Terms of Service

CtrlAltMove is made by Lifesaver Labs Public Benefit Corporation ("Lifesaver Labs", "we"), a Florida public benefit corporation. These are the terms for using CtrlAltMove: the apps on your phone and your computers, your account, CtrlAltMove Pro, Spotters, and stakes. They are written to be read. If something here is unclear, tell us; we would rather fix the words than argue about them.

1. What CtrlAltMove is, and what it is not

CtrlAltMove is a commitment device. You set a deadline. If your phone has not verified that you moved by the time it arrives, your computer locks — and, if you chose that too, the apps you picked on your phone are shielded — until your phone verifies movement and hands back the key.

• It enforces only what you configured. Every deadline, every rule, every paired computer, and every shielded app is something you set up yourself. CtrlAltMove never adds a lock you did not ask for.
• It is not medical advice and it is not a medical device. It reads steps, heart rate, and pace to judge a rule you chose; it does not diagnose, treat, or monitor anything. Talk to a clinician before changing your exercise habits, especially if you have a heart condition, are pregnant, are recovering from an injury, or have been told to limit exertion. Stop if you feel unwell. The "extra months of life" figure in the planner is a population average, not a prediction about you; see the sources page.
• It is not for children under 13. Do not use CtrlAltMove if you are under 13, and do not set it up for someone who is.
• Stakes are for adults only. You must be 18 or older to place a stake, and the app asks you to confirm that every time.

2. Your account

The phone works on its own without an account. Signing in is what lets your phone and your computers agree (pairing a computer needs it), lets Pro follow you across devices, and lets us turn your locks off for you if you ever ask.

• One person per account. Your account is yours alone. Do not share your sign-in, and do not sign in to an account that is not yours.
• Keep your paired devices under your control. When you pair a computer, you are telling CtrlAltMove that you have the right to lock it. Only pair devices you own or are allowed to lock, and unpair a device before it leaves your hands.
• You are responsible for what happens under your account, including anything done on your devices by someone else in your household, and including a minor you allow to use them. Keep your sign-in safe. If you think someone else has it, or has used your account without permission, change it and tell us at support@ctrlaltmove.com.
• Deletion is self-service and complete. Settings → Account → Delete account removes your account records, your subscription linkage, and your sign-in identity from our systems, immediately, without an email queue. Two things it does not do: it does not cancel a Pro subscription with Apple or Google, which you cancel in the store (the app tells you this before you confirm); and it does not erase the stake ledger, which is a financial record kept for seven years, detached from your account and keyed only by an opaque id, exactly as the privacy policy describes.

3. The safety promises we make, and what they mean

An app that can black out your work machine has to earn the right. These are the rules the whole product is built under. They are design commitments: we build to them, we test them, and a lock that breaks one of them is the most serious bug we can have.

• It fails open, everywhere. A crash, a dead sensor, a denied permission, or an unreachable server means no lock, never a stuck one.
• The escape hatches are always free. On every lock screen you can enter your code, wait it out, defer to tomorrow, or spend an emergency unlock from your budget. The wait needs no code, no Pro, and no permission; it always opens. The emergency unlock and the deferral come from budgets every plan includes, and none of the hatches is ever hidden, delayed, or sold.
• Emergency apps are never shielded, and the app never gets in the way of an emergency call. On Android, the dialer and emergency-response apps such as Neighbor 911, PulsePoint, and PulsePoint AED are excluded from shielding by code, not by setting, and no configuration can add them. On iOS the operating system does not let an app inspect what it shields, so instead every shielded app can be released from its own shield screen with one tap: no code, no wait, no Pro, and not even in Hard Mode. On both platforms, emergency calling belongs to the operating system and sits outside anything CtrlAltMove touches.
• One unlocked hour, guaranteed. Every rolling 12-hour window keeps at least one continuous unlocked hour, whatever your schedule.
• A support disarm exists. If you write to us and ask, we can turn every lock on your account off from our side. It clears the phone lock even in Hard Mode and exposes your computers' codes.
• A device that cannot honestly enforce a lock does not. A computer that is unpaired, or too out of date to read your plan, fails open at the deadline, says "Not protecting", and logs the skipped deadline instead of locking with the wait as the only way out.
• We never claim a lock that is not armed. If a permission the lock needs is missing, the app says so plainly and says what still works.

What these promises do not do: they do not make CtrlAltMove a safety system, and they do not move responsibility for your safety onto us. You remain responsible for yourself and for the people and devices around you. Do not rely on a lock, or on a way out of one, in an emergency; use the operating system's emergency features, another device, or a phone call. If a lock ever behaves outside these rules, email support@ctrlaltmove.com with the word LOCKED in the subject and we will treat it as the most urgent thing we have.

4. Your licence, and what you agree not to do

We give you a limited, personal, non-transferable, revocable licence to install and use the CtrlAltMove apps, under these terms, on devices you own or control. That licence is all you get; we keep every right we do not expressly give. Under it you agree not to:

• copy, sell, rent, lend, sublicense, or otherwise redistribute the apps or access to the service;
• reverse-engineer, decompile, or tamper with the apps or the service beyond what the law where you live expressly allows;
• scrape, crawl, or harvest the service, or access it by any means other than the apps we publish;
• remove or obscure any copyright, trademark, or other notice, or use the CtrlAltMove or Lifesaver Labs names, logos, or marks without our written permission;
• use CtrlAltMove to lock, shield, or otherwise control another person's devices without that person's informed consent — CtrlAltMove is a tool you point at yourself;
• help someone else defeat a lock they set for themselves, or sell or distribute a way to do so (defeating your own lock is your business; the escape hatches are there so you never need to);
• abuse Spotters: do not invite someone who has not agreed to be invited, do not use the Spotter channel to harass anyone, and do not pressure a Spotter to hand over a share they earned;
• place a stake for anyone but yourself, or with a bank account or card that is not yours to use;
• interfere with the service: no attempts to break into other accounts, overload our systems, or bypass the checks that protect other people's money and data;
• use CtrlAltMove where doing so is unlawful, or in a way that breaks a law that applies to you.

If you break these rules we may suspend or close your account, as section 15 describes. We will never respond by tightening a lock, and every escape hatch stays where it was.

5. CtrlAltMove Pro

The free tier is a complete product: step-count verification anywhere, the full schedule and every deadline mode, one saved gym, one paired computer, one Spotter, and every safety feature. Moving a deadline is always free, because a commitment you cannot fit to a closed gym or a changed shift is a trap, not a tool.

Pro adds ways to verify and ways to elaborate: gym-visit verification, heart-rate and pace rules, more than one deadline a day, more computers, more gyms, more Spotters, groups, planned pauses, the Sunday planner, and the other features the app labels Pro.

• Pro is a subscription sold through Apple's App Store or Google Play, at the price the store shows you, under that store's terms. Billing, renewal, cancellation, and refunds are handled by the store, not by us: we never see your payment details and cannot change or refund a store charge. Cancel in your Apple ID or Google Play subscription settings.
• The trial, if one is offered, is a store introductory offer. It captures a payment method and converts to a paid subscription unless you cancel before it ends; the store shows you the date. An expired trial is an ordinary lapse.
• Core locking and safety are never paywalled. Locks, unlock codes, the wait, the emergency unlock, deferrals, emergency apps, the respite hour, and moving your deadlines are free on every plan, forever.
• A lapse never locks you harder. If Pro ends, your setup is kept and nothing you saved is deleted. Pro verification paths fall back to steps or the wait at the next deadline; a lapse never clears or tightens a lock that is already running. Every computer already paired keeps its unlock code. When we cannot reach the store to confirm your subscription, the app honours its last confirmed answer for 14 days.
• Restore purchases on the paywall or in Settings brings Pro to a device signed in to the same account.

6. Stakes

A stake is optional. It is an amount of your own money, chosen by you in the Sunday planner, that you lose only if you skip a workout you planned. CtrlAltMove works exactly the same without one, and you will never find one pre-checked, recurring, or set as a default.

• The Stake Terms govern. They form part of these terms from the moment you place a stake, and the app shows them to you before every stake. They say what forfeits and what never does, when a week is judged, how a forfeit is pro-rated, the caps, and where the money goes. We do not repeat those rules here; where these terms and the Stake Terms differ about a stake, the Stake Terms win.
• Nothing is ever charged unless your own phone recorded a forfeit, and a contest window passed. The server has no opinion of its own about whether you moved. When in doubt, no charge.
• Lifesaver Labs never holds your money. A stake is a bank account or card on file with Stripe and a promise; there are no holds, no deposits, and no upfront charges. A forfeit is charged after the fact, and every charge gets a Stripe receipt.
• Contesting, refunds, and disputes work as the Contesting section of the Stake Terms describes. We would rather waive a charge than argue about one.
• A Spotter who opts in to receive shares does so under the Spotter-share section of the Stake Terms and under Stripe's Connected Account Agreement, which they accept on Stripe's own pages. Their identity and bank details go to Stripe, never to us. A matured share is the one thing Lifesaver Labs holds for anyone, and the Stake Terms say for how long.
• Stakes are for adults. You confirm you are 18 or older before every stake.

7. Spotters

A Spotter is a person you invite to learn whether you kept your commitment. Spotting is a support role.

• You choose what they see. At the invite you choose a level, basic or full, and the invitee sees that level before accepting. A basic Spotter learns that a deadline was kept, missed, moved, or ended with an emergency unlock, and nothing else; a full Spotter also learns the rule, how far you got, how the deadline ended, and the reason you gave. The level can be lowered at any time and raised only by a fresh invite. No Spotter ever learns your location, your gym, your health readings, or which apps you shield.
• A Spotter has no authority over your devices. Nothing a Spotter can do locks, unlocks, reschedules, extends, or restricts anything. The entire channel is notification and encouragement.
• Be considerate. Your Spotters are doing you a favour. Do not invite someone who has not agreed, and do not use the channel to harass anyone.
• A Spotter can leave at any time, and you can remove a Spotter at any time. If you have chosen to send part of a forfeit to your Spotters, a Spotter who leaves keeps any share that has already matured, under the Stake Terms.

8. Your content and our software

• Yours. The notes you write and choose to send to your Spotters, the contest text you send us, a display name you choose, and your schedule and settings are yours. You give us the licence we need to store them and deliver them where you asked — to your own devices, to your Spotters, or to the person reviewing a contest — and no wider. We use them only to run the service for you, and to answer a question about a stake, as the privacy policy describes.
• Ours. The CtrlAltMove apps, the service, and the CtrlAltMove and Lifesaver Labs names and marks belong to Lifesaver Labs and are protected by copyright, trademark, and other laws. Nothing in these terms transfers any of them to you.
• Feedback. If you send us an idea, a bug report, or a suggestion, we may use it freely, without owing you anything, and without any obligation to keep it confidential.

9. Third-party services

CtrlAltMove runs on a small set of services, each of which receives only what the privacy policy describes: Google Firebase (account, sync, and messaging), RevenueCat (subscription status), Stripe (bank account or card on file and charges if you place a stake; identity and payouts if you opt in to receiving stake shares as a Spotter), Sentry (crash reports), PostHog (usage analytics), and Apple's App Store and Google Play (purchases and notifications). Their terms apply to what they do for you: Stripe's terms and privacy policy govern the payment details you give Stripe, and a Spotter who opts in to receive shares accepts Stripe's Connected Account Agreement on Stripe's pages; the store's terms govern your subscription. We are not responsible for a third party's service, and a third party's outage never leaves a lock stuck: when we cannot reach one, the app fails open.

10. Apple and Google Play

If you got CtrlAltMove from Apple's App Store, these additional terms apply, and Apple requires us to say them:

• This agreement is between you and Lifesaver Labs only, not Apple. Apple is not responsible for the app or its content, and we, not Apple, are responsible for it.
• Apple has no obligation to provide maintenance or support for the app.
• If the app fails to conform to any applicable warranty, you may notify Apple and Apple will refund the purchase price, if any, to you. To the extent the law allows, Apple has no other warranty obligation, and any other claim, loss, or cost arising from a failure to conform is our responsibility, not Apple's.
• Apple is not responsible for addressing any claim by you or a third party relating to the app or your use of it, including product-liability claims, a claim that the app fails to conform to a legal or regulatory requirement, or a consumer-protection claim.
• If a third party claims that the app infringes their intellectual property, we, not Apple, are responsible for investigating, defending, settling, and discharging the claim.
• You must comply with the App Store's Terms of Service and usage rules when using the app.
• Apple and its subsidiaries are third-party beneficiaries of these terms and, once you accept them, may enforce them against you.

If you got CtrlAltMove from Google Play, this agreement is likewise between you and Lifesaver Labs and not Google, Google is not responsible for the app or for support of it, and you must comply with the Google Play Terms of Service.

11. Updates and older versions

We update the apps, and an update may change how a feature works, add one, or retire one. We publish a compatibility policy at ctrlaltmove.com/compat.json that says which versions are current and which are too old to be trusted with your plan. A build that has fallen below it stops enforcing and asks you to update; a build that cannot reach the policy carries on. The direction is always fail-open: an old version may stop locking, but it never locks harder, and it never takes an escape hatch away. Install updates when they are offered; they carry the safety fixes.

12. Communications

We send operational messages about your account, your deadlines, your Spotters, and your stakes — by push notification, and by email to the address on your account. Deadline reminders, lock and unlock notices, Spotter events, a stake judgement, and a Stripe receipt are all part of running the service. Notifications are a permission you grant, and the app works honestly without it — but some of these messages protect you, so turning them off has consequences the app tells you about: without notifications, for example, a stake judgement cannot reach you in time, so the Stake Terms give you 7 days to contest instead of 48 hours. We do not send promotional messages today; if we ever do, they will be separate from the operational ones and every one of them will carry a way to turn them off.

13. Privacy

The privacy policy governs how we handle your data, and it forms part of these terms. The one-line promise: your movement evidence — locations, heart rate, steps, pace — is judged on your phone and never uploaded; your account carries only your schedule, your settings, and your pass/fail outcomes so your devices agree. We do not sell personal data and we do not show ads.

14. Changes to the service and to these terms

• The service will change. We add features, retire them, and change how they work. We may also withdraw CtrlAltMove altogether. Whatever changes, the promises in section 3 stay, and a change never leaves a lock stuck: a version too old to be trusted with your plan fails open rather than enforcing it.
• These terms will change too. When they do we post the new version at this address with a new effective date and last-updated date, and we call out material changes in the app. If you keep using CtrlAltMove after the effective date, you accept the new terms. If you do not accept them, stop using the service and, if you like, delete your account.
• A stake keeps the terms it was placed under. A material change to the Stake Terms never applies to a stake already placed; each stake records the terms version you agreed to, and is judged by it.

15. Termination

You can stop at any time: delete the apps, or delete your account in Settings. We may suspend or close your account if you break section 4, use the service unlawfully, or put other people or their money at risk, and we may stop offering the service altogether with reasonable notice. Whatever the reason, the safety promises in section 3 are honoured on the way out: a suspended or closed account is never left locked, the phone shield lifts, and every paired computer keeps its unlock code. Open stakes are cancelled under the Stake Terms and nothing new is charged. Sections 6 (as to a charge that already happened), 8, 16, 17, 19, and 20 survive the end of these terms.

16. Disclaimers

CTRLALTMOVE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT THE LAW ALLOWS, LIFESAVER LABS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT PROMISE THAT THE SERVICE WILL MEET YOUR NEEDS, BE UNINTERRUPTED OR ERROR-FREE, OR THAT ANY VERIFICATION WILL BE ACCURATE OR TIMELY, AND WE MAKE NO PROMISE ABOUT FITNESS, HEALTH, OR ANY OTHER OUTCOME. In plain words:

• No guarantee of fitness or health outcomes. A commitment device changes what you do; it does not change what your body does with it. Any benefit is yours to earn and depends on you.
• Verification depends on your phone's sensors and on the operating system. Steps, heart rate, pace, and location come from your phone, your wearable, Apple Health, Health Connect, or a Bluetooth sensor, through permissions you grant. They can be late, missing, or wrong, and the operating system can stop a background process at any time. When they fail, the app fails open; it does not fail accurately.
• Locking depends on the operating system too. A permission you revoke, an update that changes what an app may do, or a device that is off is beyond our control. We never claim a lock that is not armed, and we never promise one that is.

17. Limitation of liability

TO THE FULLEST EXTENT THE LAW ALLOWS, LIFESAVER LABS AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST WORK, LOST DATA, OR LOST INCOME, ARISING OUT OF OR RELATING TO CTRLALTMOVE OR THESE TERMS, EVEN IF WE WERE TOLD THEY WERE POSSIBLE. OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO CTRLALTMOVE OR THESE TERMS IS CAPPED AT THE GREATER OF THE AMOUNT YOU PAID US IN THE TWELVE MONTHS BEFORE THE CLAIM AND ONE HUNDRED US DOLLARS ($100), PLUS ANY STATUTORY REMEDY THAT THE LAW DOES NOT ALLOW TO BE LIMITED. In plain words:

• The cap is the greater of what you paid us in the twelve months before the claim and $100. Subscription money goes to the store, so "paid us" means amounts paid for CtrlAltMove Pro.
• A stake you forfeited under the Stake Terms is a consequence you set for yourself in advance. It is not damages, and its amount is not something you can recover from us except through the refund and contest paths in the Stake Terms.
• We are not liable for indirect or consequential loss, including lost work or lost data on a device you locked.

Nothing in these terms limits or excludes liability that the law does not allow to be limited or excluded, including liability for death or personal injury caused by our negligence, for fraud, or under consumer-protection law that applies to you regardless of these terms. Some places do not allow some of these limits, so some of them may not apply to you.

18. Copyright complaints

If you believe something in CtrlAltMove infringes your copyright, send a notice under the Digital Millennium Copyright Act to support@ctrlaltmove.com with "DMCA" in the subject, including: the work you say is infringed; where the material is; your name, address, email, and phone; a statement that you believe in good faith the use is not authorised; a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorised to act for the owner; and your physical or electronic signature. We may close the accounts of repeat infringers.

19. Disputes: arbitration agreement and class-action waiver

PLEASE READ THIS SECTION CAREFULLY. IT REQUIRES YOU AND LIFESAVER LABS TO RESOLVE DISPUTES THROUGH BINDING INDIVIDUAL ARBITRATION RATHER THAN IN COURT, LIMITS HOW AND WHERE YOU CAN BRING A CLAIM, AND WAIVES THE RIGHT TO A JURY TRIAL AND TO TAKE PART IN A CLASS, COLLECTIVE, OR REPRESENTATIVE ACTION. YOU CAN OPT OUT WITHIN 30 DAYS OF FIRST ACCEPTING THESE TERMS, AS DESCRIBED BELOW.

• Talk to us first. Before either of us starts an arbitration or a lawsuit, the one with the complaint sends the other a written notice describing the dispute and what would resolve it. Send yours to support@ctrlaltmove.com; we send ours to the email address on your account. For 60 days after the notice both sides try in good faith to sort it out. Nobody files anything until those 60 days have passed. Most problems end here.
• Then individual arbitration. Any dispute between you and Lifesaver Labs arising out of or relating to CtrlAltMove, these terms, the Stake Terms, or the privacy policy that we cannot resolve informally will be settled by binding individual arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules, or by JAMS under its consumer rules if the AAA is unavailable. The Federal Arbitration Act governs this agreement to arbitrate. The arbitrator, not a court, decides whether a dispute is subject to arbitration, except as the severability paragraph below says otherwise.
• What stays in court. Either of us may bring an individual claim in small-claims court if it qualifies there. Either of us may ask a court for an injunction to protect intellectual property or to stop unauthorised use of the service. Nothing here stops you from reporting a concern to a government agency, or the agency from acting on it.
• Fees. If you are a consumer, you pay only the consumer filing fee that the AAA's Consumer Arbitration Rules set, and Lifesaver Labs pays every other filing, administrative, and arbitrator fee. If your claim is for $10,000 or less and you recover anything, we reimburse your filing fee. Each side pays its own lawyers, and Lifesaver Labs will not seek its own from you unless the arbitrator finds your claim frivolous or brought for an improper purpose.
• Where. The arbitration is held by video conference or on the documents, unless you ask for an in-person hearing, in which case it is held in the county where you live.
• CLASS-ACTION AND JURY-TRIAL WAIVER. YOU AND LIFESAVER LABS AGREE THAT EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE ACTION. THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PERSON'S CLAIMS OR PRESIDE OVER ANY FORM OF REPRESENTATIVE PROCEEDING. BY AGREEING TO ARBITRATE, YOU AND LIFESAVER LABS EACH GIVE UP THE RIGHT TO A TRIAL BY JURY.
• Many similar claims. If 25 or more demands for arbitration are filed against Lifesaver Labs raising similar claims and brought by the same or coordinated counsel, they proceed in batches of 25. The first batch is heard as a bellwether, the parties use its outcome to try to resolve the rest, and the 60-day informal-resolution step applies to each demand. The arbitration provider's fees are paid batch by batch as each proceeds.
• Opting out. You can reject this arbitration agreement and class-action waiver by emailing support@ctrlaltmove.com within 30 days of the date you first accepted these terms, with "Arbitration opt-out" in the subject and the email address on your account in the body. Opting out affects nothing else: the rest of these terms, and your use of CtrlAltMove, continue unchanged.
• If part of this is unenforceable. If a court decides that the class-action waiver cannot be enforced for a particular claim, then this agreement to arbitrate does not apply to that claim, which proceeds in court, and the rest of this section survives. If arbitration is unavailable for a claim for any other reason, the claim will be brought in the state or federal courts located in Palm Beach County, Florida, you and we consent to their jurisdiction, and both sides waive a jury trial to the extent the law allows.
• Where the law says otherwise. This section applies only to the extent the law where you live permits an agreement to arbitrate consumer disputes before they arise. If it does not, the paragraph above about courts applies instead.
• Changes to this section. A change we make to this section does not apply to a dispute for which either side has already given notice. You may reject a change to this section by emailing the opt-out address above within 30 days of the change taking effect; if you do, the version you last accepted continues to apply between us.
• It survives. This section survives the deletion of your account and the end of these terms.

20. Governing law and general terms

• Governing law. These terms are governed by the law of the State of Florida, without regard to its conflict-of-laws rules, and by the federal law of the United States where it applies; the Federal Arbitration Act governs section 19. If you live somewhere whose consumer law gives you protections that cannot be taken away by a choice of law, you keep them.
• Export and sanctions. You may not use CtrlAltMove if you are in a country or on a list that United States export-control or sanctions law prohibits us from serving, and you agree to comply with those laws.
• The whole agreement. These terms, the Stake Terms, and the privacy policy are the whole agreement between you and Lifesaver Labs about CtrlAltMove. If a court or arbitrator finds part of them unenforceable, the rest still stands. If we do not enforce a term on one occasion, we can still enforce it later.
• Transfer. You may not transfer your rights under these terms to anyone else. We may transfer ours only to a successor that takes on the same promises, including the ones in section 3.

21. Contact

Lifesaver Labs Public Benefit Corporation
Boca Raton, FL, USA
support@ctrlaltmove.com

Lock problems come first; put LOCKED in the subject. Questions about a stake: put STAKE in the subject. A notice of dispute under section 19: put DISPUTE in the subject. More on how we handle support is on the support page. Privacy questions go to privacy@ctrlaltmove.com.