Merge pull request #261 from zallo-labs/OP-18-tos

Op 18 tos

Author: hbriese

app/app.config.ts

@@ -14,14 +14,14 @@ const ENV = process.env;
 const vary = (value: string, f: (variant: string) => string = (v) => '.' + v) =>
   value + (ENV.APP_VARIANT ? f(ENV.APP_VARIANT) : '');
 
-type ExternalUrl = `http:${string}`;
+type ExternalUrl = `https:${string}`;
 
 export const CONFIG = {
   env: ENV.RELEASE_ENV === 'development' ? 'development' : 'production',
   sentryDsn: ENV.APP_SENTRY_DSN!,
   apiUrl: ENV.API_URL!,
   apiGqlWs: ENV.API_GQL_WS!,
-  docsUrl: ENV.DOCS_URL!,
+  docsUrl: ENV.DOCS_URL! as ExternalUrl,
   walletConnectProjectId: ENV.WALLET_CONNECT_PROJECT_ID!,
   aplitudeKey: ENV.AMPLITUDE_KEY!,
   metadata: {

app/src/app/onboard/user.tsx

@@ -17,6 +17,7 @@ import { Link, useRouter } from 'expo-router';
 import { useMemo } from 'react';
 import { useForm } from 'react-hook-form';
 import { View } from 'react-native';
+import { Text } from 'react-native-paper';
 import { useLazyLoadQuery, useSubscription } from 'react-relay';
 import { graphql } from 'relay-runtime';
 import { z } from 'zod';
@@ -25,6 +26,7 @@ import { user_UserOnboardingMutation } from '~/api/__generated__/user_UserOnboar
 import { user_UserOnboardingQuery } from '~/api/__generated__/user_UserOnboardingQuery.graphql';
 import { user_UserOnboardingSubscription } from '~/api/__generated__/user_UserOnboardingSubscription.graphql';
 import { getDeviceModel } from '~/lib/device';
+import { TERMS_OF_SERVICE_HREF } from '../terms-of-service';
 
 const Query = graphql`
   query user_UserOnboardingQuery {
@@ -117,6 +119,13 @@ function UserOnboarding() {
           <FormSubmitButton mode="outlined" control={control} onPress={next}>
             Continue
           </FormSubmitButton>
+
+          <Text variant="titleMedium" style={styles.tosText}>
+            By continuing, you agree to our{' '}
+            <Link href={TERMS_OF_SERVICE_HREF} style={styles.link}>
+              Terms of Service
+            </Link>
+          </Text>
         </Actions>
       </OnboardMainPane>
 
@@ -125,7 +134,7 @@ function UserOnboarding() {
   );
 }
 
-const stylesheet = createStyles(() => ({
+const stylesheet = createStyles(({ colors }) => ({
   screen: {
     flex: 1,
     flexDirection: 'row',
@@ -142,6 +151,13 @@ const stylesheet = createStyles(() => ({
     marginHorizontal: 16,
     marginTop: 16,
   },
+  tosText: {
+    marginVertical: 8,
+    textAlign: 'center',
+  },
+  link: {
+    color: colors.tertiary,
+  },
 }));
 
 export default withSuspense(UserOnboarding, <ScreenSkeleton />);

app/src/app/privacy.tsx

@@ -0,0 +1,8 @@
+import { Redirect } from 'expo-router';
+import { CONFIG } from '~/util/config';
+
+export const PRIVACY_POLICY_HREF = CONFIG.docsUrl + '/privacy';
+
+export default function PrivacyPolicyScreen() {
+  return <Redirect href={PRIVACY_POLICY_HREF} />;
+}

app/src/app/terms-of-service.tsx

@@ -0,0 +1,8 @@
+import { Redirect } from 'expo-router';
+import { CONFIG } from '~/util/config';
+
+export const TERMS_OF_SERVICE_HREF = CONFIG.docsUrl + '/terms-of-service';
+
+export default function TermsOfServiceScreen() {
+  return <Redirect href={TERMS_OF_SERVICE_HREF} />;
+}

docs/docs/02-terms-of-service.md

@@ -0,0 +1,52 @@
+---
+categories:
+  - Legal
+---
+
+# Terms of Service
+
+**Last Updated: July 16, 2024**
+
+## 1. Introduction
+
+These Terms of Service ("Terms") govern your access to and use of the Zallo Labs Pty Ltd ("us", "we", or "our") Services, including but not limited to our website (https://zallo.io), its subdomains, and our app.
+
+By using our Services, you agree to be bound by the Terms and our [Privacy Policy](./03-privacy.md).
+
+## 2. User responsibility and key management
+
+Accounts are self-custodial, meaning that we do not collect or store your private keys, recovery phrases, and passwords (collectively, "Secret Keys").
+
+**We are unable to assist in recovering your account if you lose access to your Secret Keys**.
+
+You are solely responsible for:
+- Maintaining the confidentiality and security of your Secret Keys
+- All activities that occur under your account, including any loss of funds
+- Properly securing your account by means of security policies and procedures
+
+## 3. Liability
+
+To the fullest extent permitted by law, we are not liable for any losses, damages, or liabilities of any kind arising from or in connecting with:
+- Your use of our Services
+- Your violation of the Terms
+- Use of third-party services or products accessed through our Services
+- Any other circumstances beyond our reasonable control
+
+## 4. Changes to the Terms
+
+You will be notified of any changes to the Terms on our website or app.
+By continuing to use our Services after changes to the Terms, you accept the revised Terms.
+
+## 5. Prohibited Uses
+
+You may not use our Services for any purpose that is fraudulent, or otherwise violates any applicable law or regulation.
+
+## 6. Suspension and discountinuation of Services
+
+We retain sole discretion to temporarily suspend or discontinue your access to our Services, without prior notice, if we have reasonable suspicion that you engage in Prohibited Uses.
+
+We retain sole discretion to limit your access to our API if your usage is excessive - as indicated by our API and user interfaces.
+
+## 6. Contact information
+
+If you have any questions or comments about the Terms please contact us by emailing us at: support@zallo.io

docs/docs/02-privacy.md docs/docs/03-privacy.md

@@ -5,23 +5,25 @@ categories:
 
 # Privacy Policy
 
-**Last Updated: July 15, 2024**
+**Last Updated: July 16, 2024**
 
 ## 1. Introduction
 
 Zallo Labs Pty Ltd ("Zallo Labs", "we", "us", or "our") is commited to protecting your privacy. 
-This Privacy Policy explains how we collect, use, and share data in relation to our services, including but not limited to our website (https://zallo.io) and its subdomains.
+This Privacy Policy explains how we collect, use, and share data in relation to our Services, including but not limited to our website (https://zallo.io), its subdomains, and our app.
 
+## 2. What personal data we collect
 
-## 2 What data we collect
-
-We may collect and use different kinds of data about you as follows:
+### 2.1. Personal data you provide to us directly
 
 - Email address
-- Device data: type, model, network information and unique ID
-- Course-grained location data
 - Feedback you provide
 - Correspondences with our support
+
+### 2.2 Personal data we collect automatically
+
+- Device ID, type, model and network information
+- Performance data
 - Usage data
 - Onchain data
 
@@ -33,16 +35,9 @@ We may collect and use different kinds of data about you as follows:
 
 ## 4. Use of data
 
-Your data is used to provide basic functionality for our services, provide support, and to improve our product and user experience.
-
-## 5. Data security
+Your data is used to provide basic functionality for our Services, provide support, and to improve our product and user experience.
 
-We take the security of your data seriously. All data we collect is encrypted at rest and in transit.
-Strict procedures and security features are used to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way.
-
-You will be notified of any personal data breaches which we become aware of.
-
-## 6. Data Sharing and Third-Party Services
+## 5. Data sharing and third-party services
 
 **We will never sell your personal data to third parties.**
 
@@ -51,16 +46,23 @@ We may share your personal data with third-party services for the following purp
 - Error tracking and performance monitoring
 - Analytics to help us understand user behavior, improve our product, and enhance user experience
 
-## 7. Data Retention and Deletion
+## 6. Data security
+
+We take the security of your data seriously. All data we collect is encrypted at rest and in transit.
+Strict procedures and security features are used to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way.
+
+You will be notified of any personal data breaches which we become aware of.
+
+## 7. Data retention and deletion 
 
-You may request deletion of your personal data at any time by contacting us [contacting us](#9-contact-information)
+You may request deletion of your personal data at any time by [contacting us](#9-contact-information).
 Your account data will be otherwise retained until the account is closed.
 
 ## 8. Changes to the Privacy Policy
 
-You will be notified of any changes to this privacy policy on our website or app.
-By continuing to use Zallo after changes to the privacy policy, you accept the revised terms.
+You will be notified of any changes to this Privacy Policy on our website or app.
+By continuing to use our Services after changes to the Privacy Policy, you accept the revised terms.
 
-## 9. Contact Information
+## 9. Contact information
 
-If you have any questions or comments about this privacy policy, our privacy practices, or if you would like to exercise your rights with respect to your personal data, please contact us by emailing us at: support@zallo.io
+If you have any questions or comments about this Privacy Policy, our privacy practices, or if you would like to exercise your rights with respect to your personal data, please contact us by emailing us at: support@zallo.io

docs/docusaurus.config.ts

@@ -88,8 +88,12 @@ const config: Config = {
           ],
         },
         {
-          title: 'Legal',
+          title: 'Company',
           items: [
+            {
+              label: 'Terms of Service',
+              to: 'terms-of-service',
+            },
             {
               label: 'Privacy Policy',
               to: 'privacy',