Moldable
← Back to Home

Terms of Service

Last updated: 2026-07-21

These Terms of Service ("Terms") govern your access to and use of Moldable (the "Service"). The Service is operated by Desiderata LLC, a Pennsylvania limited liability company ("Desiderata," "we," "us," or "our").

By accessing or using the Service, you agree to these Terms. If you do not agree, do not use the Service.

TL;DR (friendly summary)

This section is a convenience summary. The full Terms below control.

  • Moldable is a local-first desktop application with optional hosted services, including accounts, Moldable Drive sync, and Moldable Artifacts.
  • Apps and skills created by or for Moldable are provided "as is" without warranty—use them at your own risk.
  • You own the apps you create; we don't claim ownership of your generated software or data.
  • Your local apps and data stay on your machine unless you choose a hosted feature. If you enable Sync, the files and data covered by your Sync setup are copied to our hosted systems. Published Artifacts are hosted online and can be viewed by anyone with the URL.
  • Sync is helpful, but should not be your only backup while it is in beta. Storage limits, excluded files, conflicts, or errors can leave some changes only on your device.
  • Turning off Sync, disconnecting a device, canceling any future paid plan, and deleting an Account are different actions with different effects. The Service will explain the effect before an action removes hosted data.
  • Use the Service legally and responsibly; don't distribute malicious code or violate others' rights.
  • We can change the Service and these Terms; continued use means you accept updates.

Privacy

Our collection and use of personal information is described in our Privacy Policy. Moldable is local-first by default, while accounts, Drive, Artifacts, and other hosted features require transmitting the information and content needed to provide them.

1. Definitions

For purposes of these Terms:

  • "Moldable" or "Desktop App" means the Moldable desktop application software.
  • "Account" means a Moldable account used to authenticate you to hosted features.
  • "Sync," "Drive," or "Moldable Drive" means the optional hosted backup and synchronization service for Moldable apps, workspace data, conversations, settings, app data, and other files or folders you add to it.
  • "Synced Content" means User Content covered by your Sync configuration and copied to our hosted systems.
  • "Hosted Copy" means the then-current Synced Content and related history or metadata stored through Sync. A Hosted Copy is separate from files stored on your devices.
  • "Paid Service" means a subscription, storage add-on, or other feature for which we charge a fee, if and when we offer one.
  • "Artifact Service" or "Moldable Artifacts" means any hosted service we provide for publishing, storing, serving, or sharing static artifacts, including artifacts served from artifacts.moldable.sh.
  • "Artifacts" means static files, websites, slides, decks, images, media, reports, exported app bundles, metadata, and other content published through the Artifact Service.
  • "Apps" means the applications created by or for use within Moldable, including official apps from the moldable-ai/apps repository and any apps you create.
  • "Skills" means CLI-invocable tools and capabilities that extend Moldable's functionality.
  • "User Content" means any content you create, upload, publish, or generate through the Service, including apps, skills, configurations, data, and Artifacts.
  • "Official Apps" means apps distributed through the moldable-ai/apps repository or moldable.sh.

2. Eligibility

You must be at least 18 years old and able to form a binding contract to use the Service. You may not use the Service if you are barred from receiving services under applicable law.

3. The Service

Moldable provides a desktop application for creating, running, managing, and sharing personal software and related outputs. The Service includes:

  • The Moldable desktop application
  • Official apps distributed through our app registry
  • Skills and capabilities that extend functionality
  • Moldable Artifacts and other hosted features we may provide
  • Moldable Accounts and optional Moldable Drive backup and synchronization
  • Documentation and support resources

You understand and agree that:

  • The Service is provided primarily for personal use and for professional or team use where we expressly offer those features.
  • Apps generally run locally on your machine. If you publish an Artifact, that Artifact is stored and served by the Artifact Service.
  • You may use Moldable without an Account where the relevant local features permit it. Hosted features may require an Account.
  • The quality, functionality, and safety of apps (including Official Apps) may vary.
  • We may change, suspend, or discontinue any part of the Service at any time.
  • The Service may be offered in alpha, beta, or other early-stage form. Features may change, and the Service may experience interruptions, errors, or data loss.

3.1 Accounts

You must provide accurate information when creating an Account and keep your credentials secure. You are responsible for activity under your Account and must promptly notify us at hello@moldable.sh if you believe it has been compromised. You may not share, sell, transfer, or use an Account to evade limits or enforcement.

We may suspend or terminate an Account when reasonably necessary to protect the Service or others, comply with law, address nonpayment if we later offer a paid feature, or enforce these Terms. You may request Account deletion as described in the Privacy Policy. Some records may be retained where reasonably necessary for security, dispute resolution, legal compliance, or backup rotation.

3.2 Sync and Moldable Drive

Sync is optional and currently in beta. If you enable it, you instruct us and our service providers to host, process, copy, transmit, restore, and synchronize Synced Content as needed to provide Sync across your authorized devices.

  • Keep another backup. Sync is not a substitute for an independent backup. You remain responsible for maintaining separate copies of important data and checking that important changes have successfully synchronized.
  • Know what is included. Depending on your setup, Sync may cover Moldable apps, workspaces, conversations, settings, app data, or other folders you add. It is designed to exclude common credentials, environment files, certificates, dependencies, caches, logs, temporary files, and machine-specific state, but exclusions are not guaranteed to identify every secret or sensitive file.
  • Storage limits affect new changes. If you reach a storage or other limit, some new or expanded files may remain only on the device where they were created until space becomes available. Files that fit may continue to synchronize. The Service may show which items are waiting.
  • The provider can technically access content. Synced Content is encrypted in transit and at rest using server-managed encryption. Sync is not end-to-end encrypted, and you should not use it for secrets, regulated data, or content requiring a system in which the provider cannot technically access plaintext unless we expressly agree otherwise.
  • Synchronization can fail. Conflicts, interrupted transfers, software defects, account compromise, storage limits, excluded files, or service changes may cause delay, duplication, corruption, or loss. Conflict copies and version history may be incomplete or unavailable.
  • Turning off Sync removes the Hosted Copy. Turning off Sync for a synced location is designed to preserve its local files. After any undo period shown in the Service, its Hosted Copy may be permanently removed. Re-enabling Sync may create a new Hosted Copy from the files still on your device.
  • Disconnecting is different. Disconnecting or signing out a device normally stops Sync on that device without deleting the Hosted Copy from your Account or files already stored locally.
  • Changing exclusions can remove hosted items. If you add an ignore or exclusion rule, matching items may remain on your device while being removed from the current Hosted Copy. That hosted deletion may synchronize to other connected devices. The Service may retain limited history, logs, or deletion records as described in the Privacy Policy, but you should not rely on them for recovery.
  • Online-only choices can remove local copies. Where available, a setting that makes a file or folder online-only may remove a verified local copy while retaining the Hosted Copy. Review the confirmation shown before using that setting.
  • Limits and history can change. We may apply storage, file, bandwidth, device, rate, history, retention, or other technical limits. Unless a specific plan or written agreement says otherwise, we do not guarantee any number of versions or any particular recovery period.

3.3 Future Paid Services and subscriptions

We do not currently offer Paid Services. If we introduce them, this section will apply only when you choose to purchase one. Offering free Sync today does not authorize us to charge you later.

  • Details will be shown before purchase. The purchase screen will disclose the price, billing period, storage and other limits, whether history counts toward storage, any trial or promotion, renewal terms, cancellation method, refund policy, and what happens to hosted data if the plan ends. Those disclosed details will form part of these Terms.
  • Recurring charges require your agreement. If a future plan renews automatically, we will say so clearly before collecting billing information and will obtain your agreement to the disclosed recurring charge. We will not convert free Sync into a paid plan without your express agreement.
  • No undisclosed overage charges. Reaching a plan limit may restrict new uploads or features, but we will not charge a storage overage unless you first agree to it.
  • Cancellation will be available online. We will provide a simple online cancellation method. The cancellation confirmation will explain when access ends, whether any refund applies, and any hosted-data retention or deletion deadline.
  • Cancellation is different from deletion. Canceling a future subscription will not itself turn off Sync, delete your Account, or immediately delete local files. Hosted access may later be limited and Hosted Copies may become eligible for deletion under the plan details disclosed at purchase. We will identify any applicable hosted-data deadline through the Account, the Service, or an electronic notice before deletion based solely on plan expiration or nonpayment.
  • Payment processing. Future payments may be processed by Stripe or another payment processor identified at purchase. Their terms and privacy policy will apply to their processing of payment information.
  • Material changes. If we change a recurring price or another material subscription term, we will provide advance notice and a way to cancel as required by applicable law.

4. Moldable Artifacts and Published Content

4.1 Publishing Artifacts

Moldable Artifacts is an experimental hosted service for publishing static web artifacts such as slides, HTML/CSS/JavaScript prototypes, generated media, reports, and exported static bundles.

When you publish an Artifact:

  • You are asking us to store, cache, serve, and make that Artifact available online.
  • The Artifact may be accessible at an unlisted or hard-to-guess URL, but it is not private access control. Anyone with the URL may view, download, copy, share, index, or archive the Artifact.
  • You should not publish secrets, credentials, confidential information, personal information, or sensitive data unless you have the right to do so and understand the risks.
  • You are responsible for ensuring you have all rights, permissions, notices, and consents needed for the Artifact and any data, media, code, names, likenesses, or third-party materials it contains.
  • You are responsible for reviewing and testing Artifacts before publishing them.

4.2 Public Availability and Removal

Artifacts may remain available until you unpublish them, we remove them, or the Artifact Service changes or discontinues. Unpublishing an Artifact is intended to remove it from active hosting, but it may not remove copies already downloaded, shared, cached, indexed, archived, or stored by third parties.

We may remove, disable, limit, rate-limit, or refuse to host any Artifact or related account/key at any time, including if we believe it violates these Terms, infringes rights, creates security or abuse risk, consumes excessive resources, exposes sensitive information, or may create legal liability.

4.3 No Review or Endorsement

We do not pre-screen all Artifacts, and hosting an Artifact does not mean we endorse it, verify it, or guarantee that it is lawful, accurate, secure, available, non-infringing, or safe to view or run. Static Artifacts may include client-side code that runs in a visitor's browser. You are responsible for the behavior and content of Artifacts you publish.

4.4 Limits and Availability

We may apply file size, bandwidth, storage, rate, versioning, expiration, and other technical limits. We do not guarantee that Artifact URLs will remain available, that historical versions will be preserved, or that the Artifact Service will be uninterrupted.

5. Official Apps and Third-Party Apps (Important)

5.1 Official Apps

Official Apps distributed through moldable-ai/apps are provided under the MIT License. These apps are:

  • Provided "AS IS" without warranty of any kind
  • Not guaranteed to be free of bugs, errors, or security vulnerabilities
  • Subject to change or discontinuation at any time

USE OFFICIAL APPS AT YOUR OWN RISK. We make no representations about the suitability, reliability, or accuracy of Official Apps for any purpose.

5.2 Third-Party and User-Created Apps

Apps created by you or third parties are not reviewed, endorsed, or guaranteed by Desiderata. You are solely responsible for:

  • Evaluating the safety and suitability of any app before running it
  • Any consequences of running third-party or user-created apps on your machine
  • Ensuring apps you create or distribute do not violate laws or third-party rights

5.3 AI-Generated Code

Moldable may assist in generating code using AI. You understand that:

  • AI-generated code may contain errors, security vulnerabilities, or unintended behavior
  • You are responsible for reviewing and testing any AI-generated code before use
  • AI-generated code may inadvertently include patterns similar to existing code; you are responsible for ensuring compliance with third-party licenses and rights

5.4 AI Security Considerations

Large language models (LLMs) and AI-powered applications are an evolving technology with known and unknown security risks. You understand and accept that AI systems may be vulnerable to various attacks and failure modes, including but not limited to:

  • Prompt injection: Malicious content in files, websites, or data sources could manipulate the AI's behavior in unintended ways
  • Data exfiltration: A compromised or malicious MCP server, skill, or app could potentially access data the AI has visibility into
  • Hallucinations: AI may generate plausible-sounding but incorrect information, including fake URLs, non-existent APIs, or incorrect code
  • Sensitive data exposure: Information you share in prompts is sent to third-party AI providers
  • Other vulnerabilities: New attack vectors and security issues may be discovered as the technology evolves

You are responsible for exercising caution when:

  • Installing third-party apps, skills, or MCP servers
  • Allowing the AI to access sensitive files or data
  • Acting on AI-generated information without verification
  • Sharing sensitive information in prompts

We are not liable for any damages resulting from AI-related security issues, whether known or unknown, including those not listed above. You use AI features at your own risk.

6. Local-First Architecture and Hosted Features

Moldable is designed as a local-first application, except where you choose to use hosted features:

  • Apps and data are stored on your local machine in the ~/.moldable/ directory
  • We do not receive your locally stored apps, data, or configurations unless you use a hosted feature, third-party integration, or support workflow that transmits them
  • You are responsible for backing up your data
  • If you create an Account, enable Drive, publish an Artifact, or use another hosted feature, the content and metadata needed to provide that feature may be transmitted to, processed by, and stored on our systems and those of our service providers

7. User Content; Licenses; IP

7.1 Your content

You retain ownership of your User Content. We do not claim ownership of apps you create, data you generate, or configurations you make.

7.2 License to Desiderata

You grant Desiderata a limited license to use your User Content solely as necessary to provide the Service (for example, to display app information in the desktop app interface).

For Synced Content, Artifacts, and other content you transmit, publish, or share through hosted features, you grant Desiderata and its service providers a worldwide, non-exclusive, royalty-free license to host, store, reproduce, cache, transmit, format, modify for technical purposes, create technical backups of, and otherwise process that content solely as necessary to operate, secure, improve, and provide the Service. For content you intentionally publish, this license also includes public display, public performance, and distribution as needed to make it available to visitors.

7.3 Licenses and Open Source Components

Moldable incorporates open source components under various licenses. Official Apps are licensed under the Functional Source License, Version 1.1, ALv2 Future License (FSL-1.1-ALv2). You must comply with applicable licenses when using these components.

7.4 Feedback

If you provide suggestions or feedback, you grant us a perpetual, irrevocable, worldwide license to use them without compensation or restriction.

7.5 Our intellectual property

The Service, including its software, design, text, graphics, logos, and trademarks (excluding User Content and open source components), is owned by Desiderata and its licensors and is protected by intellectual property laws.

8. Acceptable Use

You agree not to:

  • Violate any applicable law, regulation, court order, sanctions program, or third-party right
  • Upload, publish, distribute, or help create malware, viruses, destructive code, credential-stealing tools, or other material intended to compromise or damage systems or data
  • Probe, scan, exploit, disrupt, overload, or bypass security, authentication, access controls, rate limits, quotas, or other safeguards without our prior written permission
  • Access or attempt to access another person's Account, device, Synced Content, Artifact, or other data without authorization
  • Use the Service to harm, threaten, harass, stalk, exploit, defraud, or unlawfully discriminate against another person
  • Create, possess, publish, or distribute child sexual abuse material or content that sexually exploits or endangers a minor
  • Publish or distribute content that infringes, misappropriates, or violates intellectual property, privacy, publicity, confidentiality, or other rights
  • Upload, sync, or publish personal, confidential, sensitive, or regulated information unless you have all required rights, notices, and consents and the relevant part of the Service is suitable for that use
  • Use Accounts, Sync, or Artifacts for phishing, credential harvesting, impersonation, deceptive downloads, unauthorized tracking, spam, or other abuse
  • Misrepresent the source, origin, safety, capabilities, or endorsement of apps, Artifacts, or other content you distribute
  • Use automated means in a way that unreasonably burdens the Service or interferes with another user's use
  • Use multiple Accounts, devices, organizations, or other methods to evade plan limits, suspensions, or enforcement
  • Remove or alter copyright notices, licenses, or attribution in the Service or its components
  • Provide the Service to third parties as a hosted or managed service in a way prohibited by the Elastic License 2.0

We may investigate suspected violations and may remove or disable content, revoke links or credentials, limit traffic, preserve relevant records, or suspend or terminate access where reasonably necessary to protect users or the Service, comply with law, or enforce these Terms. We may report unlawful activity to appropriate authorities. If you believe we made a mistake, contact hello@moldable.sh.

9. Third-Party Services

The Service may integrate with or rely on third-party services (such as AI APIs, calendar services, hosting providers, storage providers, CDNs, security providers, and analytics providers). Your use of third-party services is governed by their terms and policies. We are not responsible for third-party services.

10. Copyright Complaints (DMCA)

If you believe content distributed through the Service infringes your copyright, you may send a notice to our designated agent with the information required by the U.S. Digital Millennium Copyright Act (DMCA).

DMCA Agent: Desiderata LLC
4607 Library Road, Ste 220 PMB 630
Bethel Park, PA 15102
United States
Email: hello@moldable.sh

11. Disclaimers

THE SERVICE, INCLUDING ALL APPS, SKILLS, ARTIFACTS, HOSTED FEATURES, AND GENERATED CODE, IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WITHOUT LIMITING THE FOREGOING:

  • We do not warrant that any app (including Official Apps) will be error-free, secure, or suitable for your purposes.
  • We do not warrant that any Artifact will be lawful, accurate, secure, continuously available, private, non-infringing, or suitable for your purposes.
  • We do not warrant that AI-generated code will be correct, secure, or free from intellectual property issues.
  • We do not warrant that the Service will be uninterrupted or available at all times.
  • We do not warrant that every selected file or change will be uploaded, synchronized, downloaded, or recoverable; that conflicts will always be detected or resolved; that deletions will be reversible; or that any Hosted Copy, history, version, or restore point will remain available.
  • We do not provide a service-level agreement, guaranteed recovery time, guaranteed recovery point, or service credits unless we expressly agree to them in a separate written agreement.

Some jurisdictions do not allow certain warranty disclaimers, so some of the above may not apply to you.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DESIDERATA AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUES, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL, OR THE COST OF RECREATING, RECOVERING, OR REPLACING DATA OR SERVICES, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DESIDERATA'S TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF OR RELATED TO THE SERVICE WILL NOT EXCEED THE GREATER OF (A) $100 OR (B) THE AMOUNT YOU PAID US (IF ANY) FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

Some jurisdictions do not allow limitations of liability for certain damages, so some of the above may not apply to you.

13. Indemnification

You agree to indemnify and hold harmless Desiderata from claims, damages, liabilities, and expenses (including reasonable attorneys' fees) arising out of your use of the Service, your User Content, Artifacts you publish, apps you create or distribute, your interaction with visitors or third parties, or your violation of these Terms.

14. Dispute Resolution

14.1 Informal resolution

Before filing a claim, you agree to contact us at hello@moldable.sh and attempt to resolve the dispute informally.

14.2 Governing law

These Terms are governed by the laws of the Commonwealth of Pennsylvania, without regard to conflict of laws principles.

14.3 Venue

Any disputes not resolved informally shall be resolved in the state or federal courts located in Allegheny County, Pennsylvania, and you consent to personal jurisdiction in those courts.

15. Miscellaneous

  • Entire agreement. These Terms (and the Privacy Policy) constitute the entire agreement between you and Desiderata regarding the Service.
  • Severability. If any provision is held invalid, the remainder will remain in effect.
  • Assignment. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets.
  • Changes to these Terms. We may update these Terms from time to time. The "Last updated" date indicates when the latest changes were made. Continued use of the Service after changes become effective means you accept the updated Terms.
  • Material changes. If a change materially affects a Paid Service, recurring charge, or how we handle hosted data, we will provide any notice required by applicable law. If you do not agree to a change, you may stop using the affected Service and cancel a Paid Service before the change takes effect.
  • Electronic communications. You consent to receive Account, security, billing, renewal, cancellation, storage, and hosted-data notices electronically at the contact information associated with your Account. You are responsible for keeping that information current.
  • Force majeure. Desiderata is not liable for delays or failures caused by events beyond reasonable control.
  • Survival. Provisions that by their nature should survive termination, including ownership, licenses already granted for content still hosted, disclaimers, limitations of liability, indemnification, and dispute terms, will survive.

16. Contact

Desiderata LLC
4607 Library Road, Ste 220 PMB 630
Bethel Park, PA 15102
United States

Email: hello@moldable.sh