Terms of Service

The Service

K01 ehf. (kt. 500223-0650, Hlyngerði 5, 108 Reykjavík, Iceland) provides API access to generate synthetic electronic health records in FHIR format. All output is algorithmically generated. No real patient data is involved at any stage.

Eligibility

You must be at least 18 years old (or the age of majority in your jurisdiction) and have the legal capacity to enter into this agreement. By creating an account, you represent that you meet this requirement.

You represent that you are not located in, or acting on behalf of any person or entity located in, a jurisdiction subject to applicable trade sanctions. We reserve the right to terminate access for compliance with applicable sanctions regimes.

Your Account

You are responsible for keeping your API key secure. Do not share it. You are responsible for all activity under your account that results from your failure to secure your credentials.

If you suspect unauthorized use, contact us immediately at [email protected]. If unauthorized use is reported within 24 hours of the first anomalous request and our logs confirm the activity was not initiated by you, we will reverse charges incurred during the unauthorized period.

License

K01 grants you a limited, non-exclusive, non-transferable, revocable license to access and use the API for your internal and commercial purposes, subject to these terms. K01 retains all intellectual property rights in the service, API, and underlying technology.

Usage Limits

API access is subject to rate limits and quotas based on your subscription tier (Free, Basic, Pro, or Enterprise). We may throttle or temporarily suspend access if limits are exceeded. Tier details and current limits are available in our API documentation.

We will provide at least 30 days notice before materially reducing published API limits for any paid tier.

Acceptable Use

You agree not to:

• Submit real personal data, patient data, protected health information (PHI), or any special-category data to the API. The service is designed to generate synthetic data only. If real data is submitted accidentally, notify us immediately at [email protected] so we can purge it from our systems
• Misrepresent synthetic data as real patient data, or use it to deceive any third party, including regulators, insurers, or healthcare providers, regardless of whether the data is explicitly labelled as real
• Use the service for any purpose that is illegal under applicable law, including the laws of Iceland and the laws of your jurisdiction
• Reverse-engineer, replicate, or extract K01's data generation models through systematic API probing
• Circumvent, abuse, or attempt to exceed API rate limits
• Offer any product or service where K01 API calls are a material component delivered to end users, without a written reseller agreement
• Use the service or its output to develop, train, or improve a competing synthetic data generation service
• Distribute synthetic data generated by K01 without clearly identifying it as synthetic and not derived from real patients

Billing & Payments

Payments are processed by Paddle.com, which acts as the merchant of record for all transactions. Paddle handles invoicing, tax collection, and payment processing.

Paid subscriptions renew automatically at the end of each billing period (monthly or annual) at the then-current price. You may cancel before the end of your current period to prevent renewal. Cancellation takes effect at the end of the paid period, and you retain access until then. Downgrades to a lower tier take effect at the next billing cycle.

Subscriptions are non-refundable after the first API call or after 7 days from purchase, whichever comes first. Nothing in this clause limits mandatory withdrawal or refund rights you may have under applicable consumer protection law, including the EU Consumer Rights Directive.

If payment fails, we will notify you and provide a 7-day grace period. If payment is not resolved within that period, your account will be suspended. Unpaid amounts remain due.

Data Ownership

You own the synthetic data you generate through the API. K01 does not store generated output beyond the API response lifecycle.

If you distribute synthetic data generated through K01, you must clearly identify it as synthetic and not derived from real patients.

Warranty Disclaimer

The service is provided "as is." All generated data is synthetic and intended for development, testing, and research purposes only. It is not suitable for clinical use, medical decisions, patient care, insurance underwriting, or regulatory submissions.

To the maximum extent permitted by applicable law, K01 disclaims all warranties, express or implied, including the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. K01 does not warrant that the service will be uninterrupted, error-free, or secure.

Limitation of Liability

To the maximum extent permitted by applicable law, K01's total liability for all claims arising from this agreement shall not exceed the greater of (a) the fees you paid in the 12 months before the claim, or (b) EUR 100.

K01 is not liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, business opportunities, or goodwill, regardless of whether K01 was advised of the possibility of such damages.

These limitations apply to the maximum extent permitted by mandatory applicable law. They do not exclude or limit liability for fraud, willful misconduct, gross negligence, or death or personal injury caused by K01's negligence, nor any other liability that cannot be excluded by law.

Indemnification

You agree to indemnify and hold K01 harmless from any claims, damages, or expenses arising from your use of the service in violation of these terms or applicable law.

K01 will indemnify you against third-party claims alleging that the service itself (excluding your generated output) infringes a third party's intellectual property rights, provided you notify us promptly and give us control of the defense.

Service Availability

We aim for high availability but do not guarantee uptime for Free, Basic, or Pro tiers. We may perform maintenance, deploy updates, or experience outages. Check status.k01.is for current service status.

Enterprise tier uptime commitments are governed by a separate written agreement signed by both parties. No enterprise-level commitments apply absent such an agreement.

Force Majeure

K01 is not liable for service failures caused by events outside its reasonable control, including natural disasters, cyberattacks, third-party infrastructure failures, government actions, or acts of war. If a force majeure event persists for more than 30 days, either party may terminate the agreement.

Termination

Either party may terminate the agreement at any time. You can delete your account by contacting [email protected].

For non-payment or non-severe violations, we will provide 7 days written notice and an opportunity to cure before suspending or terminating your account. For severe violations (fraud, illegal activity, or activity that threatens the security of the service), we may terminate immediately.

On termination by K01 for cause, no refund is owed. On termination by you or by K01 without cause, prepaid subscription fees for unused full months will be refunded.

On termination, your API access ends immediately. Account data will be deleted within 30 days per our Privacy Policy.

Governing Law & Disputes

These terms are governed by the laws of Iceland. Nothing in this agreement limits rights you may have under mandatory applicable law, including EU consumer protection legislation.

Before initiating legal proceedings, both parties agree to attempt good-faith resolution via email for at least 30 days. If unresolved, disputes will be resolved in the courts of Reykjavik, Iceland.

Changes

We may update these terms from time to time. Material changes (including changes to pricing, data sharing, or usage restrictions) will be communicated via email at least 30 days before they take effect. You may reject material changes by terminating your account within the notice period without penalty.

Continued use of the service after the effective date of changes constitutes acceptance.