Terms of service

Last updated 9 October 2026. Version 2.3.

[OPERATOR: lawyer review] This whole document is a working draft written for the Appdrop product as built. Have counsel review it, fill in the operating entity and governing law, then bump the terms version on the server so signed-in users accept it again.

Not financial advice. Appdrop is software for launching coins on pump.fun and holding value behind post-quantum keys. Nothing on it is financial, investment, legal or tax advice. Blockchains are experimental, prices are volatile, transactions cannot be undone, and you can lose everything you put in.

The short version

You choose where the creator fees go. My wallet: fees go to your wallet and your dev buy stays in your wallet, behind an ordinary wallet key; not sealed. Holders: fees are paid out to the coin's holders. My vault: fees and your dev buy go to your vault on chain, and only your hash-based vault key moves them out. You can also split the fees between up to 6 wallets.
Appdrop never holds your keys. Your Solana wallet is your only account and signs your launches and trades. Your vault's key is a 24-word phrase made in your browser; it never reaches our servers.
Nobody can recover a vault. If you lose the 24 words, what the vault holds cannot be moved by you, by us or by anyone. There is no reset.
Every coin pays the flywheel. A share of each coin's creator fees (currently ) goes to one Appdrop platform wallet. Appdrop keeps none of it.
Post-quantum has limits. The vault program checks a hash-based signature before anything leaves a vault. Your wallet, the fee payer, pump.fun's programs and Solana itself still use classical (Ed25519) cryptography. Section 5 says exactly what that means.

1. Acceptance

By using the Appdrop website and app ("the Service") you agree to these Terms. If you do not agree, do not use the Service. Continued use after an update means you accept the updated Terms.

2. What the Service is

The Service lets you launch coins on pump.fun with a dev buy, and list and trade coins on a public board. You choose where the creator share of the coin's fees goes before you launch:

My wallet: the creator share of the coin's fees is paid on chain to your wallet, and the coins from your dev buy stay in your wallet. Both are controlled by your wallet's ordinary key, like any pump.fun launch. The coin is not sealed and nothing about it is post-quantum.
Holders (where offered): the creator share is paid out to the coin's holders, weighted by how long they hold, with liquidity pools excluded. The coins from your dev buy stay in your wallet. [OPERATOR: lawyer review of holder payouts]
My vault: the creator share is paid on chain to your post-quantum vault, and the coins from your dev buy are moved into the same vault. Moving anything out needs a hash-based signature made from your 24 words and checked on chain by the vault program.
Team split: the creator share is divided between up to 6 wallets you name, in the proportions you set. The coins from your dev buy stay in your wallet.

The choice is fixed at launch: the fee-sharing configuration is locked and cannot be pointed somewhere else later. [OPERATOR: lawyer review of the launch choices]

A vault launch needs a vault first; the other choices do not. Anyone may also open a vault and seal tokens they hold. Coins on the Service are created permissionlessly by their launchers, not by Appdrop; listing a coin is not an endorsement or a check of any kind. The Service is operated by [OPERATOR: legal entity name] ("we", "us").

3. Eligibility

You may use the Service only if you are of legal age and permitted to do so where you live, and you are not subject to sanctions or located in a jurisdiction where using it is prohibited. You are responsible for checking that. [OPERATOR: lawyer review: restricted jurisdictions list]

4. Wallets and keys

Your wallet. You sign in and sign transactions with your own Solana wallet (Phantom, Solflare or any other Wallet Standard wallet). A wallet is the only account; there is no email, social or password sign-in. Your wallet's keys stay in your wallet. Launches, trades, vault deposits and vault withdrawals are signed by your wallet in your browser.
No wallet is held for you. The Service does not create or hold a wallet for you and never signs on your behalf. Fees are paid on chain to your vault or your own wallet, not to an account we control.
The platform wallet. Appdrop has one platform wallet. It receives the platform share of creator fees and signs the buy and burn of $APPD. It is an ordinary Solana wallet whose key is held by Privy, a third-party key provider, and Privy signs for it. It never holds your funds.
No private keys on our servers. We do not store, log or receive the private key of your wallet, your vault or the platform wallet.

5. Post-quantum vaults

A vault is an account of the Appdrop vault program on Solana. What it holds sits at the vault's owner address and can only be moved by a one-time hash-based signature (WOTS+ in an XMSS-style tree) that the program verifies on chain.

The 24 words are the key. They are generated in your browser, shown once and never sent to us. Anyone who has them can move what the vault holds. We cannot see them, store them, reset them or recover them. If you lose them, the vault's contents are permanently out of reach. Write them on paper and keep them safe.
Non-custodial. Appdrop cannot move, freeze or recover anything in your vault. We keep only public data about it (its address, root and a count of used one-time keys).
One-time keys. A vault signs with a set of 1,024 one-time keys. The last key of a set is reserved for rotating to the next set, so 1,023 are usable. Each withdrawal or record uses one. The site tracks them to avoid reuse, but signing two different messages with the same key weakens it. When a set is nearly used up the Vault page asks you to rotate keys. Rotating keeps the same vault address and the same 24 words. A used-up set cannot move funds until you rotate.
What stays classical. Your wallet pays the network fee for every vault transaction and signs as the fee payer with Ed25519. A fee payer cannot change what a vault signature allows, but it can refuse to send. pump.fun's programs are controlled by pump.fun and use classical keys: fees are only behind the vault once they reach it. Solana's validators and consensus use classical cryptography.
Who can change the vault program. A program that can still be upgraded could have its signature check replaced by whoever controls the upgrade. Appdrop's design is that upgrades go through a multisig with a 4 hour time lock, and that you can withdraw during the delay. Rely on the current status, read from the chain: [OPERATOR: lawyer review: confirm this wording matches the deployed program before production.]
If the Service is offline. A vault does not depend on the Service. The recovery page withdraws with only the 24 words, a Solana RPC and a wallet, and can be saved as a single file.
Wallet-derived vaults. If you choose to derive a vault key from a wallet signature instead of 24 words, that vault is only as strong as your wallet's Ed25519 key. It is labelled not post-quantum.
Unsupported tokens. Transfer-hook, non-transferable and frozen tokens cannot be withdrawn from a vault, so the Service refuses to seal them. Tokens with a permanent delegate can be moved by that delegate even from a vault; the Service warns you.
"Post-quantum" describes the kind of signature used, not a guarantee. No system is unbreakable.

6. Fees

Every coin launched through the Service locks a pump.fun fee-sharing configuration that pays a share of its creator fees, currently (shown before you launch), to one Appdrop platform wallet. Of what that wallet receives: The rest of the creator fees, currently , go to your vault for a vault launch or to your wallet for a standard launch. The fee-sharing configuration is locked on chain and cannot be changed afterwards, by you or by us. The Service charges no other fee. [OPERATOR: confirm the live percentages before promotion]

Collecting a coin's fees is permissionless whatever the creator chose: anyone may pay the small network fee to move the fees to every shareholder (the creator's chosen destination, and the platform wallet). Solana network fees and rent are separate, paid by the wallet that signs, and never received by us.

7. Launches and trades

Transactions are irreversible once confirmed. You are responsible for every parameter you approve in your wallet.
A launch has more than one step: the launch and its vault record, then the fee split and the dev bag. Until the last step lands, the coin is live but its fee split or seal is not finished; the Service keeps reminding you until it is.
The buy and burn of $APPD runs automatically from the platform wallet. It can be late, smaller than expected or paused. Burns and prices are not guaranteed, and holding $APPD or any coin is not a promise of profit.
Holder lists, balances and prices come from third parties and the chain and can be incomplete or wrong.

8. Availability and data

The Service depends on hosting, RPC providers, pump.fun, Privy (for the platform wallet only) and other third parties, any of which can be slow or unavailable. Data shown may be cached, delayed or wrong; check anything that matters on chain. If something looks wrong, email bullieonchain@gmail.com. A report does not create a right to compensation.

9. Acceptable use

Use the Service lawfully and only with wallets, vaults and coins you control. Do not use it to defraud or mislead anyone, to get around rate limits or access controls, or to attack the Service or other users. We may restrict or end access for anyone who breaks these Terms.

10. Your responsibility

You are responsible for whether your use is lawful where you are, including tax, securities and money-transmission rules, and for any tax on launches, trades and fees.

11. Liability and warranties

The Service is provided as is and as available, without warranties of any kind. To the maximum extent the law allows, we are not liable for any indirect or consequential loss, or for any loss of funds, including funds in a vault whose words are lost, funds affected by third-party programs, or losses from outages, bugs or wrong data. Our total liability is limited to USD 10. You agree to indemnify us against any demand, loss or cost arising from your use of the Service or your breach of these Terms. [OPERATOR: lawyer review]

12. Third parties

The Service uses or links to pump.fun, Jupiter, GMGN, DexScreener, Solana RPC providers, wallet providers and Privy (for the platform wallet only). Their terms and privacy policies apply to your use of them.

13. Intellectual property

The Appdrop name, design and code belong to [OPERATOR: legal entity name]. Coin names, symbols and images belong to their creators.

14. Governing law

[OPERATOR: lawyer review: governing law and venue]

15. Changes

We may change these Terms and will update the date above. Signed-in users may be asked to accept the new version.

16. Contact

Questions about these Terms: bullieonchain@gmail.com.