Terms of Service

These Terms of Service ("Terms") govern your use of Mycelium — free, open-source software published by Altus Centauri OÜ, a company registered in Estonia (registry code 17371918, trading as "Curious Life"; "we", "us") — and of the mycelium.id website and the optional online services we offer alongside it.

By downloading, installing, or using Mycelium, or by using the mycelium.id website, you agree to these Terms. If you do not agree, do not use them.

1. What Mycelium Is

1.1. Mycelium is a self-hosted, single-user application you download and run on your own device. It ingests your conversations, notes, and reflections, encrypts them at rest on your machine, embeds them locally for search, and exposes them to AI models through the Model Context Protocol (MCP).

1.2. The Mycelium software is free and open source under the GNU Affero General Public License v3.0 (AGPL-3.0). You are free to use, study, modify, and redistribute it under that license.

1.3. We do not host it, and we do not have your data. Mycelium runs entirely on your own hardware. Your vault lives on your device, encrypted with keys only you hold. We do not operate a server that stores or processes your vault, and we have no ability to access, read, or recover its contents.

2. Running the Software — Your Responsibility

2.1. You must be at least 18 years old to use Mycelium.

2.2. Because Mycelium runs on your device, you are responsible for the security of that device, your operating-system account, your recovery key, and your backups.

2.3. Your key is the only way in — by design. Mycelium uses a single recovery key that never leaves your machine. We cannot reset it, recover it, or decrypt your vault for you. If you lose your recovery key and your backups, your data is permanently unrecoverable. This is the trade sovereignty makes.

2.4. You are responsible for keeping your own backups of your vault and recovery key.

2.5. Assumption of risk. You acknowledge that self-hosted software places operation and security entirely in your hands. You knowingly and voluntarily assume all risk arising from running Mycelium — including data loss, key loss, device compromise, misconfiguration, and unauthorized access to your device. You agree this allocation of risk is a basis of the bargain for software provided free of charge.

2.6. Export & sanctions. Mycelium includes cryptography. You represent that you are not located in, and will not use or export the software to, any jurisdiction subject to EU or other applicable sanctions or embargoes, and that you are not a sanctioned person. You are responsible for compliance with export-control and encryption laws applicable to you.

3. Your Data

3.1. You own your data. Everything you create in Mycelium is yours. We claim no ownership or rights over it.

3.2. We never receive it. Your data stays on your device. We do not collect, store, process, transmit, sell, rent, or train on it — we have no technical means to, because it never reaches us.

3.3. Cloud AI is your choice (bring-your-own-key). By default Mycelium can run local AI models, so nothing leaves your machine. If you choose to connect your own API key to a third-party cloud model (e.g. Anthropic, OpenAI, OpenRouter), then the content you send for that request travels directly from your device to that provider, under their terms and privacy policy. We are not a party to that exchange and never see your key or your prompts.

3.4. Export. Your data is already in your hands, on your machine. Mycelium lets you export it in open formats at any time.

4. Optional Online Services

Some features are optional and, when you choose to use them, involve services we operate. Each is opt-in:

4.1. The mycelium.id website. Informational pages and software downloads. See our Privacy Policy for what the website collects.

4.2. Remote access relay. If you enable remote access to your own instance (provided through a paid Mycelium handle — see §6), traffic may pass through a relay we operate. The relay is a TLS-passthrough pipe — it forwards encrypted traffic it cannot read; it does not terminate your encryption or inspect your data.

4.3. Publishing. If you choose to publish a document, that specific document is served publicly at your chosen handle. Only what you explicitly publish is made public.

4.4. Connections & shared spaces (roadmap). Future federation features let you share specific content with people you choose. They will be opt-in and governed by these Terms and the Privacy Policy as updated.

5. Acceptable Use

The software on your own device is yours to use as you see fit. When using our optional online services (the website, relay, publishing, and future shared spaces), you agree not to:

5.1. Violate any applicable law or regulation.

5.2. Publish or transmit content that infringes others' intellectual property or rights.

5.3. Attempt to access other people's instances, data, or systems.

5.4. Abuse, overload, or attempt to disrupt the relay or other shared infrastructure.

5.5. Use the publishing or relay services to distribute malware, illegal, or abusive content.

5.6. Use any optional online service in any other way that is unlawful, harmful, or that exposes us or others to liability.

We may suspend access to the optional online services, and remove or disable any published content, for conduct that violates these Terms. We may also preserve or disclose information where we believe in good faith it is necessary to comply with applicable law or a valid legal request, or to protect the rights, safety, or property of users, the public, or us. We prohibit, and will remove and report to the competent authorities, child sexual abuse material and other manifestly illegal content. To report illegal or infringing content published through our services, contact business@curiouslife.is — we act on valid notices expeditiously. None of this affects your right to keep running the open-source software locally.

6. Price, Paid Handle & Support

6.1. The app is free. The Mycelium software is free and open source. You can install it, self-host it, and use local AI models with no payment of any kind.

6.2. Optional paid handle. You may optionally subscribe to a Mycelium handle — your own address on the network (you.mycelium.id) — for EUR 1 per month. The handle provides managed remote access: it lets AI clients on your other devices reach your own vault through our relay. As described in §4.2, the relay is TLS-passthrough and cannot read your data or your key. The handle is entirely optional — everything else in Mycelium works without it.

6.3. Payment. Handle subscriptions are billed through Stripe, our payment processor. Stripe processes and holds your card details; we never receive or store them — only a Stripe customer reference and whether your subscription is active. You manage or cancel your subscription through the Stripe billing portal (linked from the app).

6.4. Cancellation. You may cancel at any time. Access continues until the end of the paid period, after which the handle/relay address is released and may later become available to others. Cancelling does not affect your local vault, which keeps working.

6.5. Right of withdrawal (EU consumers). As a consumer you normally have 14 days to withdraw from a paid digital service. Because the handle is activated immediately, by subscribing and requesting immediate activation you expressly consent to immediate performance and acknowledge that you lose the 14-day withdrawal right once the service has been fully provided for the period billed. If you withdraw within the 14-day period before the billed period has been fully provided, you are charged only for the portion of the service already supplied. This does not affect your right to cancel future renewals at any time (§6.4) or any mandatory statutory rights you have.

6.6. Price changes. We may change handle pricing with at least 30 days' notice; changes take effect at your next renewal, and you may cancel before they apply.

6.7. Value-for-value support. Beyond the handle, development is funded voluntarily — optional support is available (e.g. via our Patreon, linked from the website). Supporting is entirely voluntary and is not required to use any feature.

6.8. Availability. The optional online services, including the handle and relay, are provided without any uptime or availability guarantee and may be modified, suspended, or discontinued. If we permanently discontinue the paid handle service, your sole remedy is a pro-rata refund of any prepaid, unused portion of your subscription.

7. Disclaimers, Indemnity & Limitation of Liability

7.1. As-is, no warranties. Mycelium and all optional services are provided "as is" and "as available", without warranties of any kind, to the maximum extent permitted by applicable law (consistent with the AGPL-3.0 warranty disclaimer, §§ 15–16). Without limiting this, we expressly disclaim all implied warranties of merchantability, fitness for a particular purpose, title, accuracy, and non-infringement, and any warranty that the software will be uninterrupted, error-free, secure, or free of harmful components. We do not guarantee that your data will not be lost, corrupted, or become inaccessible.

7.2. AI outputs. AI models — local or cloud — may produce content that is incorrect, incomplete, biased, or inappropriate. You should not rely on AI outputs as professional, legal, medical, or financial advice. We are not liable for any action you take, or harm you suffer, in reliance on AI output. Mycelium is a general-purpose personal tool and is not designed or authorized for use in safety-critical, medical, emergency, or other high-risk contexts; you must not rely on it for such uses.

7.3. Your data and keys. Because your data and keys live on your device and we cannot access them, we are not liable for any loss of data or loss of access — including from a lost or forgotten recovery key, a missing or failed backup, device failure or theft, or your own configuration. Keeping backups and safeguarding your key are your responsibility.

7.4. Compromise & security incidents. We do not warrant that the software, your device, or your accounts cannot be compromised. To the maximum extent permitted by applicable law, we are not liable for any unauthorized access, malware, ransomware, exploit, supply-chain attack, phishing, or data exfiltration affecting your device, vault, credentials, or any account or service you connect, regardless of cause.

7.5. Third parties. We are not liable for the actions, data handling, availability, pricing, or security of any third party you choose to use — including cloud AI providers you connect with your own key, operating systems, hardware, drivers, local model weights, messaging platforms, and other third-party software or services.

7.6. Cap on liability. To the maximum extent permitted by applicable law, neither we nor our officers, employees, contributors, affiliates, or agents shall be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation loss of data, loss of profits, loss of goodwill, business interruption, or the cost of substitute goods or services (whether characterized as direct or indirect), and our total aggregate liability for all claims shall not exceed the greater of (a) the amount, if any, you paid us in the 12 months preceding the claim, or (b) EUR 100. These limitations apply regardless of the form or theory of liability (contract, tort, negligence, statute, strict liability, or otherwise) and even if a limited remedy fails of its essential purpose. If this cap is held unenforceable, our liability shall be limited to the minimum permitted by applicable law. These disclaimers and limitations apply equally to the optional online services and to our contributors; for consumers, they apply only to the extent permitted by mandatory consumer-protection law.

7.7. Indemnification. To the maximum extent permitted by applicable law, you agree to indemnify and hold harmless Altus Centauri OÜ, its officers, employees, contributors, affiliates, agents, and successors from any third-party claim, damage, loss, or expense (including reasonable legal fees) arising from (a) your use or operation of the software and the data you process with it (including any third-party personal data), and any content you publish, transmit, or share through the publishing, relay, or shared-space services; (b) your violation of these Terms or any law; (c) your infringement of any third party's rights; or (d) your negligence or willful misconduct. For consumers, this indemnity applies only to the extent permitted by mandatory consumer-protection law. This obligation survives termination.

7.8. Mandatory-law carve-out. Nothing in these Terms excludes or limits liability that cannot be excluded under applicable law — including liability for damage caused intentionally or through gross negligence (Estonian Law of Obligations Act, Võlaõigusseadus § 106), liability for death or personal injury, liability under mandatory product-liability law, and any mandatory rights you have as a consumer under the law of your country of residence.

8. Security

8.1. Mycelium encrypts the sensitive data in your vault at rest on your device using AES-256-GCM, with a wrapped data-encryption-key envelope keyed to your recovery key. Your keys never leave your machine.

8.2. Because we do not hold your vault data, a security incident on our side cannot expose it. If a security incident affects personal data we do process (see the Privacy Policy — e.g. website or waitlist data), we will notify affected users without undue delay and, where required, within 72 hours of becoming aware.

8.3. Your responsibility. You are responsible for the security of your own device, OS account, credentials, and recovery key. We are not liable for unauthorized access resulting from a compromise on your end.

8.4. Reporting. Report security vulnerabilities responsibly via the project's security policy (GitHub private vulnerability reporting) or business@curiouslife.is.

9. Intellectual Property

9.1. The Mycelium software is licensed to everyone under AGPL-3.0 — use, modify, and redistribute it under that license.

9.2. The "Mycelium" and "Curious Life" names, logos, and the mycelium.id website content are owned by Altus Centauri OÜ. The AGPL license to the software does not grant rights to these marks.

9.3. Modified and redistributed versions. Because Mycelium is AGPL-3.0, others may modify and redistribute it. We are not responsible for, and disclaim all liability for, any version of the software we did not ourselves release, or any modification, fork, build, or distribution by a third party. Only official releases from our verified channels are covered by these Terms.

10. Termination

10.1. By you. Stop at any time — uninstall the software and delete your local data. Your right to use the AGPL-licensed software continues under that license regardless.

10.2. By us. We may suspend or terminate access to the optional online services (website accounts, relay, publishing) for violations of these Terms. We cannot and do not "terminate" your local installation.

11. Governing Law & Disputes

11.1. These Terms are governed by the laws of the Republic of Estonia.

11.2. Any disputes shall be subject to the exclusive jurisdiction of Harju County Court (Harju Maakohus), Tallinn, Estonia — except where mandatory consumer-protection law gives you, as a consumer, the right to bring or defend proceedings in the courts of your country of residence.

11.3. Before initiating proceedings, both parties agree to attempt to resolve disputes through good-faith negotiation for at least 30 days.

12. Force Majeure

Neither party is liable for failure or delay caused by circumstances beyond its reasonable control (natural disasters, war, pandemics, government action, third-party or infrastructure outages, or changes in applicable law). The affected party will take reasonable steps to mitigate.

13. General

13.1. Entire agreement. These Terms, together with our Privacy Policy, are the entire agreement between you and us regarding the website and optional services.

13.2. Severability. If any provision is unenforceable, the remaining provisions continue in full force, and any provision held overbroad or unenforceable shall be enforced to the maximum extent permitted rather than struck entirely.

13.3. No waiver. Failure to enforce a provision is not a waiver of it.

13.4. Survival. The disclaimers, limitation of liability, indemnification, and intellectual-property provisions survive any termination or expiry of these Terms.

13.5. No third-party beneficiaries. These Terms create no rights for anyone other than you and us (and, where stated, our officers, employees, and contributors as beneficiaries of the liability and indemnity provisions, who may enforce those provisions directly).

13.6. Mandatory consumer rights. Nothing in these Terms limits any mandatory rights you have as a consumer under the law of your country of residence.

13.7. Changes. We may update these Terms. For the free local software and the website, material changes will be posted on the website (and, for the software, in the repository), and continued use after changes take effect constitutes acceptance. For the paid handle, we will give subscribers at least 30 days' advance notice of material changes, which take effect at the next renewal and which you may decline by cancelling before they apply; material changes do not apply retroactively.

13.8. Assignment. We may assign or transfer these Terms and our rights and obligations under them (for example, in a merger, acquisition, reorganization, or sale of assets). You may not assign your rights or obligations without our prior written consent.

13.9. Language. These Terms are drafted in English; if we provide a translation, the English version governs except where mandatory law in your country of residence requires otherwise.

Contact

Altus Centauri OÜ (registry code 17371918)
Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
business@curiouslife.is