Legal Terms, Refund Policy, Privacy & Clean-Room Provenance

1. Refund, Cancellation & Billing Policy

Cancellation

Self-serve CiderFlight plans (Pro Developer, Verified .edu Student, and Team for 2–24 seats, at the prices shown on our pricing page) can be canceled at any time by emailing licensing@ciderflight.com from the account email. Cancellation takes effect at the end of the current billing period. Payments are currently made by invoice (ACH or wire). Online card billing through Stripe will be offered only when enabled. University (Classroom, Department, and School), Business, Organization, Enterprise, and AI Platform License Agreements, including the paid 90-day pilot, are governed by their Order Forms.

14-Day Refund Guarantee

If you are not satisfied with your initial Pro Developer, Student, or Team purchase, email licensing@ciderflight.com within fourteen (14) calendar days of payment and we will refund that payment in full to the original payment method. We aim to process refunds within five (5) business days. Refunds for Order Form purchases are governed by the Order Form.

2. Privacy & Data Handling

• Local CLI, MCP stdio server & CI runner: Your .swift source code stays in your own environment. The local tools do not send your code or usage telemetry to CiderFlight. The installer contacts api.ciderflight.dev only to check for and download releases using your license key.
• Hosted API (when available): Code sent to the hosted API is processed in a private temporary directory and deleted from temporary storage immediately after the diagnostic response is returned. We do not store your code.
• Metadata we log: For each hosted request, we log the time, a hashed license key, plan tier, endpoint, client IP address and subnet, a SHA-256 hash of the submitted code, line count, imported module names, your key's watermark ID, and an abuse-control flag. We also log device fingerprints and the email and organization details on your account. We use this metadata only for licensing, billing, abuse prevention, and security, and keep request metadata for thirteen (13) months. Full details are in Terms §5.9.
• No AI training, no sale: CiderFlight LLC does not train, fine-tune, or evaluate any AI or machine-learning model on Customer source code or metadata, and does not sell personal information or Customer source code.
• Payments: Payments are currently made by invoice (ACH or wire). If card payments are enabled later, they will be processed by Stripe, Inc., and CiderFlight will not store full card numbers.
• Contact & requests: To ask about or delete your account data, email licensing@ciderflight.com.

3. Commercial License (EULA) Summary & Liability Cap

The CiderFlight™ Linux iOS verification engine, Binary SDK (17 supported iOS frameworks), headless runtime verifier, and CI integration are proprietary commercial software owned by CiderFlight LLC and governed by the Commercial License (LICENSE-COMMERCIAL.md).

Every Team, Business, Organization, Enterprise, and Education plan comes with one license key for your organization, valid for the number of seats you purchase. Each seat covers one person on up to 2 computers, with 1 active session at a time. The person who pays for the plan (the account owner) shares the key with their team and can see and remove registered computers in the Customer Portal. Pro and Student plans are a personal key for one person on up to 2 computers.

• Platform hosting: Embedding or exposing CiderFlight inside a commercial cloud IDE, AI coding platform, or multi-tenant sandbox requires an active AI Platform License Agreement.
• No reverse engineering: You may not decompile, disassemble, or reverse engineer the CiderFlight binaries, or use them to build a competing product, except to the extent applicable law expressly permits despite this restriction.
• License identifiers: Licensed binaries and outputs carry a per-customer license identifier (watermark). Do not remove or alter it.
• Benchmarking: You may run benchmarks and share the results inside your organization, and with your advisors and procurement consultants under confidentiality, to evaluate a purchase. Publishing benchmark results, or sharing them with any other third party, requires our prior written consent. That consent will not be unreasonably withheld if you share your methodology with us and give us a chance to comment.
• "AS IS" preflight tool: CiderFlight is a static and behavioral preflight verification tool provided "AS IS". It does not replace final macOS Xcode code-signing (xcodebuild archive) or physical iOS device testing.
• Liability cap: Each party's total liability is capped at the fees paid or payable for 1 month of service for monthly self-serve plans, and at the fees paid or payable in the 12 months before the claim for annual, bulk, university, pilot, and AI Platform (OEM) agreements. The cap does not apply to the Excluded Claims listed in Commercial License §5.2: unpaid fees, breach of the license restrictions or misuse of CiderFlight's intellectual property, a party's indemnity obligations (except that CiderFlight's IP indemnity remains capped), and fraud, gross negligence, or willful misconduct. A signed order form may set a different cap, and its terms control.

4. Clean-Room Provenance

CiderFlight LLC represents that the CiderFlight SDK compatibility layer and verification engine were written by CiderFlight from publicly documented API names and signatures. CiderFlight did not copy Apple's proprietary SDK binaries, private headers, or the contents of Xcode.xip, and the CiderFlight distribution contains none of them. CiderFlight runs on the open-source Swift toolchain (Apache License 2.0 with Runtime Library Exception) that you install. The CiderFlight macro plugin (libCiderFlightMacros.so) dynamically links, at run time, to the swift-syntax libraries supplied with your separately installed Swift toolchain; CiderFlight does not include or redistribute swift-syntax (see Open-Source Notices). CiderFlight believes this approach is consistent with Google LLC v. Oracle America, Inc., 593 U.S. 1 (2021). This statement is not a legal opinion, and customers should rely on their own counsel.

5. Terms of Service & End User License Terms

Effective: October 28, 2026. These Terms of Service (the "Terms") are a binding agreement between CiderFlight LLC, a Florida limited liability company ("CiderFlight," "we," or "us"), and the individual or entity that accepts them ("Customer" or "you"). If you accept on behalf of an organization, you represent that you have authority to bind it, and "you" means that organization.

5.1 Acceptance

You accept these Terms by (a) signing or accepting an Order Form that references them, (b) paying an invoice for CiderFlight, (c) installing, configuring a license key for, or running the CiderFlight software, or (d) sending requests to the CiderFlight hosted API. If you do not agree, do not use CiderFlight.

5.2 Definitions

• "Software" means the CiderFlight command-line tools, binary SDK distribution (including CiderFlightSDK.swiftmodule, libCiderFlightSDK.a, and ciderflight.pyz), MCP server, GitHub Action, container images, and documentation that we make available to you, including updates.
• "Hosted Service" means the CiderFlight hosted verification and MCP endpoints (for example, https://api.ciderflight.dev/v1/mcp and /v1/verify), when available.
• "Customer Code" means source code, prompts, files, and other content that you or your users submit to or process with the Software or Hosted Service, and any output generated from it. "AI Output" means code or content generated by an AI system that you use, whether or not checked with CiderFlight.
• "Order Form" means a quote, order form, pilot order form, or invoice signed or accepted by both parties (or, for self-serve plans, the plan and price you select on our website) that references these Terms.
• "License" means the CiderFlight Commercial Software License Agreement (Commercial EULA, also distributed as LICENSE-COMMERCIAL.md).
• "Subscription Term" means the period stated in your Order Form or plan, including renewals.

5.3 License Grant

Subject to these Terms, your Order Form, and timely payment, CiderFlight grants you the non-exclusive, non-transferable license described in the License for the Subscription Term and the plan, seat count, and usage limits you purchased. All rights not expressly granted are reserved. The Software is licensed, not sold.

5.4 Term, Renewal & Termination

• Term. These Terms apply from acceptance until all Subscription Terms have ended. Monthly plans renew monthly and annual plans renew annually unless either party gives notice of non-renewal before the end of the current Subscription Term, or the Order Form says otherwise. Pilot Order Forms do not auto-renew.
• Cancellation by you. You may cancel a self-serve plan at any time by emailing licensing@ciderflight.com from the account email. Cancellation takes effect at the end of the current billing period. The 14-day refund policy applies to initial self-serve purchases.
• Termination for breach. Either party may terminate an Order Form if the other party materially breaches it or these Terms and does not cure the breach within thirty (30) days after written notice. CiderFlight may suspend or terminate immediately, on notice, if you breach the License restrictions on redistribution, reverse engineering, multi-tenant hosting, or watermark tampering, or if undisputed fees are more than fifteen (15) days overdue after a payment reminder.
• Suspension. We may temporarily suspend access to the Hosted Service to address a security threat, abuse, or use that exceeds your plan limits. Where practical, we will give you notice first and restore access promptly once the issue is resolved.
• Effect of termination. When an Order Form ends: (a) your license for that Order Form ends, and you must stop using the Software and delete all copies, binaries, and license keys; (b) any fees accrued before termination remain payable; and (c) if you terminate for our uncured material breach, we will refund prepaid fees for the unused remainder of the Subscription Term. Otherwise, prepaid fees are non-refundable except as stated in the refund policy.

5.5 Fees

Fees are stated on our pricing page or in your Order Form and are in U.S. dollars. Except as stated in the refund policy or an Order Form, fees are non-cancelable and non-refundable. We may change self-serve prices for future renewal periods by giving at least thirty (30) days' notice. Prices in a signed Order Form are fixed for its Subscription Term.

5.6 Invoicing & Payment

• We currently accept payment by invoice, by ACH or wire transfer to the CiderFlight LLC account identified on the invoice. Unless the Order Form states otherwise, invoices are due within fifteen (15) days of the invoice date.
• Online card payment through Stripe will be offered only when enabled, and we will say so on this page when it is. Until then, no card details are collected on this website.
• For your protection, confirm any change to our bank details by contacting licensing@ciderflight.com before you send payment. We will never change payment instructions by email alone.
• Late amounts may accrue interest at the lesser of 1.0% per month or the maximum rate permitted by law.

5.7 Taxes

Fees do not include taxes. You are responsible for all sales, use, value-added, goods and services, withholding, and similar taxes and duties related to your purchase, except taxes based on CiderFlight's net income. If you are required by law to withhold tax, you will gross up the payment so that we receive the full invoiced amount, unless the Order Form states otherwise. If you provide a valid exemption certificate, we will not charge the exempt tax.

5.8 Confidentiality

"Confidential Information" means non-public information disclosed by one party to the other that is marked confidential or that a reasonable person would understand to be confidential. Our Confidential Information includes the non-public Software, binary artifacts, non-public documentation, license keys, and the pricing and terms of any Order Form. Your Confidential Information includes Customer Code. The receiving party will use Confidential Information only to perform under these Terms. It will protect that information with at least reasonable care and disclose it only to employees, contractors, and advisors who need to know it and are bound by similar obligations. Information that is public through no fault of the recipient, already known to the recipient, independently developed, or rightfully received from a third party without restriction is not Confidential Information. A party may disclose Confidential Information if required by law, after giving prompt notice where lawful. These obligations last three (3) years after termination, and for trade secrets, for as long as they remain trade secrets.

5.9 Data Processing

• Local tools. When you run the CiderFlight CLI, MCP stdio server, or GitHub Action on your own machine or runner, your source code stays in your environment. The local tools do not send your code or usage telemetry to us. The installer (install.sh) contacts api.ciderflight.dev to check for releases and download them, and sends your license key to do so.
• Hosted Service: code is processed ephemerally. Code you send to the Hosted Service is written to a private temporary directory, verified, and then deleted from temporary storage immediately after the diagnostic response is returned. We do not store the code. Diagnostics returned to you may quote parts of it.
• Metadata we log. For each hosted request, we log: the time; a hashed form of your license key; your plan tier and ledger code; the endpoint called; the client IP address and its network subnet; a SHA-256 hash of the submitted code (which cannot be reversed into the code but can match identical submissions); the line count; the names of modules the code imports; the watermark ID assigned to your key; and whether the request was blocked by abuse controls. We also record timing and cleanup statistics for each request. For each device that uses a key, we record a device fingerprint (a truncated hash of the machine ID or IP address plus the client user-agent string), the IP address, and first-seen and last-seen times. Account and billing records include your email address, organization name, plan, usage counts, and invoice references.
• Why we log it. We use this metadata only to authenticate keys, enforce plan and seat limits, bill, detect abuse and automated scraping, trace leaked or watermarked artifacts, secure the service, and provide support.
• Retention. We keep request metadata for thirteen (13) months and account and billing records for as long as your account is active plus the period required by tax and accounting law. We then delete or de-identify them.
• No AI training. No sale. CiderFlight does not use Customer Code or metadata to train, fine-tune, or evaluate any AI or machine-learning model. We do not sell or rent personal information or Customer Code, and we do not share them for cross-context behavioral advertising.
• Service providers. We use hosting, email, and (when enabled) payment providers to run the service. They process data only on our instructions. Current infrastructure providers include Cloudflare (DNS, edge delivery, and email routing) and Stripe (payment processing, when enabled); an updated sub-processor list and a Data Processing Addendum (for enterprise or EEA/UK customers) are available on request to licensing@ciderflight.com.
• Your responsibilities. Do not submit secrets, credentials, or personal data in code sent to the Hosted Service. Enterprise customers that need a data processing addendum may request one at licensing@ciderflight.com.

5.10 Support & Service Levels

• Evaluations and pilots. Free evaluations and paid pilots (including the paid 90-day AI Platform pilot, ledger code B5-PILOT) are provided "AS IS". Support is best-effort by email at licensing@ciderflight.com on U.S. business days. There is no uptime commitment and no service credits unless a pilot Order Form expressly states otherwise.
• Paid annual, bulk, university, and OEM plans. Support response targets, availability targets, and any service credits apply only as stated in the Order Form. If an Order Form states none, the evaluation and pilot terms above apply.
• Self-serve plans. Support is by email on a best-effort basis, with no uptime commitment.

5.11 Warranty Disclaimer & Limitation of Liability

CiderFlight is a Linux preflight verification tool. It does not replace macOS Xcode builds, Apple code-signing, App Store review, or testing on physical devices. Except as expressly stated in an Order Form, the Software and Hosted Service are provided "AS IS" and "AS AVAILABLE," without warranties of any kind, as set out in the License. Each party's liability is limited as set out in Section 5 of the License. That section includes a cap of one (1) month of fees for monthly self-serve plans and twelve (12) months of fees for annual, bulk, university, pilot, and OEM Order Forms, subject to the exclusions stated there.

5.12 Export Control & Sanctions

The Software is subject to U.S. export control and sanctions laws, including the Export Administration Regulations (EAR) and regulations administered by the U.S. Treasury Department's Office of Foreign Assets Control (OFAC). You will not export, re-export, transfer, or provide access to the Software or Hosted Service (a) to any country or region subject to comprehensive U.S. sanctions, (b) to any person on a U.S. restricted-party list, including the OFAC Specially Designated Nationals List and the Commerce Department's Entity List, or (c) for any end use prohibited by the EAR. You represent that you are not such a person and are not located in such a country or region.

5.13 Assignment

You may not assign or transfer these Terms or any Order Form without our prior written consent, except to a successor in a merger or sale of substantially all of your assets that is not our competitor, on written notice. We may assign these Terms to an affiliate or to a successor in a merger, acquisition, or sale of all or substantially all of the business or assets to which these Terms relate. Any other attempted assignment is void.

5.14 Order of Precedence

If documents conflict, the following order controls: (1) the Order Form; (2) a master agreement negotiated and signed by both parties (an "MSA"), if any; (3) the License; and (4) these Terms. An Order Form overrides the MSA only where it expressly identifies the MSA provision that it changes.

5.15 Entire Agreement; Changes

These Terms, the License, any MSA, and your Order Forms are the entire agreement between the parties about their subject matter. They supersede all prior proposals and understandings. Terms in your purchase order or procurement portal do not apply, even if accepted electronically. We may update these Terms by posting a new version with a new effective date. For self-serve plans, changes apply from your next renewal. For signed Order Forms, changes apply only if both parties sign an amendment. If any provision is unenforceable, the rest remains in effect. A waiver must be in writing.

5.16 Notices

Notices to CiderFlight must be sent by email to licensing@ciderflight.com, with a copy for legal notices by mail to CiderFlight LLC, c/o Northwest Registered Agent LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702. We will send notices to the email address on your account or Order Form. Email notices are effective when sent, unless a bounce message is received.

5.17 Survival

The sections on fees owed, taxes, confidentiality, data processing (as to retained records), warranty disclaimers, limitation of liability, indemnification, ownership, export control, governing law, and any other provision that by its nature should survive will survive termination or expiration.

5.18 Governing Law & Venue

These Terms are governed by the laws of the State of Florida and applicable U.S. federal law, without regard to conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply. The parties submit to the exclusive jurisdiction of the state and federal courts located in Miami-Dade County, Florida, and, to the extent permitted by law, any claim must be brought on an individual basis and not as a class or representative action. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

5.19 Patent Notice

Patent Pending. Aspects of the CiderFlight software are the subject of U.S. Provisional Patent Application Nos. 64/184,444, filed October 26, 2026, and 64/187,027, filed October 29, 2026, owned by CiderFlight LLC. No license under any patent or patent application is granted except as expressly stated in the License or a signed Order Form.

5.20 Apple Non-Affiliation & Trademarks

CiderFlight is an independent product of CiderFlight LLC. It is not affiliated with, endorsed by, sponsored by, or approved by Apple Inc. Apple, Swift, SwiftUI, UIKit, SwiftData, StoreKit, ARKit, SceneKit, RealityKit, MapKit, PDFKit, Xcode, TestFlight, App Store, macOS, and iPadOS are trademarks of Apple Inc., registered in the U.S. and other countries and regions. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used under license. These names are used only to identify compatibility. CiderFlight™ is a trademark of CiderFlight LLC.

5.21 Contact

Questions about these Terms: licensing@ciderflight.com.

6. Trademarks

CiderFlight™ is an independent product of CiderFlight LLC. It is not affiliated with, endorsed by, sponsored by, or approved by Apple Inc. Apple, Swift, SwiftUI, UIKit, SwiftData, StoreKit, ARKit, SceneKit, RealityKit, Charts, MapKit, PDFKit, Xcode, TestFlight, App Store, macOS, and iPadOS are trademarks of Apple Inc., registered in the U.S. and other countries and regions. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used under license. These names are used only to identify the APIs and platforms with which CiderFlight is compatible.

7. Open-Source Notices

CiderFlight's own code is proprietary. CiderFlight works with, and in some distributions includes, the following open-source components, each under its own license. Full notices are in THIRD_PARTY_NOTICES.txt, included in every CiderFlight download and available at licensing@ciderflight.com.

• Swift toolchain, standard library & runtime (Swift 6.0.x; tested with 6.0.3) — Apache License 2.0 with Runtime Library Exception. Copyright Apple Inc. and the Swift project authors. Installed by you; CiderFlight binaries are compiled with it.
• SwiftSyntax (the version bundled with your Swift toolchain) — Apache License 2.0 with Runtime Library Exception. Copyright Apple Inc. and the Swift project authors. The CiderFlight macro plugin (libCiderFlightMacros.so) dynamically links, at run time, to the swift-syntax libraries supplied with the user's separately installed Swift toolchain; CiderFlight does not include or redistribute swift-syntax.
• Container images (if you use a CiderFlight Docker image) — built on the official swift:6.0-jammy image, which contains the Swift toolchain, Ubuntu 22.04 packages, and Python 3 under their own open-source licenses.

Nothing in the CiderFlight License restricts your rights under these open-source licenses.

8. Patent Notice

Patent Pending. Aspects of the CiderFlight™ iOS verification engine and Binary SDK are the subject of U.S. Provisional Patent Application Nos. 64/184,444, filed October 26, 2026, and 64/187,027, filed October 29, 2026.