TERMS

Terms of Service

Last updated 27 September 2026Version 2026-09-27

These Terms of Service (the “Terms”) are an agreement between you and GETRYK, the business in Israel that operates Thumb (“GETRYK”, “we”, “us”). They cover your use of Thumb during its private beta.

You accept these Terms in your dashboard, by filling in the form there, ticking its boxes and choosing Agree and continue. They take effect when you do. They include our Acceptable Use Policy, and our Privacy Policy explains how we handle personal data.

1. Who we are and what this covers

GETRYK operates Thumb. Our contact details are in section 25. These Terms include the Acceptable Use Policy. If the two conflict, these Terms prevail.

If you use Thumb for a company or another organisation, you accept these Terms on its behalf, and “you” means both you and that organisation. Only do this if you are authorised to bind it.

2. Definitions

In these Terms:

• “Thumb” means the service GETRYK provides: the website at thumb.run, the dashboard, the MCP and HTTP APIs at api.thumb.run, the Phones, the documentation and our support.
• “Phone” means a physical Android device that we assign to your account, together with any SIM card and phone number that come with it.
• “Agent” means any AI agent, model, script or other software that uses Thumb through your API keys or your dashboard session.
• “API key” means a secret key you create in the dashboard so that an Agent can use Thumb.
• “Dashboard” means the signed-in pages at thumb.run/app.
• “Your Content” means everything you or your Agent send to Thumb or put on a Phone (instructions, typed text, links, files, app data, and the accounts and credentials you sign in with), and everything a Phone shows or returns in response, such as screenshots.
• “Third-Party Service” means any app, website or online service other than Thumb that you or your Agent use on or through a Phone.
• “Activity Metadata” means the records about how Thumb is used that section 10 and the Privacy Policy describe. It never includes what is on your screen, what is typed, or full links.
• “Acceptable Use Policy” or “AUP” means the policy at thumb.run/acceptable-use.

3. Who may use Thumb

• You may use Thumb only if you are at least 18 years old and you use it for your business, trade or profession, including as an independent developer. Thumb is not offered for personal, family or household use.
• When you accept these Terms, the dashboard asks for your company or project, and asks you to tick a box about your age and business use. Please answer accurately: we rely on your answers when we give you access.
• One person per account. Don't share your sign-in with anyone.
• You may not use Thumb if the law or sanctions bar you from it (section 21), or if we have ended your access before for breaking these Terms, unless we agree in writing.
• Access during the beta is by invitation. We decide who gets access, and we may decline or limit it.

4. The private beta

• Thumb is in private beta. It is free for now (section 15).
• There is no service-level agreement. A Phone can be offline, for example during maintenance or a connection problem, and features, limits and supported apps can change or be removed. The current limits are in the docs.
• Don't rely on Thumb for anything production-critical or safety-critical, or for anything where a failure or delay could cause injury, significant loss or damage.
• We may change Thumb, and we may end the beta or Thumb itself. We will give you at least 30 days' notice by email before we end the beta, or stop providing Thumb to you for a reason other than your breach, unless that is impossible (for example because we lose access to the Phones, a carrier withdraws its service, or the law requires it). Where we can, we will also tell you in advance about planned changes that significantly affect you.

5. Your account and API keys

• You sign in with a one-time link sent to your email address, so keep that email account secure.
• Keep API keys secret. Don't put them in code repositories, client-side code, screenshots or shared chats, and use one key per Agent.
• You are responsible for all activity under your account and your API keys (section 6).
• If you think a key or your account has been exposed or misused, revoke the key in the dashboard and tell us promptly at hello@thumb.run. We may revoke a key, or end sessions, that we reasonably believe are exposed or misused, and we will tell you when we do, unless the law forbids it, or telling you would put someone at risk or undermine an investigation.

6. Your agent and your responsibility

• Your Agent acts for you. Anything done through your API keys or your dashboard session, by you, by any Agent you connect, or by anyone you let use them, counts as your act, and you are responsible for it as if you had done it yourself. That includes messages sent, calls made, purchases and payments, bookings, account sign-ups and changes, content posted, and anything agreed to on a Phone.
• You choose, configure, instruct and supervise your Agent, including its model provider, prompts and permissions, and you are responsible for checking its work. AI agents make mistakes and can be manipulated by content they read (prompt injection), and many phone actions, such as sending a message or paying, can't be undone. The docs describe safeguards you can use.
• We don't review, approve or monitor your Agent's actions before they happen, and we have no duty to. GETRYK is not a party to any transaction, message or agreement your Agent makes. Features that help you stay in control, such as pausing your Agent, approvals in your client, rate limits or blocked links, reduce risk but can fail, and they don't make us responsible for your Agent's actions.
• Your Agent's model provider receives what your Agent reads from a Phone. That is governed by your agreement with that provider, not by us.

7. Your phone

• We assign you a Phone that is dedicated to your account while your access lasts. The Phone, and any SIM card and phone number assigned with it, belong to GETRYK or to its mobile carrier. You get the right to use them under these Terms, and nothing more.
• You can't port, transfer or keep a phone number. We may change or withdraw a number, for example if a carrier requires it or when your access ends, and a withdrawn number may later be assigned to someone else; we normally keep it out of use for at least 90 days first. Don't use a Thumb number as the long-term recovery or two-factor number for any account, and remove it from your accounts before you return the Phone.
• Messages, calls and codes that reach your Phone's number but are meant for someone else, such as its previous holder, aren't yours: don't use or act on them, and tell us.
• Cellular service (a phone number, SMS, calls and mobile data) is rolling out and isn't on every Phone yet. Before your Phone gets a SIM card or number, we will tell you in the dashboard or by email what it can do and which carrier rules apply to it; outbound SMS and calls may be limited or turned off. A SIM or number is subject to those rules and to telecommunications law, and the AUP covers the main ones.
• Keep the Phone usable: don't set a screen-lock PIN, password or pattern, don't turn off the settings Thumb relies on, don't root, flash or modify its system software, and don't try to get around Thumb's controls. If you need something changed, ask us.
• GETRYK keeps the Phones in Israel, at a location we don't disclose. Don't try to find out where they are. We may cover or disable a Phone's cameras and microphones and turn off its location services.
• We may replace your Phone with an equivalent one, for example after a failure. You may then need to sign in to your apps again.

8. Third-party services and your accounts

• You choose the Third-Party Services used on your Phone and sign in to them yourself. Each one is governed by its own terms, and you are responsible for following them, including their rules on automation, bots, multiple accounts and new devices. Many services restrict automated use, and using Thumb doesn't give you any permission that a service hasn't given. GETRYK is not a party to those terms and doesn't promise that any Third-Party Service works on Thumb or keeps working.
• Only sign in to accounts you are authorised to use. We recommend accounts dedicated to your Agent's work rather than your personal main accounts, with two-factor authentication turned on. The accounts, credentials and data you put on a Phone are Your Content, and we don't access them except as section 10 allows.
• Phones may share network connections and internet addresses with other Phones, so a service may treat your Phone according to how other Phones behave. A Third-Party Service may restrict or ban your accounts, a Phone, its number or the network it uses. That risk is yours, and we are not liable for it.
• If your use, or your Agent's, in breach of these Terms, the AUP or a Third-Party Service's terms gets a Phone, a number or our network blocked or banned, we may suspend or replace the affected Phone or number, and you will reimburse the reasonable, documented costs we actually incur to put it right (for example, replacing a SIM card or number). We won't charge penalties or fixed fees for this.
• Before you return a Phone, sign out of your accounts and remove the Phone and its number from them.

9. Acceptable use

You must follow the Acceptable Use Policy, which is part of these Terms, and make sure your Agent and anyone using your account follow it too. In short: nothing illegal; no fraud, scams, phishing or impersonation; no spam or unwanted bulk messages or calls; no fake or bulk accounts; no getting around other services' security or limits; no harassment, stalking or surveillance; no use of a Phone's cameras, microphones or sensors beyond the apps you use; no child sexual abuse material; no malware, attacks or unauthorised access; no infringement; no breach of sanctions; no reselling access without our permission; no emergency calls or high-risk use; and nothing that exposes GETRYK, its network or its numbers to abuse. The AUP has the full rules.

10. Monitoring, safety measures and our access

• Monitoring. To keep Thumb safe and prevent abuse, we automatically record Activity Metadata, and we review it when needed: which tool ran and when, whether it worked, and whether you or your Agent ran it; for opening an app, the app's package name; for opening a link, the link's full domain name (like mail.example.com) or IP address, never the rest of the link; the third-party apps installed on your Phone; and the volume of actions on your account. We may be alerted automatically about unusual activity, such as a newly installed app or an unusual number of actions. The Privacy Policy says what we keep and for how long.
• What we don't monitor. We don't watch your screen, and we don't record what is typed or the full links your Phone opens. Monitoring is a safety measure, not a service to you: we have no duty to monitor your use or your Agent's, and monitoring doesn't make us responsible for it.
• Safety measures. We may block links to domains we consider harmful, filter the Phones' network traffic (for example to block malware or phishing), set and change rate limits, and use the other safeguards described in the docs. These are basic safeguards, not guarantees.
• Our access to Phones. The Phones are in our physical custody. Thumb's live view and screenshots show your Phone's screen only to your account. GETRYK may access, restart, update, repair, replace or reset a Phone, and may see what is on it while doing so, only: (a) for maintenance and repair; (b) to investigate or respond to a security incident, or to a suspected breach of these Terms or the AUP; (c) to comply with the law or a valid legal request (section 12); or (d) to help you, when you ask us to. We limit that access to what the purpose needs, and we keep a record of when and why it happened.
• Physical security. Phones have no screen lock, so that Thumb can operate them, which means anyone holding a Phone could use what is signed in on it. That is one reason we recommend signing in only to accounts dedicated to your Agent's work (section 8).
• Your consent. You consent to the monitoring and access this section describes, including for the purposes of laws on privacy and on the interception of communications. If other people's communications or data may appear on your Phone, you are responsible for any notice to them, or consent from them, that the law requires (section 14).

11. Temporary unavailability, suspension and termination

• Grounds. We may act under this section if: (a) you or your Agent breach these Terms or the AUP; (b) your use creates a security risk for Thumb, other customers, the Phones, our network or our numbers; (c) the law, a court order or an authority requires it; (d) a carrier, an app store or a Third-Party Service requires it, or blocks a Phone, a number or our network because of your use; (e) we are investigating a credible report of abuse involving your account; (f) your account appears to be compromised; or (g) once Thumb has fees, you don't pay them.
• Proportionate steps. We choose the step that fits the problem, such as blocking a link, revoking an API key, making a Phone temporarily unavailable (every call to it is refused, and we put it in airplane mode with Wi-Fi off), suspending your account, or ending your access.
• Notice. We act immediately and without notice only where that is needed to prevent harm, stop ongoing abuse, protect the security of Thumb or of others, or comply with the law. Otherwise we will tell you first and give you a reasonable chance, of at least 7 days, to fix the problem. We will tell you the reason for a step we take unless the law forbids it, or telling you would put someone at risk or undermine an investigation. If you think we got it wrong, write to hello@thumb.run and we will review it.
• Ending your access. We may end your access for a serious breach (such as fraud, child sexual abuse material or attacks on others), for repeated breaches, or for a breach you don't fix in time. We may also end it for any other reason, or end the beta, with the notice in section 4.
• Leaving. You can stop using Thumb at any time. You can delete your account in the dashboard, except while your account is suspended or your Phone is temporarily unavailable: then write to hello@thumb.run, and we delete your account once any investigation or legal hold allows (section 13). You can return your Phone in the dashboard while your account is active and the Phone isn't temporarily unavailable; otherwise, write to us.
• When access ends, your API keys and sessions stop working and your Phone is returned (section 13). Sections 6, 8, 12, 13, 14 and 16 to 24, and anything else that by its nature should, continue to apply.

12. Investigations, legal requests and reporting

• Preservation. We may preserve information about you and your use of Thumb, including account details, Activity Metadata, a Phone and its contents, and records about any SIM card or number, where the law requires it, where a valid legal request asks us to, to establish or defend legal claims, or while we investigate a credible report of abuse (for a Phone itself, see the legal holds in section 13).
• Disclosure. Apart from the recipients that the Privacy Policy lists for running Thumb, such as our service providers, we disclose that information only: (a) to an authority, when we believe in good faith that the law, a court order or a valid request from that authority requires it; (b) to prevent imminent harm to someone; or (c) to protect Thumb, our network or our numbers from serious abuse, and then only account details and Activity Metadata, never a Phone's contents, to the carrier or service concerned.
• Your cooperation. If we investigate a suspected breach of these Terms or the AUP, or a report of abuse involving your account, you will help us reasonably, for example by telling us what your Agent was instructed to do and which accounts it used.
• We will tell you about a request that concerns you before we disclose anything, unless the law forbids it, it is an emergency, or telling you would put someone at risk or undermine an investigation.
• We report child sexual abuse material to the authorities, and we may report other suspected illegal activity.

13. Returning a phone, resets and your data

• Phones aren't storage. Keep your own copies of anything that matters: we don't back up what is on Phones.
• You can return your Phone in the dashboard while your account is active, unless it is temporarily unavailable. A Phone is also returned when your account is deleted or your access ends. Your access to it stops at once.
• After a Phone is returned, and before anyone else can use it, we factory reset it. This is done by hand, and Thumb won't assign the Phone to anyone else until it is recorded as reset. A factory reset erases the apps, accounts and data on the Phone, but no erasure method can be guaranteed to remove every trace, so don't leave anything on a Phone that would cause harm if it were ever recovered.
• Legal holds. We may delay a reset, and keep a Phone and its contents as they are, where the law requires it, where a valid legal request asks us to preserve them, or while we investigate a credible report of serious abuse. When the reason ends, we reset the Phone.
• While your account is suspended, your Phone stays assigned to you with its contents, but neither you nor your Agent can use it.
• To the extent the law allows, GETRYK is not liable for the loss of data or content on a Phone caused by a reset, a failure, a replacement, a suspension or the end of your access. What section 19 says we don't limit still applies.

14. Data protection

Our own data. GETRYK is the controller of the personal data we collect to run Thumb, such as account details and Activity Metadata. The Privacy Policy explains how we handle it.

Data your Agent handles. Your Agent may process personal data on or through your Phone, such as what appears on its screen, messages, contacts and app data, including other people's (“Phone Data”). For Phone Data, you are the controller (or you act for your own customer, who is), and GETRYK processes it only as your processor (a “holder” under Israel's Protection of Privacy Law) while it passes through Thumb. For Phone Data, we commit to the following:

1. We process it only to provide Thumb, on your instructions, which are these Terms and the way you use Thumb. If the law requires anything else, we will tell you first unless the law forbids it. We will tell you if we believe an instruction breaks data-protection law.
2. We don't store it except as the Privacy Policy describes: screens, typed text and full links pass through Thumb's systems in memory only, and the Phone itself keeps what you and your Agent put on it until it is reset.
3. Anyone GETRYK authorises to process it is bound by confidentiality.
4. We protect it with the security measures described in the Privacy Policy and the docs.
5. Subprocessors. OVH SAS (France) runs the server that Phone Data passes through. The internet and mobile network providers that connect the Phones carry the Phones' own traffic, and a DNS-filtering provider may resolve the addresses the Phones look up, to block malware and phishing. We will tell you by email or in the dashboard at least 14 days before we add a subprocessor that handles Phone Data. If you object, you may stop using Thumb.
6. We bind each subprocessor we engage to process Phone Data for us, such as OVH or a DNS-filtering provider, to data-protection terms at least as protective as this section, and we remain responsible to you for them. Internet and mobile network providers that only carry the Phones' traffic do so under their own terms.
7. We will tell you without undue delay after we become aware of a personal data breach affecting Phone Data, with the information we reasonably have.
8. We will give you reasonable help with requests from people exercising their rights and with your other legal obligations, bearing in mind that we store almost no Phone Data.
9. When a Phone is returned, we factory reset it (section 13).
10. We will give you the information reasonably needed to show that we meet these commitments, in writing, for example answers to a reasonable security questionnaire, and once a year, if you ask, a written confirmation that we met them. If the law gives you a right to audit beyond that, an independent auditor bound by confidentiality carries it out at your cost, on 30 days' notice, no more than once a year, by reviewing our documents and records. The location of the Phones stays confidential, and there is no on-site inspection unless a supervisory authority requires one.
11. Phone Data is processed in Israel, where the Phones are, and passes through our server in France. The European Commission recognises Israel as providing adequate protection for personal data. If that ever changes, we will work with you on another lawful basis for the transfer.

Your commitments. You are responsible for having a lawful basis for Phone Data and giving any notices the law requires, and you must not instruct us to process it unlawfully. Don't use Thumb for special categories of personal data, such as health data, unless the law allows it and it is necessary.

15. Fees

Thumb is free during the private beta. If we introduce fees, we will tell you at least 30 days in advance, and you will be charged only if you separately agree, for example by choosing a paid plan. We will never charge you without your agreement.

16. Intellectual property and feedback

• GETRYK and its licensors own Thumb, including its software, APIs, documentation, and the Thumb name and logo. While your access lasts, you may use Thumb under these Terms. This right is limited, non-exclusive and non-transferable.
• You keep all rights in Your Content. You allow GETRYK to store, transmit, process and display Your Content only as needed to provide, secure and support Thumb, to comply with the law, and to enforce these Terms.
• Don't copy, resell or reverse engineer Thumb, except as far as the law allows despite this restriction.
• If you send us ideas, suggestions or other feedback, you give GETRYK a perpetual, irrevocable, worldwide, royalty-free right to use it for any purpose, without payment or credit to you. Feedback isn't confidential.

17. Confidentiality in the beta

During the beta we may share non-public information with you, such as unreleased features, plans or pricing. Keep it within your organisation and use it only to evaluate and use Thumb, unless we agree otherwise. This doesn't cover information that is public or that you already had, and you may disclose it where the law requires. You are welcome to talk about your general experience of using Thumb.

18. Disclaimers

• Thumb is a beta and is provided “as is” and “as available”. To the fullest extent the law allows, GETRYK gives no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement or accuracy, or that Thumb will be available, uninterrupted, secure or free of errors.
• We don't warrant any Third-Party Service, any AI model's output, or the results of anything your Agent does.
• What we do commit to are the specific safeguards that these Terms, the Privacy Policy and the docs describe, such as storing secrets only as hashes and factory resetting a Phone before anyone else uses it. Nothing in these Terms limits rights or warranties that the law doesn't allow us to exclude, or our duties under privacy and data-security law.

19. Limitation of liability

• To the extent the law allows, GETRYK is not liable for: (a) indirect, incidental, special or consequential loss or damage; (b) loss of profits, revenue, business, contracts, goodwill or expected savings; (c) loss or corruption of data or content, including anything on a Phone; (d) loss of, or restrictions on, accounts with Third-Party Services, such as bans; or (e) loss caused by what you, your Agent, or anyone using your API keys or account did.
• GETRYK's total liability for all claims arising from or relating to these Terms or Thumb is limited to the greater of (a) the amounts you paid us for Thumb in the 12 months before the event giving rise to the claim, and (b) USD 100.
• These limits reflect that Thumb is a free beta, that you control your Agent, and that you choose the apps and accounts it uses.
• What we don't limit. Nothing in these Terms excludes or limits liability for death or bodily injury, for malice or wilful misconduct, for fraud, for gross negligence, or for anything else that the law doesn't allow to be excluded or limited.
• Points (a) and (b) of the first paragraph also limit your liability to GETRYK, except for your obligations under section 8 (costs of putting right a block or ban) and section 20 (indemnity), and your liability for breaching the AUP.

20. Indemnity

• You will defend GETRYK against, and pay (indemnify it for), claims by third parties and fines or penalties imposed by an authority, together with the reasonable costs of dealing with them, including reasonable legal fees, to the extent they arise from: (a) your or your Agent's use of Thumb in breach of these Terms, the AUP or the law; (b) Your Content, your instructions to your Agent, or the accounts you use on a Phone; or (c) messages, calls, transactions or content sent or made from your Phone.
• This doesn't apply to the extent a claim is caused by GETRYK's breach of these Terms, its negligence or its wilful misconduct.
• We will tell you promptly about a claim (a delay only matters if it harms your defence). You may take over its defence and settlement with lawyers reasonably acceptable to us, and we may take part with our own lawyers at our own cost. We will cooperate reasonably, at your expense. You won't settle a claim in a way that admits fault by GETRYK or places obligations on it without our written consent, which we won't unreasonably withhold.

21. Export controls and sanctions

• You may not use Thumb, or let anyone use it through your account, if you, or the organisation you act for, are located, organised or ordinarily resident in a country or territory that is subject to comprehensive sanctions or is treated as an enemy state under Israeli law, or are listed on a sanctions list of Israel, the United Nations, the United States, the European Union or the United Kingdom, or are owned or controlled by anyone so listed.
• Don't use Thumb in breach of export-control or sanctions laws, or for military, weapons or unlawful surveillance purposes.
• We may end your access immediately if this section is breached.

22. Changes to these Terms

• We may update these Terms, the AUP and the Privacy Policy as Thumb develops. Each shows its version and date at the top, and each version stays available at its own address, such as thumb.run/terms/2026-09-27.
• For a change that materially reduces your rights or increases your obligations, we will email you at least 30 days before it takes effect, show it in the dashboard, and ask you to accept it there. We may make a change sooner only where the law requires it, to address a security risk, or for new features that don't reduce your rights.
• If you don't agree to a change, you can stop using Thumb and delete your account before it takes effect. Until you accept a new version in the dashboard, you won't be able to create API keys, request a Phone or use your Phone from the dashboard, although your Agent keeps working. If you keep using Thumb after a change takes effect, including through your Agent, the changed Terms apply to that use.
• Changes never apply to a dispute that arose before they took effect, and we will never introduce fees except as section 15 says.

23. Governing law and courts

• These Terms, and any dispute or claim arising from or relating to them or to Thumb, are governed by the laws of the State of Israel, without regard to its conflict-of-laws rules.
• The competent courts in Tel Aviv-Jaffa have exclusive jurisdiction, and you and GETRYK submit to them. However: (a) if you are an individual who lives in Israel, proceedings may also be brought in any other competent Israeli court that has jurisdiction by law; (b) either of us may ask any court with jurisdiction for urgent interim or injunctive relief, for example to stop abuse or to protect confidential information; and (c) if the law treats you as a consumer, nothing in these Terms takes away the protection of the mandatory laws of the country where you live, or any right you have by law to bring proceedings in the courts where you live.
• Disputes go to court. These Terms contain no arbitration clause and no class-action waiver.

24. General

• Entire agreement. These Terms, including the AUP, are the whole agreement between you and GETRYK about Thumb, and they replace anything discussed before.
• Severability. If a court finds part of these Terms unenforceable, that part applies as far as it is enforceable, and the rest stays in effect.
• No waiver. If we don't enforce a right straight away, we can still enforce it later.
• Assignment. You may not transfer these Terms without our written consent. GETRYK may transfer them only to a successor to the Thumb business (for example in a merger or a sale) that takes on our obligations under them. We will tell you in advance, and you may stop using Thumb if you object.
• Force majeure. Neither of us is liable for a failure or delay caused by events beyond reasonable control, such as carrier or network outages, power failures, failures of Third-Party Services, natural disasters, epidemics, war, hostilities, terrorism, emergency regulations or government orders. This doesn't excuse your obligations under the AUP or to pay any fees.
• Notices. We send notices to the email address on your account, and we may also show them in the dashboard. Send notices to us at hello@thumb.run; for a legal notice, put “Legal notice” in the subject.
• Language. These Terms are written in English, and the English version governs. Any translation is for convenience only.
• Relationship. You and GETRYK are independent parties. Nothing in these Terms makes either of us the other's partner, employee or legal agent.
• No third-party rights. Only you and GETRYK have rights under these Terms, except that GETRYK's directors, officers, employees and contractors may rely on sections 13, 18 and 19 as if those sections named them. This gives them no more protection than GETRYK has: what section 19 says we don't limit applies to them too.

25. Contact

GETRYK, Israel.

• Questions and legal notices: hello@thumb.run
• Reports of abuse: abuse@thumb.run

See also the Acceptable Use Policy, the Privacy Policy and the docs.