Terms and Conditions (AGB)

Effective: 5 August 2026.

1. Provider and scope

These Terms govern contracts between Tribus Solutions UG (haftungsbeschränkt), Donaustraße 44, 12043 Berlin, Germany, trading as howsafeismyapp ("we"), and users of the service ("you"). Contact: hello@howsafeismyapp.com.

The service is available to businesses and consumers. Mandatory consumer law remains unaffected. Conflicting customer terms apply only if we expressly accept them in text form.

2. Services

1. Free first report. An automated passive scan of a submitted publicly

reachable website, with a limited online result. The free service is provided without a guaranteed availability or response time.

2. Full report. A one-time, automatically generated deeper technical scan

and report containing the detectable findings, remediation guidance, and legal context. The currently displayed launch price is EUR 4.99.

3. Re-test. Where the offer includes one re-test, it must be requested for

the same host within 30 days after purchase.

4. Monitor and agency services. These apply only when a corresponding

checkout or individual offer is made available. Scope, billing interval, limits, and termination terms shown in that offer prevail.

5. Unless a separate written authorisation says otherwise, all scans are

passive: read-only public requests, no login attempts, credential guessing, denial-of-service testing, or access to protected areas.

3. Authority to submit a website

You may submit only a website that you operate or are authorised by its operator to assess. You must not submit URLs containing credentials, private tokens, or personal data in a query string. You are responsible for the lawfulness and accuracy of the URL and instructions you provide.

For a paid deeper scan, you must confirm your operator authority. If your confirmation is false, you indemnify us against reasonable third-party claims and costs caused by that false confirmation, to the extent permitted by law.

4. Formation of contract and technical steps

The presentation of a paid report is an invitation to place an order. Before payment, you can correct the target host using your browser or return to the scan result. You place an order by confirming the required checkboxes and proceeding to Stripe. The contract is formed when payment is confirmed and we begin providing the full report. The order language is English.

We provide these Terms and the withdrawal information through permanent links. Save or print them for your records. Stripe provides a payment confirmation; we display the report immediately after successful verification where technically possible.

5. Prices and payment

The total price shown immediately before checkout applies. Prices displayed to consumers are final prices; any legally applicable VAT is included unless the checkout expressly states otherwise. Payment is processed by Stripe. We may withhold the paid report until payment is confirmed.

6. Consumer withdrawal

Consumers have the statutory withdrawal right described in the Withdrawal Instructions. Because the report is generated immediately, checkout asks consumers to request performance before the 14-day period ends and acknowledge the statutory consequences. Mandatory rights remain unaffected.

7. Technical report, not legal advice

The service is an automated technical assessment. References to GDPR, TDDDG, DDG, or other law provide general technical context and decision support. They are not legal advice, do not establish an attorney-client relationship, and do not replace advice from a qualified lawyer or data protection professional.

8. No certification or completeness guarantee

A passive automated scan cannot identify every vulnerability, data flow, contractual issue, organisational measure, or client-side behaviour. Findings may be false positives or false negatives and describe only the time of the scan. A result labelled "pass", a badge, or the absence of a finding is not a certification of security, GDPR compliance, or legal conformity.

You remain responsible for operating your website, verifying findings, making backups, testing changes, and obtaining professional advice where required.

9. Availability and acceptable use

We may limit, delay, or reject scans to protect the service or third parties. You must not use the service to overload targets, circumvent controls, scan protected systems without authority, infringe rights, or facilitate unlawful activity. We may suspend access for reasonable evidence of misuse.

10. Liability

We are liable without limitation for intent and gross negligence, injury to life, body or health, fraudulently concealed defects, guarantees expressly given, and liability under the German Product Liability Act.

For ordinary negligence, we are liable only for breach of an essential contractual duty whose fulfilment enables proper performance and on which you may normally rely. In that case liability is limited to the foreseeable damage typical for the contract. Mandatory consumer rights remain unaffected.

To the extent permitted by law, we are not liable merely because an automated report omitted a condition outside the promised passive scope, or because a third party changed its website after the scan. These limitations also apply to our legal representatives and agents.

11. Intellectual property and permitted use

You receive a non-exclusive right to use your report internally and to share it with advisers, contractors, customers, or authorities for your own website. You may not resell the scanner, remove source/brand notices from a badge, or present a report as an official certification. Rights in your submitted website remain with you or its owner.

12. Data protection

Our Privacy Policy applies. If a separately commissioned service requires us to process personal data on your behalf, the Data Processing Agreement or an individually signed agreement applies where required.

13. Changes and termination of recurring services

One-time purchases are governed by the version accepted at checkout. For any future recurring service, the checkout will state the minimum term, billing cycle, renewal, and termination method. We will not introduce a paid renewal without explicit order information and any legally required cancellation facility.

14. Consumer dispute resolution

We are neither obliged nor willing to participate in dispute-resolution proceedings before a consumer arbitration board, unless a statutory obligation applies. The former EU Online Dispute Resolution platform was discontinued on 20 July 2025 and is not listed here.

15. Governing law and final provisions

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. For consumers, this choice does not remove mandatory protections of the country in which they habitually reside.

If you are a merchant, legal entity under public law, or public-law special fund, the courts at Berlin, Deutschland have exclusive jurisdiction where legally permitted. If a provision is invalid, statutory law replaces it; the remaining provisions continue to apply.