End User License Agreement (EULA) for the Spike App

Version 1.0 – effective as of 25 October 2026

Licensor: Secron AB, Swedish company registration number 559435-2816, Stämånavägen 10, SE-443 39 Lerum, Sweden ("Secron", "we", "us").

This End User License Agreement (the "Agreement") governs your and your organization's use of the Spike app and the services that belong to it. Please read the Agreement carefully. By accepting the Agreement in the app, or by otherwise using Spike, you confirm that you have read, understood and accepted the Agreement. If you do not accept the Agreement, you may not use Spike.

The Agreement covers Spike only. Commercial terms – fees, number of seats, license period and delivery of instruments – are governed by the agreement the Customer has entered into with Secron (the "Customer Agreement", see section 2).

The Swedish version of the Agreement is the original. This English translation is provided for convenience. In the event of any discrepancy, the Swedish version at https://www.secron.se/eula-svenska/ prevails.

Key points in brief

This summary is provided for readability only and does not replace the full terms of the Agreement.

  • Spike is a training tool. Plumes, zones, readings and doses are simplified simulations for training purposes. They must never be used as a basis for decisions in real incidents (section 8).

  • Active participants are location-tracked. During an ongoing exercise your GPS position is recorded continuously, even when the screen is off or the app is in the background. Positions are shown to the exercise leader in real time, stored, and can be replayed afterwards by your organization (section 9).

  • The Customer is responsible for the safety of the exercise in the physical environment (section 8).

  • The license is tied to an organization with the number of seats and the license period that follow from the Customer Agreement (section 5).

  • Personal data. Your organization is the controller for exercise data and Secron processes it as a processor. Data is stored within the EU (section 12 and the Privacy Policy).

  • Swedish law applies (section 22).

1. Parties and scope of the Agreement

1.1 The Agreement is entered into between Secron and (a) the organization that has acquired a license to Spike (the "Customer") and (b) every natural person who uses Spike ("User", "you"). If you use Spike on behalf of an organization, you represent that you are authorized to bind that organization to the Agreement, or that the organization has already accepted the Agreement through the Customer Agreement.

1.2 The Agreement applies to the App for Windows, Android and iOS, the cloud service behind the App, the embedded software (firmware) in the Spike instruments and the associated documentation, regardless of how you obtained access to them.

1.3 If the Customer Agreement contains terms that deviate from the Agreement, the Customer Agreement prevails over the Agreement to that extent. The Agreement always applies to the Users' use of Spike.

1.4 Spike is intended for professional use by fire and rescue services, other providers of essential services, training providers and companies. If, exceptionally, you use Spike as a consumer, the Agreement does not affect the rights you have under mandatory consumer protection law (see section 21.6).

2. Definitions

In the Agreement, the following terms have the meanings set out below.

  • "Administrator" – a User with an administrator role who manages the organization's accounts on behalf of the Customer, or Secron's own staff who manage organizations and licenses.

  • "Agreement" – this End User License Agreement.

  • "App" – Secron's Spike client software for Windows, Android and iOS, including updates.

  • "Customer" – the legal entity (e.g. a municipality, a municipal association, a public authority or a company) that has acquired a license to Spike.

  • "Customer Agreement" – the agreement between the Customer and Secron (e.g. an order, an order confirmation or a public procurement contract) that governs the scope of the license, fees and other commercial terms.

  • "Customer Data" – all data that the Customer and its Users enter into or generate through Spike, including Exercise Data and personal data about Users.

  • "Data Processing Agreement" – the data processing agreement in force between the Customer and Secron (section 12.2).

  • "Exercise" – a simulated CBRNE event (chemical, biological, radiological, nuclear or explosive) that a Leader creates and runs in Spike.

  • "Exercise Data" – data created during an Exercise, such as the scenario, weather, computed zones, position logs, instrument history, event log, drawings and after-action review material.

  • "Firmware" – the embedded software that Secron provides for the Instruments.

  • "Instrument" – physical Spike measuring instruments (IoT devices) with Firmware that display simulated readings.

  • "Leader" – a User with their own account who creates and leads Exercises.

  • "License Period" – the period during which the Customer's license is valid according to the Customer Agreement.

  • "Observer" – a User who joins an Exercise in read-only mode without being location-tracked (e.g. via the Windows app).

  • "Participant" – a User who joins an Exercise as a trainee via a QR code or exercise code, without an account of their own, and who is location-tracked during the Exercise.

  • "Seat" – the right for one (1) named User to hold an account as a Leader or Administrator with the Customer.

  • "Service" or "Spike" – the App, the cloud service behind the App (backend and databases), the Firmware and the associated documentation.

  • "Trial License" – a time-limited, free-of-charge license for evaluation.

  • "User" – every natural person who uses Spike, i.e. Administrators, Leaders, Participants and Observers.

3. Acceptance of the Agreement

3.1 The Agreement is accepted when you tap "Accept and continue" in the App, when the Customer enters into the Customer Agreement, or when you otherwise use the Service.

3.2 Secron maintains versions of the Agreement. When a new version takes effect, the App asks you to accept it again before you can continue using the Service. The version and time of your acceptance are recorded – for Leaders and Administrators on the account, for Participants on the device and in the Exercise's participant list – so that Secron and the Customer can show which terms applied.

3.3 The Customer is responsible for ensuring that all of its Users, including Participants in the Customer's Exercises, are informed of and comply with the Agreement. The Customer is responsible for its Users' use of the Service as for its own use.

3.4 The Service is intended for persons who are 18 years of age or older. The Customer may allow younger persons to take part in an Exercise (e.g. in youth programs) only where this is permitted by applicable law and the Customer has obtained the approvals required, e.g. from a legal guardian.

4. Description of the Service

4.1 Spike is a platform for planning, running and evaluating exercises with simulated releases of chemical, biological, radiological, nuclear and explosive substances (CBRNE). The Service consists mainly of:

  • (a) the App for exercise leaders and administrators (primarily Windows, also Android and iOS) and for participants (Android and iOS);

  • (b) the cloud service, where scenarios are stored, the dispersion model is computed and Exercise Data is saved;

  • (c) the Instruments with Firmware, which display simulated readings based on the Instrument's position relative to the virtual release;

  • (d) the after-action review function, where a completed Exercise can be replayed afterwards.

4.2 Roles. Administrators manage the Customer's organization and accounts. Leaders create Exercises, place the virtual release, choose the substance and weather, control what Participants see ("fog of war"), draw tactical layers, link Instruments and evaluate the Exercise. Participants join via QR code, see what the Leader allows and are location-tracked. Observers follow the Exercise without being tracked.

4.3 The dispersion model in Spike is a deliberately simplified training model. It is not a validated dispersion calculation tool and has not been designed, tested or approved for decision support in real incidents. See section 8.

4.4 The Service depends on third-party services (e.g. maps, weather data, cloud infrastructure and mobile networks) and on the device's GPS receiver. Secron cannot guarantee the availability or accuracy of these services. See section 13.

4.5 Secron develops the Service continuously and may add, change or remove features. See section 15.

5. License

5.1 Scope of the license. During the License Period, and provided that the Agreement is complied with, Secron grants the Customer a non-exclusive, non-transferable, revocable and time-limited right, without the right to sublicense, to let its Users use the Service for the Customer's internal exercise and training activities, to the extent (number of Seats, quotas, etc.) specified in the Customer Agreement.

5.2 Seats. Each Seat may be used by one (1) named User. Accounts may not be shared. The Customer may replace the User who holds a Seat by having the Administrator remove the old account and create a new one.

5.3 Quotas. Secron may limit the number of Exercises per account or organization in accordance with the Customer Agreement. The Service enforces these limits technically.

5.4 Participants and Observers do not need a Seat. They may use the App free of charge, solely to take part in the Customer's Exercises and in accordance with the Agreement.

5.5 The App may be installed on as many devices as the User needs for their use. For iOS and Android, the app store's terms also apply (section 13).

5.6 Firmware is licensed only for use on Instruments supplied by Secron. The terms for purchase, rental or loan of the Instruments themselves are governed by the Customer Agreement. The Firmware may not be copied to other hardware.

5.7 Trial License. Secron may offer a Trial License. A Trial License is free of charge, time-limited, provided "as is" and may be terminated by Secron at any time. Exercise Data created under a Trial License may be deleted when the Trial License ends if the Customer does not move to a paid license.

5.8 Updates. Secron may provide updates to the App and the Firmware. Updates are covered by the Agreement. Some updates may be necessary for continued use, e.g. for security or compatibility reasons.

5.9 Fees. Fees for the Service are set out in the Customer Agreement. Trial Licenses and the use by Participants and Observers are free of charge.

5.10 Reservation of rights. All rights not expressly granted in the Agreement are reserved by Secron and its licensors.

6. Restrictions and prohibited use

6.1 You may not, and the Customer may not allow anyone else to:

  • (a) use the Service as a basis for decisions in real accidents, releases or other live incidents (see section 8);

  • (b) copy, modify, translate, adapt or create derivative works of the Service, except to the extent permitted by mandatory law;

  • (c) decompile, disassemble or otherwise attempt to extract the source code, algorithms or dispersion model from the Service, except to the extent such actions are expressly permitted by mandatory law (e.g. sections 26 g and 26 h of the Swedish Copyright Act (1960:729), implementing Directive 2009/24/EC) and you have first asked Secron for the information needed;

  • (d) rent, lease, lend, sell, redistribute, sublicense or otherwise make the Service available to third parties, or use the Service to provide services to third parties (e.g. as a service bureau) without Secron's written approval;

  • (e) circumvent or attempt to circumvent license, seat or quota controls, access rules or other technical protection measures;

  • (f) obtain or attempt to obtain unauthorized access to the Service, its servers, databases, networks or other customers' data, or carry out security testing, penetration testing or load testing of the Service without Secron's written approval;

  • (g) send false, manipulated or automated data to the Service (e.g. spoofed positions or instrument data) other than within the Service's intended functions;

  • (h) use the Service in a manner that violates law, official decisions, third-party rights or accepted standards, or to harass, monitor or profile persons outside an Exercise;

  • (i) remove, hide or alter copyright notices, trademarks, attributions to map providers or other proprietary notices;

  • (j) use the Service to develop a competing product; or

  • (k) use the Service's interfaces (APIs, telemetry endpoints, etc.) other than through the App and Firmware provided by Secron.

6.2 Customer Data may not contain information that is unlawful, offensive or that the Customer has no right to process. In particular, the Customer must not enter special categories of personal data (e.g. health data) in free-text fields such as exercise names, dispatch information or participant names.

6.3 Secron may suspend or restrict access to the Service for a User, an account or an organization if Secron reasonably suspects that the Agreement is being breached, that the security or integrity of the Service is threatened or that the use poses a risk of harm to Secron, other customers or third parties. Secron will notify the Customer in advance where possible and otherwise as soon as possible.

7. Accounts and security

7.1 Leaders and Administrators receive accounts created by the Customer's Administrator or by Secron. The account is personal. You are responsible for keeping your login credentials secret and for all activity that takes place with your account. If you suspect that your account is being misused, you must immediately change your password and notify the Customer's Administrator or Secron.

7.2 The "Remember me" function stores only your email address locally on the device. Secron never stores passwords in plain text.

7.3 The Customer is responsible for closing accounts of Users who leave the Customer or should no longer have access, and for administering roles and permissions correctly.

7.4 Participants are identified by an anonymous technical account and a random installation ID on the device. Participants should not enter more personal data in the lobby than the Exercise requires (e.g. only a first name or call sign).

7.5 Leaders can delete their own account under Settings. Deletion is permanent. Exercises created by the account remain with the Customer but can no longer be opened by the deleted account, and ongoing Exercises end automatically.

7.6 Vulnerability reporting. If you discover a security vulnerability in the Service, we ask you to report it to sales@secron.se and not to exploit or disclose it.

8. Exercise safety and important information about the simulation

8.1 For training only. Spike simulates releases, dispersion, zones, concentrations, dose rates and instrument readings for training purposes. The values are the output of a simplified model with standardized assumptions and do not take into account terrain, buildings, turbulence, actual source strength or other factors that govern a real event. The Service must never be used as a basis for risk assessment, cordoning, evacuation, choice of protection level or other decisions in real incidents. In real incidents, use the tools, procedures and expert resources prescribed by your organization.

8.2 The Instruments have no real sensors. The Instruments do not measure anything in their surroundings. All readings are simulated and computed from the Instrument's GPS position and the Exercise scenario. The Instruments must not be used to detect, measure or rule out the presence of hazardous substances or radiation.

8.3 The Customer is responsible for the Exercise. The Customer and its Leaders are fully responsible for the planning, risk assessment, command and execution of the Exercise in the physical environment, including choice of location, traffic, weather, terrain, personal protective equipment, working hours, participants' health and other occupational health and safety matters under, among other laws, the Swedish Work Environment Act (1977:1160). Participants must never put themselves or others in danger in order to follow information in the App.

8.4 Look up from the screen. The App must not be used while you are driving a vehicle or in situations where your attention is needed for your own or others' safety.

8.5 Positions, maps and weather may be wrong. GPS positions may deviate by several meters or more, especially indoors, near buildings and in forests. Map imagery may be out of date. Weather data is obtained from third parties or entered manually by the Leader. Secron is not liable for inaccuracies in such data.

8.6 No alarm or emergency function. Spike is not an alarm service and does not replace 112 (emergency services) or the Customer's ordinary command and communication systems. The Service may become unavailable without notice.

9. Participants and location tracking

9.1 When you join an Exercise as a Participant (trainee) and start the exercise mode, the App continuously records your GPS position (approximately every two seconds) and sends it to the Service. Tracking continues even when the screen is off or the App is in the background, for as long as the Exercise is ongoing and you have not left it. On Android an ongoing notification is displayed, and on iOS the system's background location indicator is shown.

9.2 Your position is shown in real time to the Exercise's Leader and is stored as a track log in the Exercise Data. The Leader may choose to let Participants see each other's positions. After the Exercise, the Leader and the Customer can replay the Exercise and see your movements, as well as an analysis of when you were inside simulated zones and the simulated exposure this corresponded to. The Customer uses this data for evaluation and training.

9.3 Tracking stops when the Exercise is ended by the Leader, when the Exercise ends automatically (at the latest 24 hours after it was created), when you leave the Exercise, close the App or revoke the App's location permission in the device settings. You can stop the tracking at any time, but the Customer will then not be able to see you on the map or in the after-action review.

9.4 Observers are never location-tracked.

9.5 In addition to your position, the following data about you as a Participant is processed: the name or call sign you may enter, the selected role (e.g. firefighter or officer), the time you joined, the device model and a random installation ID, and the version of the Agreement you accepted. Full information is provided in the Privacy Policy.

9.6 It is the Customer – normally your employer or training provider – that determines why and on what legal basis your data is processed in the Exercise. Questions about or objections to the tracking should therefore primarily be directed to the Customer (section 12).

10. Customer Data and intellectual property rights

10.1 Customer Data belongs to the Customer. The Customer (or its Users or licensors) retains all rights to Customer Data. The Customer grants Secron a non-exclusive, worldwide, royalty-free right to store, copy, process, transfer and display Customer Data to the extent necessary to provide, maintain, secure and improve the Service and to comply with the Agreement and the law.

10.2 Aggregated and anonymized data. Secron may produce and use statistics and other information derived from the use of the Service, provided that the information is anonymized and identifies neither the Customer, individual Users nor individual Exercises. Such information belongs to Secron.

10.3 Secron's rights. The Service, including the App, the cloud service, the Firmware, the dispersion model, the substance library, interfaces, design, documentation, the Spike trademark and all improvements, is protected by copyright, trademark law and other intellectual property rights and belongs to Secron or its licensors. The Agreement does not transfer any such rights.

10.4 Feedback. If you or the Customer provide suggestions, feedback or ideas about the Service, Secron may use them freely without compensation or obligation. Customer Data, however, may never be used other than in accordance with the Agreement.

10.5 Open source. The Service contains open-source components that are subject to their own license terms. A list is available in the App under Settings → Third-party licenses. To the extent such terms grant you more extensive rights than the Agreement, those terms apply to that component.

10.6 Map and weather data belong to the respective providers and may only be used within the Service and in accordance with the provider's terms (section 13). Attributions displayed on the map may not be removed.

11. Instrument data, data portability and switching

11.1 Data generated by the Instruments. An Instrument that is switched on and linked to an Exercise continuously (normally every two to five seconds) sends its serial number, GPS position and battery level to the Service, which responds with a simulated reading. During an ongoing Exercise, the position, time and simulated value are stored in the Exercise Data (instrument history). Outside an Exercise, only the Instrument's latest position and time are stored. The Instruments do not collect audio, images or any readings from their surroundings.

11.2 Access to data. As the user of the Instruments and the Service within the meaning of Regulation (EU) 2023/2854 (the Data Act), the Customer has the right to access, free of charge, the data generated by the Instruments and the App that is available to Secron. The data is available in the App (the Exercise map and the after-action review) and is provided on request in a structured, commonly used and machine-readable format (e.g. JSON). The Customer may also request that the data be made available to a third party designated by the Customer, on the terms set out in the Data Act.

11.3 Switching and exit. The Customer may at any time end its use of the Service and move its Customer Data to another provider or to its own infrastructure. A request for switching or export is sent to sales@secron.se. Secron initiates the export without undue delay and at the latest within 30 days, charges no fee for switching or export, and assists the Customer to a reasonable extent. The notice period for initiating switching never exceeds two (2) months. The Customer may use exported Customer Data freely. Secron cannot guarantee that the data can be imported without errors into third-party systems; Exercise Data contains simulated values whose meaning depends on Spike's model.

11.4 Sections 11.2–11.3 do not limit the Customer's obligations as controller under section 12.

12. Personal data

12.1 Roles. For personal data in Customer Data (e.g. position logs, participant names and the account details entered by the Customer), the Customer is the controller and Secron is the processor within the meaning of Regulation (EU) 2016/679 (the "GDPR"). The Customer is responsible for ensuring that there is a legal basis for the processing, that Users receive information in accordance with Articles 13–14 GDPR, that a data protection impact assessment is carried out where required, and that the processing complies with employment law, e.g. the duty to negotiate under the Swedish Co-Determination Act (1976:580) where applicable.

12.2 Data Processing Agreement. Secron processes personal data in Customer Data only in accordance with the Customer's documented instructions and the data processing agreement that forms part of the Customer Agreement. If no specific data processing agreement has been concluded, Secron's standard data processing agreement in force from time to time, provided by Secron on request, applies as part of the Agreement.

12.3 Secron as controller. For data that Secron processes for its own purposes in the Service – account data for Leaders and Administrators, the organization's contact person, license administration, support, security logs and records of acceptance of the Agreement – Secron is the controller. Such processing is described in the Privacy Policy for the Spike app: https://secron.se/legal/privacy/en.

12.4 Storage within the EU. Customer Data, including account and authentication data, is stored and processed within the EU/EEA (Google Cloud, Europe region). When your device fetches map imagery, it communicates directly with map providers that may be located outside the EU/EEA (section 13). Otherwise, personal data is transferred outside the EU/EEA only on the basis of Chapter V GDPR. Sub-processors are listed in the Data Processing Agreement and in the Privacy Policy.

12.5 Data subject rights. Participants, Leaders and other data subjects who wish to exercise their rights (access, rectification, erasure, objection, etc.) regarding Exercise Data should contact the Customer. Secron assists the Customer to the extent set out in the Data Processing Agreement. For data for which Secron is the controller, you may contact Secron directly (section 23). You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the supervisory authority in your country.

12.6 Security. Secron implements appropriate technical and organizational measures to protect Customer Data, including encryption in transit, access control per organization and role, server-side access rules, logging and restricted staff access. Secron's staff have access to Customer Data only to the extent required for operations, support and troubleshooting. Secron notifies the Customer without undue delay of a personal data breach concerning Customer Data.

13. Third-party services and app stores

13.1 The Service uses services from third parties. When you use the Service, your device may communicate directly with these providers, which may thereby receive, for example, your IP address and the map area being displayed. At the time of this version, the Service uses:

  • (a) Google Cloud / Firebase (Google Ireland Limited and Google LLC) – cloud infrastructure, database, authentication and server functions, within the EU;

  • (b) Google Maps Platform (Map Tiles API) – map imagery, where applicable. By using the maps you accept the Google Maps/Google Earth Additional Terms of Service (https://maps.google.com/help/terms_maps/) and the Google Privacy Policy (https://policies.google.com/privacy);

  • (c) Esri World Imagery (Environmental Systems Research Institute, Inc.) – satellite imagery;

  • (d) OpenStreetMap (OpenStreetMap Foundation) – road map, © OpenStreetMap contributors, licensed under the ODbL;

  • (e) SMHI (the Swedish Meteorological and Hydrological Institute) – open weather data (forecasts) under the Creative Commons Attribution 4.0 license, and, where applicable, OpenWeatherMap;

  • (f) MSB RIB – substance data from the Swedish Civil Contingencies Agency, to the extent the integration is enabled;

  • (g) mobile network operators for the Instruments' data traffic.

Secron may replace or add providers. Secron is not responsible for the content, availability, accuracy or terms of third-party services.

13.2 Apple App Store. If you downloaded the App from Apple's App Store, the following terms, required by Apple, also apply:

  • (a) The Agreement is concluded solely between you and Secron, not with Apple Inc. or its subsidiaries ("Apple"). Secron, not Apple, is solely responsible for the App and its content.

  • (b) The license grants you the right to use the App on Apple-branded devices that you own or control, as permitted by the Usage Rules set out in the Apple Media Services Terms and Conditions, including via Family Sharing or volume purchasing where applicable.

  • (c) Secron, not Apple, is solely responsible for providing maintenance and support for the App. Apple has no obligation whatsoever to furnish any maintenance or support services.

  • (d) Secron is solely responsible for any product warranties, whether express or implied by law, to the extent not effectively disclaimed. In the event of any failure of the App to conform to an applicable warranty, you may notify Apple, and Apple will refund the purchase price for the App (if any) to you. To the maximum extent permitted by applicable law, Apple has no other warranty obligation whatsoever with respect to the App, and any other claims, losses, liabilities, damages, costs or expenses attributable to any failure to conform to any warranty are Secron's responsibility.

  • (e) Secron, not Apple, is responsible for addressing any claims by you or any third party relating to the App or your possession and/or use of the App, including (i) product liability claims, (ii) any claim that the App fails to conform to any applicable legal or regulatory requirement, and (iii) claims arising under consumer protection, privacy or similar legislation.

  • (f) In the event of any third-party claim that the App or your possession and use of the App infringes that third party's intellectual property rights, Secron, not Apple, is solely responsible for the investigation, defense, settlement and discharge of such claim.

  • (g) You represent and warrant that you are not located in a country that is subject to a U.S. Government embargo or that has been designated by the U.S. Government as a "terrorist supporting" country, and that you are not listed on any U.S. Government list of prohibited or restricted parties.

  • (h) You must comply with applicable third-party terms when using the App (e.g. the terms of your mobile subscription).

  • (i) Apple and Apple's subsidiaries are third-party beneficiaries of the Agreement and, upon your acceptance of the Agreement, have the right to enforce the Agreement against you as a third-party beneficiary.

  • (j) Questions, complaints and claims regarding the App should be directed to Secron: sales@secron.se, Secron AB, Stämånavägen 10, SE-443 39 Lerum, Sweden.

13.3 Google Play. If you downloaded the App from Google Play, the Google Play Terms of Service also apply. Google is not a party to the Agreement and has no responsibility for the App.

13.4 Windows. The Windows version of the App is distributed by Secron (e.g. as an MSIX package). The Agreement applies regardless of the method of distribution.

14. Support, maintenance and availability

14.1 Secron provides support for the Service by email to sales@secron.se on Swedish business days. Support covers assistance with the Service's functions and error reporting. It does not cover training in CBRNE tactics, planning of Exercises or support for the User's own hardware, network or operating system, unless otherwise agreed.

14.2 Secron strives to keep the Service available around the clock but gives no guarantee of any particular availability or response time unless otherwise stated in the Customer Agreement. The Service may be unavailable due to scheduled maintenance (which Secron announces in advance where possible and schedules outside normal office hours), failures at third-party providers, network disruptions, force majeure or measures required for security reasons.

14.3 The Customer is responsible for ensuring that Users have the devices, operating system versions, mobile subscriptions, GPS coverage and internet connection required. Secron may end support for older operating system versions with reasonable notice.

15. Changes to the Service and the Agreement

15.1 Secron may develop and change the Service, including its dispersion model, features, appearance and technical requirements. If a change materially degrades the main functionality of the Service during an ongoing License Period, the Customer is entitled to terminate the license early; any refund is governed by the Customer Agreement.

15.2 Secron may amend the Agreement. Amendments that are to the Customer's detriment are notified to the Customer (by email to the Customer's contact person or in the Service) at least 30 days before they take effect. Amendments required by law, official decisions, security reasons or new app store terms may take effect earlier. If the Customer does not accept a material amendment to its detriment, the Customer may terminate the license with effect from the date the amendment takes effect, in accordance with section 15.1.

15.3 When a new version of the Agreement takes effect, each User is asked to accept it in the App. Continued use of the Service after the effective date constitutes acceptance.

16. Warranties and disclaimers

16.1 Secron warrants that, during the License Period, the Service will function in all material respects in accordance with Secron's documentation in force from time to time. Secron's sole obligation in the event of a deviation from this warranty is to remedy the defect within a reasonable time or, if this is not possible, to refund a pro-rata share of the license fee for the period during which the Service could not be used, in addition to what follows from section 17.

16.2 Except as expressly stated in the Agreement, the Service is provided "as is" and "as available". To the extent permitted by applicable law, Secron gives no other warranties, express or implied, including warranties of fitness for a particular purpose, uninterrupted or error-free operation or non-infringement.

16.3 In particular, Secron does not warrant that simulations, zones, concentrations, doses or instrument readings correspond to real conditions, and gives no warranty that Exercises run with the Service satisfy any training, certification or regulatory requirements. Such assessments are the Customer's responsibility.

16.4 Terms for the Instruments' hardware (warranty, complaints, delivery) are governed by the Customer Agreement.

17. Limitation of liability

17.1 Secron is not liable for indirect or consequential damages, such as loss of profit, loss of production, loss of data (beyond Secron's backup commitments under the Data Processing Agreement), third-party claims or costs of replacement services, unless the damage was caused by Secron's willful misconduct or gross negligence.

17.2 Secron's total liability towards the Customer and its Users during a contract year, regardless of the basis, is limited to an amount corresponding to the fees paid by the Customer for the Service during the twelve (12) months preceding the event giving rise to the claim. For Trial Licenses and for Participants and Observers, liability is limited to SEK 10,000.

17.3 Secron is not liable for damage resulting from (a) use of the Service in breach of the Agreement or for real incidents, (b) decisions made on the basis of simulated data, (c) the Customer's planning or execution of the Exercise in the physical environment, (d) errors in Customer Data, (e) failures or interruptions in third-party services, networks, GPS or the User's equipment, or (f) the Customer's failure to install updates made available.

17.4 The limitations in this section do not apply in cases of willful misconduct or gross negligence, to liability for personal injury that may not be limited under mandatory law, or to the extent liability under the Data Processing Agreement or Article 82 GDPR may not be limited.

17.5 The Customer shall indemnify Secron against third-party claims (including claims by the Customer's Users) arising from the Customer's or its Users' use of the Service in breach of the Agreement or the law, or from the content of Customer Data.

17.6 Claims against Secron must be made in writing without undue delay after the Customer discovered or should have discovered the basis for the claim, and no later than twelve (12) months after the event giving rise to the claim.

18. Term and termination

18.1 The Customer's license runs for the License Period stated in the Customer Agreement and ends at its expiry unless it is renewed. For Users, the Agreement applies for as long as they use the Service.

18.2 Either party may terminate the Agreement with immediate effect if the other party materially breaches the Agreement and fails to remedy the breach within 30 days of a written demand.

18.3 Secron may additionally suspend or end the access of Participants, Observers and other free-of-charge Users at any time, and terminate Trial Licenses in accordance with section 5.7.

18.4 Upon termination of the Agreement: (a) the Customer's and its Users' right to use the Service ends and access to accounts is closed; (b) the Customer must stop using the Firmware unless the Instruments are covered by a continued license; (c) at the Customer's written request, made no later than 30 days after termination, Secron provides a copy of the Customer's Exercise Data in a machine-readable format (see also section 11.3); (d) Secron deletes Customer Data no later than 90 days after termination, unless the law requires continued storage or the Data Processing Agreement provides otherwise, and backups are deleted in accordance with Secron's ordinary routines.

18.5 Sections 6, 10, 11, 12, 16, 17, 18.4, 21 and 22 survive termination of the Agreement.

19. Force majeure

A party is relieved from liability for failure to perform an obligation under the Agreement if the failure is due to a circumstance beyond the party's control that the party could not reasonably have foreseen or avoided, such as war, act of terrorism, natural disaster, epidemic, fire, flood, extensive power failure, failure of public communication networks or cloud infrastructure, government action, new or amended legislation, labor dispute or large-scale cyber attack. The party shall notify the other party without delay and perform the obligation as soon as the impediment has ceased. If the impediment lasts longer than 90 days, either party may terminate the affected part of the Agreement with immediate effect.

20. Assignment and notices

20.1 The Customer may not assign the Agreement or any rights under the Agreement without Secron's written consent.

20.2 Secron may assign the Agreement to a group company or in connection with a transfer of the business to which the Agreement relates, and may engage subcontractors to perform the Agreement, remaining responsible for the subcontractors' work.

20.3 Notices to Secron shall be sent to sales@secron.se or to Secron AB, Stämånavägen 10, SE-443 39 Lerum, Sweden. Notices to the Customer are sent to the email address the Customer has provided as its contact address, or to the Administrator's email address. Notices to Users may be given in the App.

21. Miscellaneous

21.1 Entire agreement. The Agreement, together with the Customer Agreement, the Data Processing Agreement and the Privacy Policy, constitutes the parties' entire agreement regarding the use of the Service.

21.2 Order of precedence. In the event of conflict, the documents apply in the following order: (1) the Data Processing Agreement, as regards the processing of personal data, (2) the Customer Agreement, (3) the Agreement, (4) other documentation.

21.3 Severability. If any provision of the Agreement is invalid or unenforceable, this does not affect the validity of the remainder of the Agreement. The provision shall be adjusted so that it achieves its purpose as far as possible.

21.4 No waiver. A party's failure to enforce a right under the Agreement does not constitute a waiver of that right.

21.5 Language. The Agreement is drawn up in Swedish. This English translation is provided for information; in the event of a discrepancy, the Swedish version prevails.

21.6 Consumers. If you use the Service as a consumer, the provisions of the Agreement that would restrict your rights under mandatory consumer protection law, e.g. the Swedish Consumer Sales Act (2022:260), do not apply. Complaints may then also be examined by the Swedish National Board for Consumer Disputes (Allmänna reklamationsnämnden, ARN), https://www.arn.se.

22. Governing law and disputes

22.1 The Agreement is governed by Swedish law, excluding its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods (CISG) does not apply.

22.2 Disputes arising out of the Agreement shall be settled by the Swedish general courts, with the Gothenburg District Court (Göteborgs tingsrätt) as the court of first instance. The parties shall, however, first attempt to resolve the dispute through negotiation between authorized representatives.

22.3 If you are a consumer, disputes are instead examined in accordance with the rules on jurisdiction that follow from mandatory law, and you may turn to ARN.

23. Contact

Secron AB
Company registration number 559435-2816
Stämånavägen 10, SE-443 39 Lerum, Sweden
Email: sales@secron.se
Web: https://secron.se

Privacy Policy for the Spike app: https://www.secron.se/privacy-policy/
Swedish version of the Agreement (governing): https://www.secron.se/eula-svenska/

Version history

Version

Date

Change

1.0

2026-10-25

First version.