These terms govern your use of the CMS SecureMe mobile app. By installing or using the app you accept them.
If you buy SecureMe Protect, the paid subscription, the terms and conditions also apply and cover payment, renewal and cancellation.
Who we are
CMS SecureMe is published by CMS InfoSec Ltd, registered in England & Wales. Support: support@cmsinfosec.com.
Who may use it, and your account
You must be 18 or over to hold an account or buy a plan. Someone younger can be added to a plan by an adult who holds one, on the terms set out in the privacy notice.
The free checks work without an account. Family Protect and SecureMe Watch both need you to sign in with Apple or Google, because a plan that spans several phones cannot work without a durable identity.
Keep your Apple or Google account secure. Anyone who can sign in as you can reach what your account holds.
Signing in with a different Apple or Google account signs you into that account. If that identity already belongs to an existing user, you are signed in as them, and anything the app built up before you signed in stays behind with the earlier anonymous install. That is how the platforms work rather than a choice of ours, but it surprises people, so it is written down here.
If you close your account, what we hold is deleted on the timetable in the privacy notice. What is on your phone goes when you uninstall the app.
Your licence
We grant you a personal, non-exclusive, non-transferable, revocable licence to install and use the app on devices you own or control, for your own non-commercial use, in accordance with these terms and with the app store rules that apply to your platform.
You may not copy, modify, reverse engineer, decompile, disassemble, rent, lease, sell or sublicense the app, except to the extent that any of those is expressly permitted by law and cannot be excluded by contract.
We keep all rights not expressly granted.
What the app is
A tool that helps you assess your personal security, tells you what to fix first, and helps you respond if something goes wrong.
What the app is not
This matters more than usual here, because the gap between what people assume a security app does and what this one does is where harm happens.
- It is not antivirus. It does not scan for, detect or remove malware or viruses.
- It is not a VPN, and it does not filter, inspect, route or protect your network traffic.
- It does not block calls, messages, websites or applications.
- It is not a monitoring service. Nobody is watching your accounts on your behalf in real time.
- It is not legal, financial or regulatory advice. The guidance on reimbursement rights, reporting routes and incident response is general information about how the UK system works. It is not advice on your situation and it does not predict your outcome. If you need advice, get it from someone qualified to give it.
The limits of the checks
Every check in the app has a boundary, and we would rather set it out than let you discover it.
Breach checking is only as complete as the corpus behind it. A result of “no breaches found” means your address does not appear in the datasets we can query. It does not mean your address has never been exposed. Breach datasets are incomplete and are not real-time.
Link, message and caller checks can be wrong in both directions. A link that comes back clean may still be malicious, and a legitimate one may be flagged. Where a check cannot establish that something is safe, the app says so rather than guessing. “We cannot tell” is a real answer, and you should treat it as one.
Self-reported answers are taken at face value. Several of the six areas ask you what you have done rather than measuring it. If you tell the app two-factor authentication is on, it believes you.
Your score is a summary, not a guarantee. A high score means the specific things we check look good. It does not mean you cannot be scammed. Nothing means that.
Answers expire on purpose. Settings drift and apps reset them on update, so the app asks again rather than treating a six-month-old answer as current.
Your responsibilities
You agree to:
- give accurate answers, since a self-assessment built on inaccurate answers produces an inaccurate result;
- keep your device secured with a screen lock and keep its operating system up to date;
- keep your own backup of anything in the vault that you cannot afford to lose (see the warning below); and
- not use the app to check data belonging to someone else without a proper basis for doing so.
On the vault and the recovery passphrase. Vault contents are encrypted on your device with a key we do not hold. That is the security property you want, and it has a consequence you need to understand: if you lose the device or delete the app without a backup, we cannot recover what was in it. There is no reset, no recovery link and no support route that gets it back, because there is nothing on our side to recover it from.
The same is true of the passphrase that locks your plan recovery key. We never receive it, so we cannot reset it. Losing it means the stored copy of the key cannot be opened, by us or by anyone else.
Plans and other people’s data
If you set up a plan, you are responsible for making sure everyone you add knows they have been added and agrees to it. Where someone is under 13, you must confirm that you hold parental responsibility for them. Scores sync end-to-end encrypted, so you see how someone is doing without seeing what they entered, but you should still ask them first.
Anyone in a plan can leave it, and the plan holder can remove a member. Removal takes effect on their device and the encrypted record is deleted.
Availability and changes
We may update, change or withdraw features. We may end support for older operating system versions, and the app relies on third-party services that could change their terms or stop being available; if a provider withdraws, the check that depends on it stops working.
We do not promise the app will be uninterrupted or error-free.
Suspension
We may suspend or terminate your access if you breach these terms, if we are required to by law, or if we reasonably believe the app is being used to harm someone. Where it is practical and lawful to do so, we will tell you why.
Our liability
Nothing here limits or excludes our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.
Subject to that:
- we are not liable for loss arising from your reliance on a check result, a score, or any guidance in the app, given the limits described above;
- we are not liable for losses caused by a scam, fraud or attack. We help you reduce the risk and respond to it; we do not insure you against it, and no security product can;
- we are not liable for the acts or omissions of third parties, including banks, platforms, the police, or the providers whose data the checks rely on;
- for the free features, our total liability is limited to £100;
- for a paid subscription, our total liability is limited to the amount you paid us in the twelve months before the claim; and
- we are not liable for indirect or consequential loss, or for loss of profit, business or data.
If you are a consumer, none of this affects your statutory rights, including your rights under the Consumer Rights Act 2015 that digital content be of satisfactory quality, fit for purpose and as described.
App store terms
Your platform’s own terms also apply. On iOS, where we have not supplied a separate licence agreement, Apple’s standard Licensed Application End User Licence Agreement applies alongside these terms. Apple and Google are not parties to these terms and are not responsible for the app.
Governing law
These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
If you are a consumer resident in Scotland or Northern Ireland, you may also bring proceedings in your own jurisdiction, and your home nation’s mandatory consumer protection law continues to apply.
Changes to these terms
We may revise these terms. The “Last updated” date at the top of this page moves when the wording does, and material changes are surfaced in the app before they take effect.