Terms and Conditions — Tolar
Version: 2.0 Effective date: 26 August 2026 Application: Tolar — Android package si.vstaric.tolar
Provider: N1, Programerske storitve, Vid Starič s.p. Registered office: Ob žici 7, 1000 Ljubljana, Slovenia Registration number (matična številka): 7208871000 Tax number (davčna številka): 62098195 Not registered for VAT. Email: info@vstaric.si
Preliminary note
The Application stores User Content on the User's own device. Where the User enables the optional Sync and Sharing service, an end-to-end encrypted copy is additionally held on the Provider's server. The Provider does not hold, and has never held, the keys required to decrypt that copy.
Certain provisions customary in application terms are consequently absent from, or inverted in, this document. Where this is so, it is stated expressly. A provision asserting a capability the Provider does not possess would misrepresent the Application and is therefore omitted.
1. Definitions
"Application" means the Tolar mobile application for Android, distributed under the package identifier si.vstaric.tolar, including all updates and supported versions.
"Diagnostics" means the optional, opt-in diagnostic reporting feature described in section 9 of the Privacy Policy.
"Provider", "we" and "us" mean N1, Programerske storitve, Vid Starič s.p., identified above.
"Recovery Phrase" means the twelve-word mnemonic from which the User's cryptographic identity and content encryption keys are derived.
"Sync Service" means the optional, opt-in synchronisation and sharing service described in section 8 of the Privacy Policy.
"User" and "you" mean the natural or legal person installing or using the Application.
"User Content" means the loyalty card records, card photographs, shopping and to-do list entries, and application settings created or captured by the User within the Application.
2. Scope and acceptance
2.1. These Terms and Conditions ("Terms") govern the User's installation and use of the Application and of the Sync Service.
2.2. By installing or using the Application, the User accepts these Terms. A User who does not accept them must not use the Application; uninstallation terminates the agreement.
2.3. The Privacy Policy published at tolar.vstaric.si/privacy.html forms an integral part of these Terms. Together, these Terms and the Privacy Policy constitute the entire agreement between the User and the Provider in respect of the Application.
2.4. Nothing in these Terms affects the User's mandatory rights as a consumer under the law of the Republic of Slovenia or of the European Union, or under the mandatory law of the User's country of residence.
3. Licence
3.1. Subject to compliance with these Terms, the Provider grants the User a personal, non-exclusive, non-transferable, non-sublicensable licence to install and use the Application on devices under the User's control, for personal or internal business purposes.
3.2. The User shall not resell or redistribute the Application for commercial gain, represent the Application as the User's own, or use the Provider's name, marks or logo in a manner suggesting endorsement, affiliation or approval that has not been given.
3.3. All intellectual property rights in the Application, other than in User Content, remain vested in the Provider.
3.4. Nothing in these Terms restricts any act of decompilation, reverse engineering or analysis that the User is entitled to perform under Article 6 of Directive 2009/24/EC or under any other mandatory provision of applicable law. The Provider expressly does not object to inspection of the Application. The security properties described in these Terms and in the Privacy Policy are intended to be verifiable rather than merely asserted.
3.5. The licence granted under clause 3.1 may be terminated in accordance with section 11. Termination of the licence operates as a legal, not a technical, act: the Provider has no means of removing the Application or User Content from the User's device, and does not purport to have any.
4. Cryptographic identity; absence of account recovery
4.1. The Application does not use usernames, passwords or email addresses. The User's identity is a cryptographic key pair generated on the User's device. The Recovery Phrase is the sole means by which that identity and the associated content encryption keys may be restored.
4.2. The User's attention is expressly drawn to the following. If the User loses both the device and the Recovery Phrase, data held by the Sync Service is permanently and irrecoverably lost. This is not a matter of difficulty of recovery. The copy held on the Provider's server is encrypted with keys the Provider has never possessed. The Provider cannot reset, decrypt, restore or otherwise recover that data, and no support process exists or can exist by which this outcome may be altered.
4.3. The Recovery Phrase must be retained in a location that will remain accessible to the User following loss of the device.
4.4. Any person in possession of the Recovery Phrase is able to assume control of the associated identity and to decrypt the associated data. The User is solely responsible for the confidentiality of the Recovery Phrase.
4.5. The consequences described in this section are disclosed within the Application before the Recovery Phrase is issued to the User.
5. Permitted use
5.1. The User shall use the Application in accordance with applicable law. The User shall not use the Application to store or transmit material that is unlawful in the User's jurisdiction, to infringe the rights of any third party, or to harass any person.
5.2. The Provider is not able to enforce clause 5.1 by inspection. User Content is encrypted end to end. The Provider cannot access the content a User stores, nor the content a User shares with connected recipients. Clause 5.1 accordingly states the permitted purposes of the Application; it does not constitute a representation that the Provider monitors, moderates or reviews User Content. Any statement to the contrary misdescribes the Application.
5.3. The measures available to the Provider are confined to the Provider's own systems: the Provider may refuse or withdraw access to the Sync Service, and will comply with any lawful order properly addressed to it. The Provider is not able to produce User Content in intelligible form, as it does not hold it in intelligible form.
5.4. The User shall not use the Sync Service as general-purpose file storage, nor take any action intended or likely to impair the availability, integrity or performance of the Sync Service or the experience of other users.
6. User Content and intellectual property
6.1. The User retains all rights in User Content. The Provider claims no licence in respect of it.
6.2. Clause 6.1 is a deliberate departure from customary practice. Standard application terms reserve a broad licence to host, reproduce, adapt and display user content, because a conventional service must be able to read content in order to serve it. The Provider cannot read User Content. A licence to reproduce or display it would be a right incapable of exercise and would misrepresent the design of the Application. No such licence is taken.
6.3. Where the User shares a card or list with a connected recipient, the User thereby authorises the transmission of a copy encrypted to that recipient's key. The resulting relationship is between the User and the recipient. The Provider transmits the encrypted envelope and cannot open it.
6.4. Revocation of a connection prevents further sharing with that recipient. It does not, and cannot, recall copies already delivered to and decrypted on the recipient's device.
7. Availability of the Sync Service
7.1. The Provider will use reasonable endeavours to maintain the availability of the Sync Service and will give notice within the Application of planned maintenance where practicable.
7.2. The Provider gives no undertaking as to any particular level of availability, uptime or response time, and may modify, suspend or discontinue the Sync Service.
7.3. Discontinuation of the Sync Service does not impair the Application. User Content resides on the User's device and its continued availability is not conditional upon the Sync Service. The Provider will give reasonable prior notice within the Application before permanently discontinuing the Sync Service.
7.4. The core function of the Application — presentation of a scannable loyalty card code — requires no network connection.
8. Charges
8.1. The Application is provided free of charge as at the effective date of these Terms.
8.2. Should the Provider introduce charges for the Application or any part of it, this will be disclosed clearly before any payment is requested. The Provider will not commence charging for functionality already available to an existing User without prior notice.
8.3. Charges levied by the User's mobile network operator, including data and roaming charges, are a matter between the User and that operator.
9. Updates and supported versions
9.1. The Provider may issue updates to the Application.
9.2. Where an update is required in order for the Sync Service to continue to function, this will be stated.
9.3. The Provider may cease to support earlier versions of the Application. An unsupported version may lose access to the Sync Service while continuing to operate locally.
10. Third-party distribution platform
10.1. The Application is distributed through Google Play. These Terms are concluded between the User and the Provider alone. Google LLC and its affiliates are not a party to these Terms.
10.2. The Provider, and not Google, is solely responsible for the Application and its content, and for the provision of any support, maintenance and warranty in respect of it. Any claim relating to the Application shall be directed to the Provider.
10.3. The User's installation and use of Google Play is governed by the Google Play Terms of Service, to which the Provider is not a party and over which the Provider has no control. The Provider is unable to require Google Play to obtain the User's renewed acceptance of these Terms.
11. Term and termination
11.1. The User may terminate this agreement at any time by uninstalling the Application. Section 10 of the Privacy Policy sets out the procedure for deleting the User's account and associated server-side records, which uninstallation alone does not accomplish.
11.2. The Provider may suspend or terminate the User's access to the Sync Service where the User uses it unlawfully or in breach of clause 5.4. Where the breach is capable of remedy, the Provider will identify it and allow a period of 14 days for remedy, save where applicable law or an immediate risk to the Sync Service or to other users requires more immediate action.
11.3. The Provider is not able to, and does not purport to, withdraw the Application from the User's device or to affect User Content stored on it.
11.4. Sections 4, 6, 12, 13, 18 and 20 survive termination of this agreement.
12. Warranties and disclaimers
12.1. Nothing in this section excludes or limits the statutory guarantees, conformity requirements or remedies available to the User as a consumer under mandatory law, which apply notwithstanding any provision of these Terms.
12.2. Subject to clause 12.1, and to the fullest extent permitted by applicable law, the Application and the Sync Service are provided on an "as is" and "as available" basis. The Provider excludes all implied warranties, conditions and terms, including as to satisfactory quality, fitness for a particular purpose, accuracy and non-infringement.
12.3. The Provider does not warrant that the Application will operate without interruption or error, that defects will be corrected, or that the Application is compatible with any particular device, operating system version or third-party service.
12.4. The Provider does not warrant that any particular retailer will accept a code displayed by the Application in place of a physical card.
13. Limitation of liability
13.1. Nothing in these Terms excludes or limits the Provider's liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited. The User's rights as a consumer under Slovenian and European Union law apply notwithstanding any provision of these Terms.
13.2. Subject to clause 13.1, and to the fullest extent permitted by applicable law, the Provider shall not be liable for indirect, incidental, special or consequential loss, for loss of profit, revenue, goodwill or anticipated savings, or for loss of or corruption of data, howsoever arising.
13.3. Subject to clause 13.1, and given that the Application is supplied free of charge, the Provider's aggregate liability arising out of or in connection with these Terms is limited to the minimum extent permitted by applicable law.
13.4. Subject to clause 13.1, and consistently with section 4, the Provider is not liable for any loss of data arising from the User's loss of the Recovery Phrase. This consequence is inherent in the design of the Application: the Provider cannot read User Content and, for the same reason, cannot restore it. It is disclosed within the Application before the Recovery Phrase is issued.
13.5. Subject to clause 13.1, the Provider is not liable for loss of User Content arising from loss, damage, theft or malfunction of the User's device, or from the User's failure to enable the Sync Service, having regard to section 6 of the Privacy Policy (exclusion from platform backup).
13.6. Data held by the Sync Service. Subject to clause 13.1 and to clause 13.7, and to the fullest extent permitted by applicable law, the Provider is not liable for any loss, deletion, corruption, unavailability, unauthorised access to, unauthorised disclosure of, or theft of data held by the Sync Service, however caused, including where caused by hardware or storage failure, software defect, failure of the hosting provider or its subcontractors, network failure, act of a public authority, or the act of any third party, including unauthorised intrusion into the Provider's server.
13.7. The exclusion in clause 13.6 does not apply, and nothing in these Terms purports to exclude or limit:
(a) liability arising from the Provider's intentional act or gross negligence;
(b) liability under Article 82 of Regulation (EU) 2016/679 in respect of damage caused by processing that infringes that Regulation, which cannot be excluded by agreement;
(c) any liability arising under mandatory consumer protection law that cannot lawfully be excluded or limited.
13.8. The exclusion in clause 13.6 is to be read in the context of the design described in section 4 and in the Privacy Policy. The Sync Service is a convenience and not a guaranteed backup service. Data held by it is stored exclusively as ciphertext that the Provider is unable to decrypt, and its loss or corruption does not deprive the User of the copy held on the User's own device. Section 14 of the Privacy Policy sets out the consequences of a breach of the Provider's server, namely that an attacker obtains ciphertext and not its contents. The User remains responsible for retaining the Recovery Phrase and for maintaining any further copy of User Content the User considers necessary.
13.9. Clauses 13.6 to 13.8 do not affect the Provider's obligations under applicable data protection law, including the notification obligations described in section 17 of the Privacy Policy.
14. Indemnity
14.1. This section applies only where the User uses the Application for internal business purposes and does not apply to a User acting as a consumer.
14.2. A User to whom this section applies shall indemnify the Provider against any third-party claim, and against reasonable costs and expenses arising from it, to the extent that the claim arises from that User's breach of section 5.
15. Force majeure
The Provider is not liable for any failure or delay in performing its obligations under these Terms to the extent that the failure or delay results from an event beyond its reasonable control, including failure of network infrastructure, hosting or telecommunications services, power failure, act of a public authority, industrial action, natural disaster or armed conflict. This section does not apply to the Provider's obligations under applicable data protection law.
16. Assignment
16.1. The User may not assign or transfer any right or obligation under these Terms.
16.2. The Provider may assign or transfer its rights and obligations under these Terms to a successor in business, provided that the User's rights under these Terms are not thereby diminished and that notice is given in accordance with section 19. Where such a transfer would result in the transfer of encrypted data held by the Sync Service, notice will be given before the transfer takes effect.
17. Severability and waiver
17.1. If any provision of these Terms is held invalid, unlawful or unenforceable, that provision shall be severed and the remaining provisions shall continue in full force and effect.
17.2. A failure or delay by either party in exercising any right under these Terms does not constitute a waiver of that right.
18. Notices
18.1. Notices to the Provider shall be sent to info@vstaric.si.
18.2. Notices to the User will be given within the Application or, in the absence of a means of delivering an in-application notice, by publication at tolar.vstaric.si/terms.html. The Provider does not hold an email address or other contact detail for the User.
19. Amendments
19.1. The Provider may amend these Terms. The version in force is that published at tolar.vstaric.si/terms.html, bearing the effective date stated at the head of this document.
19.2. Material amendments will be notified within the Application before they take effect where the Provider is technically able to reach the User, and will be published at the address in clause 19.1 in every case.
19.3. Continued use of the Application after publication of an amendment constitutes acceptance of it. A User who does not accept an amendment may terminate this agreement in accordance with clause 11.1 and delete their data in accordance with section 10 of the Privacy Policy.
19.4. The Provider maintains no record of which Users have read these Terms. Previous versions are available on request from info@vstaric.si.
20. Governing law, jurisdiction and dispute resolution
20.1. These Terms are governed by the law of the Republic of Slovenia and by the applicable law of the European Union.
20.2. The courts of the Republic of Slovenia shall have jurisdiction over any dispute arising out of or in connection with these Terms. Where the User is a consumer, this clause does not deprive the User of the protection of mandatory provisions of the law of the User's country of residence, nor of the right to bring proceedings before the courts of that country.
20.3. In accordance with the Slovenian Out-of-Court Settlement of Consumer Disputes Act (ZIsRPS), the Provider states that it does not recognise any provider of out-of-court consumer dispute resolution as competent to resolve consumer disputes arising in connection with the Application. {{CONFIRM_OR_NAME_ADR_PROVIDER}}
20.4. Clause 20.3 does not affect the User's right to bring a complaint before any competent authority or court.
21. Language
These Terms are published in English. {{IF_A_SLOVENIAN_VERSION_IS_PUBLISHED_STATE_WHICH_PREVAILS}}
22. Contact
N1, Programerske storitve, Vid Starič s.p. Ob žici 7, 1000 Ljubljana, Slovenia info@vstaric.si
Tolar — Android si.vstaric.tolar. Privacy Policy: tolar.vstaric.si/privacy.html