clients are licensed for your personal or internal use with this service. The alpha is provided as-is. We may require a minimum client version and stop supporting an old build.
Do not reverse-engineer the service to evade encryption, territorial policy, or abuse controls, except to the extent a statute says you may.
Availability and changes
We may change, suspend, or discontinue features. Early access can include data loss, protocol changes, and visible identity resets. We will try to say so plainly.
We may update these terms. The date at the top is the current version. Continued use after a posted change is acceptance. If a change is material, we will say so in the client or by email when we can.
Disclaimers
The service is provided “as is” during early access. We do not warrant uninterrupted operation, that encryption will defeat every attacker, or that a Den will remain available. To the extent the law allows, Vulpio is not liable for lost encrypted history, Den disputes, or indirect damages. Some places do not allow these limits; they apply only as far as they lawfully can.
These terms are the agreement with the operator of the Vulpio service on vulpio.app. Together with the privacy notes, they are the whole agreement for the service.
Contact
Ordinary questions: hello@vulpio.app. Security issues: security@vulpio.app.