Terms of use.

The short version: convert your own files, delete the CSV after, expect no warranty, and don't hold us liable for more than the $2 you may have paid for the iOS app. The long version follows.

Provider

These surfaces are operated by CoreEngineX Inc., a Canadian company. Where these terms refer to "we", "us", or "our", they mean CoreEngineX Inc. Contact: coreenginex@gmail.com.

What this is

SPASS Converter is a free web app and SPASSPort is a $2 one-time-purchase iOS app. Both convert Samsung Pass .spass export files into CSV or JSON so you can move your saved passwords into Apple Passwords, Chrome, Bitwarden, or any other manager that accepts CSV. By using either, you accept these terms.

License

The Rust core that performs the decryption is open source under MIT OR Apache-2.0 at github.com/CoreEngineX/spass-rs.

The iOS app is additionally licensed under Apple's standard Licensed Application End User License Agreement, which governs your right to use the app once purchased on the App Store.

The user interface code for both the web app and the iOS app is proprietary and not currently published. Only the Rust core is open source.

Intellectual property

All content on the surfaces -- including the user interface code, UI design, copy, brand marks, and documentation -- is owned by CoreEngineX Inc. or its licensors and is protected by Canadian and international intellectual property law. The Rust decryption core (spass-rs) is licensed separately under MIT OR Apache-2.0 and is exempt from these restrictions. The CoreEngineX name, logo, and related trademarks may not be used without prior written permission. Nothing in these terms grants you any licence to the proprietary UI code or the CoreEngineX brand.

Your responsibilities

By using either surface, you agree to:
  • Only convert .spass files that belong to you or that you have permission to handle.
  • Delete the exported CSV from your device as soon as you have imported it into your password manager.
  • Not use either surface to exfiltrate, intercept, or otherwise access data that is not yours.
  • Not attempt to reverse-engineer, decompile, or otherwise extract the proprietary UI code (the open-source Rust core is exempt from this restriction under its own license).
  • Comply with all laws that apply to you, including data protection laws in your jurisdiction.

No warranty

BOTH SURFACES ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, WE EXPRESSLY DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

Samsung controls the .spass format and can change it at any time. We make no promise that a Samsung Pass export from a future Galaxy phone will continue to convert, that the converter will produce accurate output for every input file, or that either surface will be available without interruption.

Some jurisdictions do not permit the exclusion of certain warranties. In those jurisdictions, the exclusions above apply to the maximum extent permitted by law, and you may have additional rights as a consumer that cannot be waived by agreement.

Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO EITHER SURFACE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER THEORY, IS CAPPED AT USD $2 (OR ITS EQUIVALENT IN YOUR LOCAL CURRENCY), REGARDLESS OF WHICH SURFACE THE CLAIM RELATES TO OR HOW MUCH (IF ANYTHING) YOU PAID US.

We are not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including but not limited to lost passwords, lost data, lost profits, loss of business, or loss of time, even if we have been advised of the possibility of such damages.

If your jurisdiction does not permit this type of liability cap or exclusion, the cap and exclusions apply to the maximum extent that they do. Any liability that cannot be excluded by law is limited to the minimum required.

Indemnification

You will defend, indemnify, and hold us (including our officers, employees, contractors, and affiliates) harmless from any third-party claim, demand, loss, or liability, including reasonable legal fees and costs, arising out of or related to: (a) your misuse of either surface, including any use to convert files you do not own or are not authorised to access; (b) your violation of these terms; (c) your violation of any third party's rights, including privacy, intellectual property, or contract rights; or (d) any content or data you process using either surface. We will give you prompt notice of any such claim and reasonably cooperate in your defence at your expense.

Termination

Web app. You can stop using the web app at any time by closing the browser tab. We may discontinue the web app, restrict access, or block specific clients at any time without notice. The web app is a free service; there is no purchase to refund on termination.

iOS app.Your right to use the iOS app is governed by Apple's standard Licensed Application EULA and may be terminated by you (uninstall) or by Apple under the App Store terms. If we discontinue the iOS app, existing purchasers retain whatever rights Apple gives them to re-download previously purchased versions; we are not obligated to provide future updates or fixes.

Sections of these terms that by their nature should survive termination, including the warranty disclaimer, limitation of liability, indemnification, governing law, and the miscellaneous provisions, survive any termination.

External links

The surfaces link to third-party sites: the Apple App Store and Apple's Licensed Application EULA, GitHub for the open-source Rust core, Google Firebase (the host of this site), Stripe (for tipping when that feature is live), and Apple's Report a Problem page for App Store refunds. We do not control those sites and are not responsible for their content, terms, privacy practices, or availability. Your use of any third-party site is governed by that site's own terms.

Refunds

iOS app purchases on the App Store are subject to Apple's standard App Store refund policy. We have no control over Apple's refund decisions. To request a refund, contact Apple via Report a Problem at reportaproblem.apple.com within Apple's refund window.

We may, at our sole and absolute discretion, choose to support a refund request you raise with Apple, but we are not obligated to do so. Any past accommodation does not create an obligation for future ones.

Cryptography and export

Both surfaces use AES-256-CBC with PBKDF2-HMAC-SHA256 to decrypt Samsung Pass .spass files. All decryption happens locally on your device; no encrypted material is transmitted to us. Under U.S. Export Administration Regulations (EAR), the open-source Rust core qualifies as publicly available encryption source code under 15 CFR 740.13(e), and compiled binaries are classified under ECCN 5D992.c as mass-market software. Distribution of the iOS app on the App Store is administered by Apple, which handles export compliance for App Store distribution globally. You are responsible for complying with any cryptography import or export rules that apply to you in your own jurisdiction.

Accessibility

We aim to make both surfaces usable by everyone, including users of assistive technology. The web app targets WCAG 2.1 Level AA conformance: keyboard navigation, sufficient colour contrast, accessible markup for screen readers, and respect for prefers-reduced-motion. The iOS app uses native SwiftUI controls, which inherit VoiceOver, Dynamic Type, and Reduce Motion support from iOS. We do not yet have a formal third-party accessibility audit. If you encounter an accessibility barrier on either surface, email coreenginex@gmail.com and we will prioritise fixing it.

Governing law

These terms and any dispute arising under or related to them are governed by the federal laws of Canada, without regard to conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Any dispute that cannot be resolved informally will be brought in the courts of competent jurisdiction in Canada, and you and we each consent to the personal jurisdiction of those courts.

Nothing in this section limits your rights as a consumer under mandatory local law where you reside.

Severability and miscellaneous

Severability. If any provision of these terms is held invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision is enforced to the maximum extent permitted, and the remaining provisions remain in full force and effect.

Entire agreement.These terms, together with the privacy policy and (for the iOS app) Apple's Licensed Application EULA, constitute the entire agreement between you and us regarding the surfaces and supersede any prior agreements or representations on the same subject.

No waiver. Our failure to enforce any provision is not a waiver of our right to enforce it later. A waiver is effective only if recorded in writing and signed by us.

Assignment. You may not assign or transfer these terms or any rights under them without our prior written consent. We may assign these terms to a successor entity, for example in connection with incorporation, a merger, or a transfer of the project.

No agency. Nothing in these terms creates a partnership, joint venture, employment, or agency relationship between you and us. Section headings are for convenience only and do not affect interpretation.

Changes

We may update these terms when the product changes (a new platform, a new pricing model, a new payment processor, etc.). The "Effective date" below indicates when the current version took effect; the "Last updated" date indicates when we most recently edited it. Material changes will be flagged on the home page and, for the iOS app, surfaced on next launch. Continued use of either surface after a change means you accept the revised terms.

Contact

For legal or product questions, open an issue at github.com/CoreEngineX/spass-rs/issues or email coreenginex@gmail.com.

Effective: 2026-05-14

Last updated: 2026-05-14