Terms of Service

1. Acceptance of Terms

By accessing or using Trust Onion (the "Services"), you agree to be bound by these Terms of Service ("Terms") and our Privacy Policy. If you do not agree, you may not use the Services.

2. Eligibility

You must be at least 18 years old (or the age of majority in your jurisdiction) to create an account. Children under 18 may use the Services under parental supervision as part of a family group.

3. Account Registration

You may need to create an account to access certain features. You agree to provide accurate information and to maintain the confidentiality of your login credentials.

Where supported, account access may use a WebAuthn passkey. For signed selfies, A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature. If you enable family backup, an encrypted backup blob may be stored on our servers, but we cannot decrypt it; decryption happens only on your device.

4. Description of Services

Trust Onion is an identity verification application for trusted groups, including friends, families, clubs, teams, and organizations. It provides layered verification tools:

Codewords: Time-based verification phrases generated locally on each device, shared within a private group. Codewords rotate every 60 seconds and work offline with no server dependency.

Proofies™: A Proofie™ is a selfie signed using your passkey in the Trust Onion app. Use the app to send and verify Proofies, compare the signing key against the person's full public key in your shared group, and check that the exact original photo has not changed since it was signed. A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature. The cryptographic signing identity is the full public key, not its shortened label. Compare the verified full signing key with the person's public key in your shared Trust Onion group. This does not automatically verify a real-world identity or detect AI-generated images.

Public by default, under your control. Proofie photos and signed records are stored securely on Amazon Web Services (AWS). A Proofie is public by default: anyone with its link or QR code can view the photo and signed record. You can add a password to make a Proofie private, or delete it at any time. Deleting a Proofie removes its photo and signed record from our AWS storage and takes its link offline, but cannot recall copies someone has already downloaded or saved.

Family Groups: Private verification circles where members exchange public keys to establish a cryptographic trust network.

iMessage Integration: An optional iMessage extension that lets you share your current codewords directly inside a conversation without leaving Messages.

Branded and White Label Deployments: We may operate branded or white-labeled versions of the Services for organizations, who can offer the same verification using codewords to their members or teams. These Terms apply to your use of any such deployment unless your organization has a separate written agreement with us.

Codewords are calculated locally on your device. They are never transmitted to or stored on our servers. Alibi Ledger, LLC cannot access your codewords.

5. Use of Services

You agree to use the Services only for lawful purposes and in compliance with all applicable laws and regulations. You may not interfere with the operation or security of the Services, access data not intended for you, reverse engineer, copy, or resell the Services without written permission, or use the Services to harass, stalk, intimidate, or surveil others.

6. Family Groups and Proofies™

Family groups are private verification circles. By joining a group, you consent to share your verification status with other group members. Group administrators can invite or remove members. You can leave any group at any time.

When you create a Proofie, you consent to us storing the photo and the full signed record on Amazon Web Services (AWS). Proofies are public by default: anyone with the link can view the photo and signed record unless you add a password. You can delete a Proofie at any time, which removes it from our storage and takes its link offline. You may not use Proofies for surveillance, harassment, or any purpose other than voluntary verification.

How Proofies™ are created and verified

  1. Capture the original photo. The Trust Onion app captures a JPEG, adds a visible fingerprint and QR watermark, then computes the SHA-256 hash and size of the final photo bytes, watermark included. Edits to those original bytes cause verification to fail.
  2. Unlock the signing key. A standard P-256 WebAuthn passkey signs after Face ID, fingerprint or device-passcode unlock. The signature must carry both user-presence and user-verification flags. This is not a crypto-wallet signature.
  3. Sign the photo and record. One signature covers the photo hash and size, a unique proof ID, a single-use server nonce, time, What3Words location, optional coordinates, and the latest Arbitrum One block number and hash. The Arbitrum One block number and hash are only a public “not before” reference: the signature cannot predate that block. Nothing about the Proofie is written to the blockchain. No transaction, NFT or fee is involved.
  4. Publish and share. Share by link, QR, download or directly to a Trust Onion family group. You can also request a Proofie from a member of your group. The photo and full signed record are stored securely on AWS and are public by default. Add a password to make a Proofie private, or delete it to take it offline.
  5. Verify in Trust Onion. Use the Trust Onion app to send, receive and verify Proofies. Verification checks the passkey signature against the full public key, the original photo's SHA-256 hash and byte length, the proof ID, the fingerprint, and the signed record. Compare the verified full signing key with the person's public key shown in your shared Trust Onion group; the shortened key label alone is not an identity check.

What verification does and does not establish

A successfully verified Proofie signature establishes that whoever created the signed record possessed, or had the ability to use, the private key corresponding to the verified public key at proof creation (signing). It binds that key to the exact original photo and the date, time, location and other information in the signed record. It does not, by itself, establish that the intended person was physically present, personally took the photo, or that the image was captured at the signed date, time or location.

If someone else obtains that private key or gains the ability to use it, they could create a Proofie that successfully verifies if it meets the verification requirements, even when the intended key owner is absent. The Trust Onion app's unlock and shared-group key-comparison process is intended to connect a signing key with the person you trust, but a valid signature is proof of key use, not an unconditional guarantee of that person's identity or physical presence.

Signed time and place cannot be changed undetected; they are not independent proof of physical whereabouts or exact capture time. Family codewords work alongside Proofies, not as an overlay or signed field. Protect your signing device, passkey and device passcode. If you suspect key compromise, do not rely on successful verification alone as evidence that the intended person created the Proofie.

Read the current Proof of Life® explanation for more about the process.

7. Intellectual Property

All content, trademarks, software, and technology are the property of Alibi Ledger, LLC or its licensors. You are granted a limited, non-exclusive, revocable license to access and use the Services.

8. User Content

You retain ownership of content you submit but grant Alibi Ledger, LLC a worldwide, non-exclusive, royalty-free license to use, host, and display it solely to operate the Services.

9. User Data and Privacy

Your codewords and verification data are under your control as described in Section 4. When you contact us, submit a support request, or subscribe to our newsletter, we handle that information as described in our Privacy Policy. You may unsubscribe from product updates at any time.

10. Disclaimers

The Services are provided "as is" and "as available." To the fullest extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. While we design our tools to help prevent impersonation scams, we cannot guarantee that all scams will be prevented. Trust Onion is a verification aid, not a security guarantee.

11. Limitation of Liability

To the maximum extent permitted by law, Alibi Ledger, LLC and its affiliates are not liable for indirect, incidental, consequential, or punitive damages arising out of your use of the Services. Our total liability shall not exceed the amount you paid for the Services in the twelve months preceding the claim.

12. Indemnification

You agree to indemnify and hold harmless Alibi Ledger, LLC from any claims or damages arising out of your use of the Services or your violation of these Terms.

13. Termination

We may suspend or terminate your account or access at any time for any reason, including violation of these Terms.

14. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of Wyoming, without regard to conflict-of-law principles. Any dispute arising from these Terms shall first be attempted to be resolved through binding arbitration in Wyoming, USA, before resorting to courts. Exclusive venue for any litigation shall be in the state or federal courts located in Wyoming, USA.

15. Severability

If any provision of these Terms is held invalid or unenforceable, the remaining provisions will remain in full force and effect.

16. Changes to Terms

We may update these Terms periodically. Continued use of the Services after updates constitutes your acceptance of the revised Terms.

17. Contact Information

Questions about these Terms can be sent to:

Alibi Ledger, LLC
30 N Gould St Ste N
Sheridan, WY 82801

Email: legal@trustonion.io

Last updated: October 8, 2026