Nimbus for Knack · Terms of Service · Privacy Policy

Nimbus for Knack - Terms of Service

Version: nimbus-tos-2026-11-04
Effective date: November 4, 2026
Provider: Avvera Technologies Inc. ("Avvera", "we", "us"), a corporation incorporated in Canada. Registered address available on request via the contact below.
Contact: support@avvera.ca

These terms are a binding contract between you and Avvera. By creating an account, ticking the acceptance box, connecting an AI assistant to Nimbus or using Nimbus in any way, you accept them. If you do not accept them, do not use Nimbus.

1. What Nimbus is, and what it is not

Nimbus for Knack ("Nimbus") is a software tool that reads the published structure of Knack applications you control (tables, fields, pages, views, user roles, rules, emails, tasks and settings) and produces an automated list of findings about how protected health information ("PHI") in those apps may be exposed, each with a suggested change. Nimbus works through our website and through an MCP (Model Context Protocol) connector that lets an AI assistant of your choice use Nimbus for you.

• Nimbus reads structure only. Our servers do not request, read or store the records inside your Knack apps. You never give us a Knack API key or any credential that can read records.
• Nimbus never changes your Knack app. It has no way to. Every change to your app is made by you, or by someone you allow, in the Knack builder. Nimbus's tools change only Nimbus's own data about your app (your PHI decisions, access answers, review marks and settings).
• Nimbus is not a certification. It is not a HIPAA risk analysis, an audit, an attestation, a seal or a compliance program, and using it does not make you, your apps or your organization compliant with HIPAA or any other law.
• Nimbus is an independent tool. It is not affiliated with, endorsed by or supported by Knack. "Knack" is a trademark of its owner. "HIPAA" means the US Health Insurance Portability and Accountability Act and its rules.

2. Business use only

Nimbus is offered to businesses, organizations and professionals for use in their business. It is not offered to consumers, and you may not use it for personal, family or household purposes. By using Nimbus you confirm that you are acting in the course of a business, that you are at least 18 years old (or the age of majority where you live), that you can enter a binding contract, and, if you accept these terms for an organization, that you are authorized to bind it. Consumer-protection laws written for personal use do not apply to this contract, to the extent the law allows us to say so.

3. Nimbus is information, not advice, and not a guarantee

Read this section carefully. It is the basis on which we offer Nimbus, and it is reflected in the price.

• Informational only. Nimbus's findings, suggested changes, questions, scores, summaries and anything an AI assistant says about them are information for you to evaluate. They are not legal, compliance, security or professional advice, and they do not create a professional or fiduciary relationship.
• It can be wrong. Nimbus works from the app structure Knack publishes and from the answers you give it. It cannot see your records, your users, your processes, your contracts, your devices, your other systems or anything outside that structure. Its findings can be wrong, incomplete, out of date or missing entirely. It can flag things that are not problems and miss things that are. A result that shows no problems, few problems or "all clear" does not mean your apps are secure or compliant. You must not rely on Nimbus as the sole basis for any decision.
• Your decisions are yours. You decide which fields hold PHI, which user roles may do what, which findings matter and which changes to make. An AI assistant may suggest those decisions; when you accept a suggestion, the decision is yours as if you had made it yourself.
• Changes you make are yours. Any change you make to a Knack app, whether or not Nimbus suggested it, is your change and your responsibility. Suggested changes are general and untested in your app. Test every change on a copy first, and have a qualified person review it. We are not responsible for lockouts, broken pages, broken workflows, lost access, lost data or any other effect of a change you make.
• Your compliance is yours. You alone are responsible for your obligations under HIPAA and every other law, for your clients' and patients' data, and for anything you do or do not do because of what Nimbus shows.
• We are not your business associate. Nimbus reads structure, not records, so it does not receive PHI and needs no business associate agreement ("BAA"). We do not sign BAAs. The only way PHI can reach us is if someone put it into your app's structure (for example a table, page or field named after a patient) or into an answer or message you give Nimbus or an AI assistant using Nimbus. You must not do that. We do not look for PHI in app structure and will not detect it. If it is there, that is your breach of these terms, at your own risk, and we may delete it and end your account.

4. Accounts

You must give us accurate account information and keep your sign-in details, tokens and connections secure. You are responsible for everything done with your account, by you, by anyone you let use it, by anyone who gets access because you did not secure it, and by any AI assistant or program acting through it. Tell us at once at support@avvera.ca if you believe your account has been used without your permission.

5. Your apps, ownership verification and consent

• Apps you control. You may register only Knack apps that you own or are authorized to administer. Verification works by placing a token we give you into the app (its App Description, or a comment in its custom JavaScript). By placing the token you represent that you control the app and are allowed to have its structure fetched, stored and analyzed by a third-party tool, and you consent to that analysis.
• Your clients' apps. If an app belongs to a client, employer or other organization, you are responsible for having their permission before you register it. Placing the token is your statement that you have it. We rely on that statement and do not check it, and you are responsible to them and to us if it is untrue.
• Public structure. Knack serves the structure Nimbus reads without a login, to anyone who asks for it. Nimbus does not create that exposure and does not change it.
• Refusal and revocation. We may refuse, pause or revoke access to any app where ownership is not shown, is no longer shown or is disputed, without liability to you.
• No probing. You must not use Nimbus to examine, probe or gather information about apps you do not control.

6. What Nimbus stores, and secrets in your app structure

Nimbus stores each registered app's structure as Knack serves it, with dated copies for change detection, together with your inputs and the analysis, as described in the Privacy Policy.

Your app's structure contains whatever you or your builders typed into it, including record rules, formulas, email templates, descriptions and settings. If someone typed a password, an API key, a token or other secret into the app, that secret is part of the structure that Knack publishes and that Nimbus stores. Nimbus masks values that look like secrets on its screens and in its tools, but it stores the structure as it is. Keeping secrets in an app's structure is unsafe regardless of Nimbus, and we strongly advise you to remove them from the app. We are not responsible for any secret, credential or other sensitive text that is in your app's structure, for its presence in our systems, or for any loss that results from it being accessed, used or disclosed from any source.

7. Subscription, app slots, payment and refunds

• Plans. Nimbus is a subscription, billed monthly through our payment processor, Stripe, until you cancel. The current prices are on our pricing page and at checkout, not in these terms; the price shown at checkout governs. There is no free trial.
• App slots. A plan includes a number of apps (currently 2). Each additional app is an extra charge for as long as it stays registered; the current extra-app price is on the pricing page. Adding an extra app is charged when you add it, prorated for the rest of the billing term.
• App changes. You may remove one verified app per calendar month (UTC). A removed extra app stays paid until the end of the billing term; we do not refund it or credit it.
• Renewal and cancellation. Your subscription renews automatically at the end of each term at the then-current price until you cancel. You can cancel at any time from the billing portal; access continues to the end of the paid term, and then ends.
• No refunds. Payments are non-refundable, including for partial terms, unused app slots, removed apps, downtime, errors, unsatisfactory or incorrect results, features that change or are removed, and accounts we close for breach. We refund where the law requires it. We may make an exception at our sole discretion; a request is never a guarantee and an exception is never a precedent.
• Price changes. We may change prices. A change applies from your next renewal after we notify you; you can cancel before it applies.
• Failed payments. If a payment fails, we may limit or suspend access until it is paid, and end the subscription if it stays unpaid.
• Chargebacks. If you dispute a charge with your bank instead of contacting us, we may suspend the account until the dispute is resolved and recover our costs where the dispute is found in our favour.
• Taxes. Prices are exclusive of taxes. You are responsible for any sales tax, VAT, GST, HST or similar taxes that apply, except taxes on our income.

8. AI assistants and the MCP connector

Nimbus lets AI assistants (for example Claude or ChatGPT) act for you through its MCP connector once you connect them. The assistant, its provider and the connection are your choice, under your agreement with that provider.

• Everything an assistant does through your connection is done by you. That includes recording PHI decisions and access answers, marking reviews, accepting decisions, registering, verifying and removing apps, requesting billing links and confirming charges.
• Assistants make mistakes. They can misunderstand, record wrong answers, accept decisions you did not mean, act without asking, or act on text inside your app that was never meant as an instruction. Check what they recorded. We are not responsible for what an AI assistant does, says, recommends or fails to do, for any AI provider, its terms, its availability or how it handles what Nimbus returns to it, or for any loss that results.
• Confirmations. Nimbus asks for an explicit confirmation before an assistant can add a billed extra app or remove an app. You remain responsible if you, or anything acting as you, gives that confirmation.
• Your assistant cannot change your Knack app through Nimbus. Nimbus has no tool that does so. If an assistant changes your app by another route (for example a Knack API key you gave it), that is outside Nimbus and entirely your responsibility.

9. Acceptable use

You agree not to: (a) analyze apps you do not control; (b) send us PHI or any other data you are not allowed to share; (c) try to bypass sign-in, ownership checks, app slots, billing, rate limits or quotas; (d) share an account between organizations, or resell, sublicense or provide Nimbus to others as a service; (e) interfere with, overload, scan or test the security of the service without our written permission; (f) reverse engineer, decompile or otherwise try to derive Nimbus's source code, rules or internal logic, including by using the service itself to do so; (g) use Nimbus, or anything obtained through it, to build or train a competing product or an AI model; (h) use Nimbus's findings about an app to attack, extort or harm that app's owner or users; (i) use the service unlawfully or in breach of Knack's terms. We apply rate limits and quotas and may throttle, suspend or end accounts that exceed them or that we reasonably believe are abusing the service, without liability to you.

10. Third-party services, and Knack changes

Nimbus depends on third parties, including Knack, Stripe, and our hosting, database, email, rate-limiting and error-reporting providers. We do not control any of them. The Knack endpoint Nimbus reads is not published or supported by Knack for this purpose; Knack can change, restrict or remove it, change what it returns, or change how apps, roles, rules and permissions behave, at any time and without notice to us. Any such change can make Nimbus's analysis wrong, incomplete or unavailable, temporarily or permanently, including analysis you already received. We are not responsible for Knack or any third party, for their acts, omissions, outages or changes, or for the effect of those on Nimbus, on its findings or on your apps.

11. Availability and changes to the service

Nimbus is provided without any promise of uptime and without a service-level agreement. We may change, suspend or discontinue any part of Nimbus, including its rules, findings, tools and connector, at any time, with notice where practicable. Downtime, changes and errors do not entitle you to a refund or credit beyond what section 7 says.

12. Intellectual property

We keep all rights in Nimbus, its software, rules, findings, text and content. You keep all rights in your Knack apps. You grant us a worldwide, royalty-free right to fetch, store, copy, process and analyze your apps' structure and the inputs you give Nimbus, as needed to provide, secure, support and improve the service, as described in the Privacy Policy. If you send us feedback or suggestions, we may use them without restriction or obligation to you.

13. Disclaimer of warranties

Nimbus is provided "as is" and "as available", at your own risk, without warranties, conditions or representations of any kind, express, implied or statutory, including merchantability, satisfactory quality, fitness for a particular purpose, accuracy, completeness, reliability, title, non-infringement, and any warranty arising from course of dealing or usage of trade. Without limiting that: we do not warrant that Nimbus will find any or every exposure; that its findings, suggested changes or summaries are correct, complete or current; that following them will make your apps secure or compliant or will not break them; that the service will meet your needs, be uninterrupted, timely, secure or error-free; or that your data, including stored app structures, will not be lost, accessed or disclosed. No advice or information you get from us, from Nimbus or from an AI assistant using Nimbus creates any warranty. Nothing in these terms limits a warranty or right that cannot be excluded under the law that applies to you.

14. Limitation of liability

14.1 No liability. To the maximum extent permitted by law, neither Avvera nor any Avvera Party (defined in section 15) is liable to you or to anyone claiming through you for any loss or damage of any kind arising from or related to Nimbus, its findings or these terms, however caused and under any theory (contract, tort including negligence, misrepresentation, breach of statutory duty or otherwise), even if we were told such loss was possible. This includes, without limitation:

• (a) reliance on findings: anything Nimbus missed, got wrong, misjudged or reported as fine, and any data breach, exposure or incident in your apps or systems, whether or not Nimbus reported, missed or misjudged the issue;
• (b) changes you made: the effect of any change you or anyone else made to a Knack app, including changes Nimbus or an AI assistant suggested, such as lockouts, broken pages or workflows, lost access or lost data;
• (c) our systems: any unauthorized access to, or loss, corruption or disclosure of, data held in our systems or those of our providers, including stored app structures and any secret, credential or other text they contain;
• (d) AI assistants: anything an AI assistant or other program did, said, recorded, accepted or failed to do through your connection or account, and anything an AI provider did with what Nimbus returned;
• (e) Knack and third parties: any change, outage, restriction or act of Knack or any other third party, and findings that become wrong or unavailable because of it;
• (f) fines and breach costs: regulatory fines, penalties, assessments, settlements and corrective-action costs (including under HIPAA, HITECH or any privacy, security or data-protection law), breach-notification, investigation, forensic, credit-monitoring, legal and remediation costs, and claims by your clients, patients, users, business associates, insurers or regulators;
• (g) indirect, incidental, special, consequential, exemplary or punitive damages; lost profits, revenue, business, contracts, goodwill, data or anticipated savings; and the cost of substitute services.

14.2 Cap where exclusion is not allowed. Where the law does not allow the exclusion in 14.1, the total liability of Avvera and all Avvera Parties together, for all claims of every kind arising in any twelve-month period, is limited to the subscription fee for one (1) month of your plan at the time of the first event giving rise to a claim (for a yearly plan, one twelfth of the yearly fee, including any extra apps). This is your sole and exclusive monetary remedy.

14.3 How these limits work. The exclusions and the cap apply even if a remedy fails of its essential purpose, apply separately to each claim and each type of loss, and are independent of each other: if one is unenforceable, the others still apply. You agree that these limits are fair in light of the price of Nimbus, the fact that it never touches your records or changes your apps, and that you would not have been offered Nimbus without them.

14.4 What we do not exclude. Nothing in these terms excludes or limits liability that cannot be excluded or limited under the law that applies to you, such as liability for fraud or for death or personal injury caused by negligence. In that case our liability is limited to the smallest extent that law allows.

15. Avvera Parties: no claims against individuals

"Avvera Parties" means Avvera's present and former directors, officers, shareholders, employees, contractors, agents, licensors and suppliers, and their successors. Nimbus is operated by a small company, and you agree that:

• every disclaimer, exclusion, limitation and indemnity in these terms protects each Avvera Party as well as Avvera, and each Avvera Party may rely on and enforce it;
• you will bring any claim arising from Nimbus or these terms only against Avvera Technologies Inc., and not against any Avvera Party personally, and you waive and release any such claim against them to the maximum extent the law allows;
• the Avvera Parties are intended beneficiaries of this section and of sections 13, 14 and 16, even though they are not parties to these terms.

16. Indemnification

You will defend, indemnify and hold harmless Avvera and the Avvera Parties against all claims, demands, suits, proceedings, losses, damages, liabilities, fines, penalties, costs and expenses (including reasonable legal fees and the cost of responding to a regulator) arising from or related to: your use of Nimbus or of its findings; your apps, their structure and the data in them; any PHI, secret or other data in your app's structure or that you sent us; your decisions about PHI, roles and access, including decisions an AI assistant suggested and you accepted; any change you or anyone else made to a Knack app; anything an AI assistant or program did through your account or connection; your registration of an app without the permission of its owner; your breach of these terms, of Knack's terms or of any law; and any claim by your clients, patients, users, employer, business associates, insurers, Knack or a regulator. We may take over the defence of any claim at your expense; you will not settle a claim that admits fault on our behalf or binds us without our written consent.

17. Termination

You may stop using Nimbus and delete your account at any time; deleting the account cancels a running subscription at once, without refund. We may suspend or end your account, or stop serving an app, at any time and without liability to you if you breach these terms, if we cannot verify ownership, if we receive a credible complaint or legal demand about an app or account, if required by law, if a payment stays unpaid, or if we discontinue the service. If we discontinue Nimbus entirely, we will stop charging you; no refund is owed for the current term unless the law requires it. On termination your right to use Nimbus ends and we delete your data as described in the Privacy Policy.

18. Changes to these terms

We may update these terms. We will post the new version with an updated effective date and, for material changes, notify account holders by email or in the service. Continued use after a change takes effect means you accept it. If you do not accept a change, cancel before it applies; that is your only remedy.

19. Governing law and disputes

• Governing law. These terms, and any dispute arising from them or from Nimbus, are governed by the laws of the Province of British Columbia and the federal laws of Canada applicable in it, without regard to conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
• Talk to us first. Before starting any proceeding, you will email support@avvera.ca with a description of the dispute and give us thirty (30) days to resolve it.
• Arbitration. Any dispute not resolved that way will be finally settled by binding arbitration before a single arbitrator seated in Vancouver, British Columbia, administered by the Vancouver International Arbitration Centre under its rules, in English. The arbitrator applies these terms, including sections 13 to 16, and has no power to award relief that they exclude. Judgment on the award may be entered in any court with jurisdiction. Either party may instead bring a claim within the monetary limit of the Civil Resolution Tribunal or the Provincial Court of British Columbia (Small Claims) in that forum, and either party may seek an injunction or other urgent relief from the courts of British Columbia.
• Individual claims only. No class actions. No jury. Disputes are resolved on an individual basis. To the maximum extent the law allows, you waive any right to bring or join a class, collective, representative or consolidated action or arbitration, and any right to a jury trial. If this waiver is found unenforceable for a particular claim, that claim must be heard in the courts of British Columbia, not in arbitration, and the rest of this section still applies.
• Courts. For anything a court may hear under this section, you and we submit to the exclusive jurisdiction of the courts of British Columbia, Canada, and waive any objection to that venue.
• Time limit. Any claim must be started within one (1) year after the event giving rise to it, or it is permanently barred, where the law allows such a limit.
• US users. If you are in the United States, this section is governed by the Federal Arbitration Act as to the agreement to arbitrate.

20. General

• Entire agreement. These terms and the Privacy Policy are the entire agreement between you and us about Nimbus and replace any earlier discussions, proposals or representations, including anything said on our website, in marketing, in support or by an AI assistant.
• No reliance. You confirm that you have not relied on any statement outside these terms in deciding to use Nimbus.
• Severability. If any part of these terms is unenforceable, it is limited to the minimum extent necessary and the rest stays in effect.
• No waiver. Not enforcing a provision is not a waiver of it.
• Assignment. You may not assign these terms without our written consent. We may assign them to an affiliate or as part of a merger, acquisition, reorganization or sale of assets.
• Force majeure. We are not liable for any delay or failure caused by events beyond our reasonable control, including outages or changes at Knack or any other provider, internet failures, attacks, government action, illness or disaster.
• Independent parties. Nothing in these terms makes us partners, joint venturers, agents or fiduciaries of each other.
• Notices. Notices to us go to support@avvera.ca. Notices to you go to your account email.
• Export and sanctions. You confirm that you are not in a country, or on a list, that Canadian or US law bars us from dealing with.
• Interpretation. "Including" means "including without limitation". Headings are for convenience only.
• Survival. Sections 2, 3, 5, 6, 7 (no refunds), 8, 9, 10 and 12 to 21 survive the end of your account.

21. Contact

Questions about these terms: support@avvera.ca.