Terms of Service

Effective date: September 30, 2026

These Terms of Service ("Terms") are an agreement between you and CuraeAI Inc., a Delaware corporation ("CuraeAI," "we," "us" or "our"). They govern your use of the CuraeAI personal health record service — our website at curaeai.com, the CuraeAI web application at app.curaeai.com, the Curae Connect screens you may see inside another app, and any related features we provide to you (together, the "Service").

You accept these Terms by ticking the box that says you agree to them when you create your account, when you connect your records through Curae Connect, when you finish setting up a full account, or when we ask you to review a new version. We record which version you accepted and when. If you do not agree, do not use the Service.

Please read Section 20 (Dispute Resolution) carefully. It requires you and CuraeAI to resolve most disputes through binding individual arbitration instead of in court, and it waives your right to a jury trial and to take part in a class action. You can opt out of arbitration within 30 days, as Section 20.10 explains.

CuraeAI is not a health-care provider and does not give medical advice. If you think you may have a medical emergency, call 911 or go to the nearest emergency room. See Section 5.

1. The documents that make up our agreement

1.1. These Terms work together with the following documents, each published at app.curaeai.com and each shown to you when you are asked to accept or sign it:

• the Privacy Policy, which explains how we collect, use, share and keep personal information;
• the Consumer Health Data Privacy Policy, which explains how we handle consumer health data under state consumer-health-data laws;
• the Consent to Collect Consumer Health Data, which you give as a separate act;
• the Sharing Authorization, which you sign each time you share information from your record, and which states what each share discloses, to whom and until when; and
• the AI Processing Disclosure, which explains which features use artificial intelligence and what they can and cannot do.

1.2. Where these Terms and the Privacy Policy or the Consumer Health Data Privacy Policy say different things about how we handle personal information, the privacy document controls.

1.3. If you build on our developer platform, API or SDK, the Developer Agreement governs that use instead of these Terms.

2. Where the Service is offered

2.1. We offer the Service in the United States only, to people who live in the United States. We have not made the Service available anywhere else, and these Terms are written for United States law.

2.2. Terms for people outside the United States are published as regional supplements to these Terms. A regional supplement adds to or replaces specific sections of these Terms for people in its region and controls where it conflicts with them. No regional supplement is in effect.

3. Who may use the Service

3.1. Adults only. You must be at least 18 years old to create an account or to use the Service. We check the date of birth you give us when you sign up at app.curaeai.com, and we do not connect any account, including one created through Curae Connect, to a health record whose date of birth shows, or may show, that the person is under 18. If a record we already connected later shows that the person is under 18, we disconnect it from the account, end every share and app access that reads it, delete it, and tell you in the Service and by email. The Service does not offer accounts for children or teenagers, and you may not use it to create or manage a record for anyone under 18.

3.2. Your own records. You may use the Service for your own health information. You may access another adult's information only when that person gives you access through the Service or when the Service records your legal authority to act for them (for example, a health-care power of attorney), and only within the access you are given.

3.3. Accurate information. You agree to give us accurate information about yourself, including your name and date of birth, and to use an email address that you control and check. You may hold only one account.

3.4. Eligibility. You may not use the Service if we have previously terminated your account for breaking these Terms, or if United States law prohibits you from receiving it.

4. What the Service does

4.1. The Service is a personal health record: a place where you can gather, organize, understand and share your own health information. Depending on the features available to you, you can:

• connect patient portals at health systems that support standard patient-access connections, so that your records are imported into the Service;
• upload documents and images, answer health questionnaires, and add information yourself, such as conditions and family health history;
• see your records organized in one place, together with calculated scores and, where available, summaries generated by artificial intelligence; and
• share selected information with people and apps you choose, for the period you choose.

4.2. Curae Connect accounts. Some apps let you connect your health records through Curae Connect. When you do, you see and accept these Terms and our other documents on a CuraeAI screen before anything is connected, and we create a CuraeAI account for you that the app can reach only as you authorize. That account is used through that app until you choose to finish setting up a full CuraeAI account, which you can then sign in to directly. Until then, you can stop sharing with the app at any time in one of two ways: open Curae Connect from the app and choose Manage sharing, then Stop sharing; or use the app's own control for stopping sharing, which we require every app to provide. In Manage sharing you can also see and download each authorization you signed and delete your account, which you confirm on that screen.

4.3. Information from others. The Service shows information as health systems, labs, apps and you provide it. We do not create your medical records, and we cannot guarantee that information from a source is complete, current or correct. If something in a record from a health system is wrong, ask that health system to correct it; corrections they make reach the Service the next time the records are imported.

5. The Service is not medical care

5.1. CuraeAI is not a health-care provider, and using the Service does not create a doctor-patient or other health-care relationship between you and CuraeAI.

5.2. Everything the Service shows you — including records, calculated scores, risk estimates, flags on results and summaries generated by artificial intelligence — is information to help you understand your health information and talk with your clinicians. It is not medical advice, a diagnosis or a treatment recommendation. Always ask a qualified clinician about your health, and never ignore professional advice or delay seeking it because of something you saw in the Service.

5.3. The Service is not an emergency or monitoring service. It may tell you when a result arrives that the reporting lab or clinician marked as critical, but it cannot guarantee that you are told, or told in time, and it is not watched by clinicians. If you think you may have a medical emergency, call 911 or go to the nearest emergency room.

5.4. Features that use artificial intelligence are described in the AI Processing Disclosure. Their output can be wrong or incomplete. Check it against your records and with your clinician before you rely on it.

6. Your account and how you sign in

6.1. Sign-in security. Any account that can see health information signs in with strong authentication:

• a passkey;
• a password plus a code from an authenticator app on your phone or computer; or
• a Google account you signed up with or linked, whose own security protects that sign-in.

A link or code we send to your email confirms your email address, confirms a request such as deleting your account, or helps you recover access to your account; it never signs you in by itself.

6.2. Keep your credentials safe. You are responsible for keeping your password, authenticator app, passkeys, any Google account you sign in with and your email account secure, and for activity in your account that results from your failure to do so. Tell us promptly at security@curaeai.com if you believe someone has used your account without permission, and don't include health information in your email.

6.3. Sessions. For your protection we end browser sessions after a period of inactivity and after a maximum length of time, and we ask you to sign in again before sensitive changes, such as changing your password or sign-in methods or signing you out of all your devices. To delete your account, you confirm by a link we email you; an account made through Curae Connect is deleted as Section 4.2 describes.

7. Your information

7.1. You own your content. As between you and CuraeAI, you keep all rights in the information and files you add to the Service or import into it ("Your Content").

7.2. Permission you give us. You give CuraeAI a limited, non-exclusive, royalty-free permission to host, store, copy, process, display and transmit Your Content only as needed to operate, secure and improve the Service for you, to carry out the sharing you direct, and to meet our legal obligations, all as the Privacy Policy and the Consumer Health Data Privacy Policy describe. This permission ends when Your Content is deleted from the Service, except for copies we are required or permitted to keep as those policies describe.

7.3. Information about other people. If you add information about another person — for example, a relative's health history — you confirm that you are allowed to share it with us for use in your record.

8. Sharing you direct

8.1. You choose. The Service shares your information only when you tell it to, in the ways the Service offers, such as:

• giving a person you have added as a contact access to the parts of your record you select, until the end date you choose (at most one year);
• showing information to someone with a share code: the one person who opens the code and confirms their email address can see what you chose, once, for up to 5 minutes, and the code stops working when you close the screen that shows it;
• sharing selected family health history with relatives who use the Service, until the end date you choose (at most one year); and
• authorizing an app, through Curae Connect, to read the kinds of information and the period of records you approve on the authorization screen, until the end date shown there (at most one year).

Each share is an authorization you sign by tapping the button that shares, under the Sharing Authorization. If you sign in to the Service, you can see, stop and download each one under Consents; Section 4.2 explains how to stop sharing from an account made through Curae Connect.

8.2. Your responsibility. You decide what to share and with whom. Before you share, check what the share includes and who can see it. A person or app you share with may keep a copy of what they saw or received; stopping a share ends access through the Service but cannot recall copies already made.

8.3. Apps. An app you connect is operated by its own developer under its own terms and privacy policy. We review each app before it can receive real health information and require its developer to protect the information and to delete it within 24 hours after you stop sharing with the app, but the developer — not CuraeAI — is responsible for how the app uses what it receives. When CuraeAI itself publishes an app, such as VibeCheck, CuraeAI is that app's developer, the app's own terms and privacy policy apply to it, and CuraeAI is responsible for how it uses what it receives.

9. Health systems and other third-party services

9.1. When you connect a patient portal, you sign in to that health system's own service and approve the connection there. The health system, its technology vendor and its portal are not part of the Service; their own terms apply, and we are not responsible for their availability, content or practices.

9.2. A health system keeps its own records of your care. Deleting information or your account in the Service does not delete the health system's records.

10. Acceptable use

You agree not to:

(a) use the Service for anyone else's records without the access or legal authority described in Section 3.2, or pretend to be someone else;

(b) share, upload or post information about another person without the right to do so;

(c) copy, scrape or harvest data from the Service, except your own records through the features we provide;

(d) interfere with, disrupt, probe, scan or test the vulnerability of the Service or any system or network connected to it, or get around any security, rate limit or access control;

(e) reverse engineer, decompile or disassemble the Service, except where the law expressly allows it despite this restriction;

(f) use the Service to build a competing product, or sell, resell, rent or sublicense access to it;

(g) upload malware or anything unlawful, infringing, defamatory or harassing;

(h) use the Service for any purpose that breaks the law, including laws on privacy, health information, discrimination and consumer protection; or

(i) help anyone else do any of these things.

11. Our property and your license

11.1. CuraeAI and its licensors own the Service, including its software, design, text, graphics and trademarks. Except for Your Content, nothing in these Terms transfers any of those rights to you.

11.2. Subject to these Terms, we give you a limited, personal, non-exclusive, non-transferable and revocable license to use the Service for your own personal, non-commercial purposes.

11.3. Feedback. If you send us ideas or suggestions about the Service, we may use them without restriction or payment to you. Please do not include health information in feedback.

12. Changes to the Service

12.1. We may add, change, suspend or stop features of the Service. If we stop the Service entirely, we give you at least 30 days' notice by email so you can save what you want, unless we must stop sooner for legal or security reasons.

12.2. We do not promise that the Service is always available, uninterrupted or error-free, and we do not offer a service-level commitment.

13. Fees

Using the Service does not cost anything today. If a feature has a price, the Service shows you the price, what you get and the payment terms before you buy, and you pay only for what you choose to buy. The payment terms shown when you buy form part of these Terms for that purchase.

14. Changes to these Terms

14.1. We may update these Terms. Each version is published with its effective date, and every earlier version remains available.

14.2. If we make a change that materially affects your rights, we tell you by email and in the Service at least 30 days before it takes effect, unless a shorter period is needed to comply with the law or to address a security risk. A change to Section 20 (Dispute Resolution) is handled as Section 20.12 describes.

14.3. When a new version takes effect, we ask you to review and accept it in the Service. Until you accept it, you can still read your records, withdraw consents, stop any share, stop an app's access, disconnect a health system, delete information and delete your account, but you cannot make other changes. If you do not agree to a new version, choose I Don't Agree; you can then delete your account: when you confirm by the link we email you, your access ends at once, and your health information is permanently deleted within 30 days of your request.

15. Electronic communications and notices

15.1. Consent to electronic communications. You agree that we may provide agreements, notices, disclosures and other communications to you electronically — by email to the address on your account and by notices in the Service — and that these satisfy any legal requirement that they be in writing. To receive them you need a device with an internet connection, a current web browser and access to your email account.

15.2. Email is how we contact you. By accepting these Terms, you choose email as the primary method by which CuraeAI communicates with you, including for any notice we must give you about a breach of the security of your health information. We send such a notice to your email address together with a notice inside the Service.

15.3. Copies and withdrawal. You can ask for a paper copy of any notice we sent you electronically, at no charge, by writing to privacy@curaeai.com. Because the Service is provided online only, you can withdraw your consent to electronic communications only by deleting your account.

15.4. Your email address. We send notices to the email address on your account, and a notice sent there is treated as received. If you lose access to that address, tell us at privacy@curaeai.com so that we can help you keep receiving notices.

15.5. Notices to CuraeAI. CuraeAI operates online and receives notices by email. Send any legal notice to privacy@curaeai.com.

15.6. Accounts made through Curae Connect. If your account was made through Curae Connect and you have not finished setting up a full account, we do not have your email address and you cannot sign in to the Service. We send any notice we owe you, including a notice of a breach of the security of your health information, to the app you used, which has agreed to deliver it to you on our behalf by email and inside the app; where the law requires it, we also post the notice on our website. Once you finish setting up a full account, Sections 15.2 and 15.4 apply.

16. Suspension and termination

16.1. By you. You can delete your account at any time in Settings, or by emailing privacy@curaeai.com from the email address on your account. Don't include health information in an email to us. We email you a link to confirm; when you confirm, you lose access at once, and your health information is permanently deleted within 30 days of your request. What deletion removes, and what we keep and why, is described in Section 9 of the Privacy Policy.

16.2. By us. We may suspend or end your access to the Service, with or without notice, if we reasonably believe that you have broken these Terms, that your account is being used without your permission, that continuing creates a risk to the security of the Service or to other people, or that the law requires it. Where it is safe and lawful to do so, we tell you why and give you a chance to save your information before we end your access.

16.3. What survives. Sections 5, 7.3, 8.2, 9.2, 11, 15 and 17 through 24 continue to apply after your account ends.

17. Disclaimers

17.1. THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE FULLEST EXTENT THE LAW ALLOWS, CURAEAI AND ITS LICENSORS AND SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT.

17.2. WITHOUT LIMITING SECTION 17.1, CURAEAI DOES NOT WARRANT THAT THE SERVICE IS UNINTERRUPTED, TIMELY, SECURE OR ERROR-FREE; THAT INFORMATION FROM HEALTH SYSTEMS, LABS, APPS OR OTHER SOURCES IS COMPLETE OR ACCURATE; OR THAT ANY SCORE, FLAG, ESTIMATE OR AI-GENERATED OUTPUT IS CORRECT OR SUITABLE FOR ANY HEALTH DECISION.

17.3. Some states do not allow the exclusion of implied warranties, so some of these exclusions may not apply to you. Where a warranty cannot be excluded, it is limited to 90 days from the date you first use the Service, to the extent the law allows.

18. Limitation of liability

18.1. TO THE FULLEST EXTENT THE LAW ALLOWS, CURAEAI AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS AND SUPPLIERS ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL OR DATA, ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS, WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE OR ANY OTHER THEORY, EVEN IF WE WERE TOLD THEY WERE POSSIBLE.

18.2. TO THE FULLEST EXTENT THE LAW ALLOWS, CURAEAI'S TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS IS LIMITED TO THE GREATER OF (A) US$100 AND (B) THE AMOUNT YOU PAID CURAEAI FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. MORE THAN ONE CLAIM DOES NOT ENLARGE THIS LIMIT.

18.3. Nothing in these Terms limits or excludes liability for death or personal injury caused by our negligence, for fraud, for gross negligence or willful misconduct, or for any other liability that the law does not allow to be limited or excluded. Some states do not allow the limitations in this Section 18, so they may not apply to you in full.

19. Indemnity

To the extent the law allows, you must defend, indemnify and hold harmless CuraeAI and its officers, directors, employees and agents from any claim, loss, liability or expense (including reasonable attorneys' fees) brought by a third party and arising out of (a) information you shared, uploaded or posted about another person without the right to do so, (b) your use of the Service in breach of Section 10, or (c) your violation of the law or of another person's rights. This Section does not apply to the extent the claim arises from CuraeAI's own breach of these Terms, negligence or misconduct. We tell you promptly about any claim for which we seek indemnity, and you may not settle it in a way that imposes an obligation on CuraeAI without our written consent.

20. Dispute Resolution

20.1. Agreement to arbitrate. You and CuraeAI agree that any dispute, claim or controversy arising out of or relating to these Terms or the Service, including its formation, interpretation and enforceability ("Dispute"), is resolved by binding individual arbitration and not in court, except as Sections 20.3 and 20.9 provide. This Section 20 is governed by the Federal Arbitration Act.

20.2. Try to resolve it first. Before starting an arbitration, the party with the Dispute must send the other a written notice about its own individual Dispute ("Dispute Notice"). Send a Dispute Notice to CuraeAI by email to privacy@curaeai.com with the subject line "Dispute Notice"; CuraeAI sends its Dispute Notice to the email address on your account. Your Dispute Notice must give your name, the email address on your account, a description of your Dispute and the relief you want, and it must be signed by you personally (a typed signature is enough); if a lawyer represents you, the lawyer signs it too. For 60 days after a Dispute Notice is received, we both try in good faith to resolve the Dispute, including in an individual telephone or video call that you and a CuraeAI representative attend personally, if either of us asks for one; your lawyer may join the call. Any time limit for bringing the claim is paused from the day the Dispute Notice is received until those 60 days end. Neither of us may start an arbitration before this Section 20.2 has been followed.

20.3. Small claims. Either of us may instead bring an individual claim in a small-claims court that has jurisdiction, for as long as the claim stays in that court and is not appealed or transferred, including by using the small-claims option in the rules named in Section 20.4.

20.4. The arbitration. The arbitration is administered by JAMS under its Comprehensive Arbitration Rules & Procedures (or, where those rules call for them, its Streamlined Arbitration Rules & Procedures) and its Consumer Arbitration Minimum Standards, each as in effect when the arbitration is filed and available at jamsadr.com, as modified by this Section 20. If JAMS is unable or declines to administer the arbitration, you and CuraeAI choose another arbitration administrator together; if we have not agreed on one within 30 days, a court with jurisdiction appoints the arbitrator under 9 U.S.C. § 5, and the arbitration proceeds under those JAMS rules as far as they can apply without JAMS. If JAMS declines the arbitration because CuraeAI has not paid a fee it owes, you may instead bring the claim in court under Section 22. A single arbitrator decides the Dispute. A claim for US$25,000 or less is decided on written submissions unless you ask for a hearing or the arbitrator decides one is needed. Any hearing takes place by video conference or, if you ask for it or the arbitrator decides an in-person hearing is needed, in the county where you live.

20.5. Costs. The only fee you pay is the consumer filing fee that JAMS's Consumer Arbitration Minimum Standards allow a consumer to be charged, and if JAMS or the arbitrator finds that you cannot afford that fee, CuraeAI pays it. CuraeAI pays every other administrative fee and all of the arbitrator's compensation, including when another administrator or a court-appointed arbitrator acts under Section 20.4. Each party bears its own attorneys' fees and costs, unless the arbitrator awards them under a law that allows it, or finds that a claim or defense was frivolous or brought for an improper purpose; the same standard applies to both of us.

20.6. The arbitrator's authority. The arbitrator may award any individual relief a court could award to an individual under the applicable law and these Terms, and must follow the law. The arbitrator decides all questions about the Dispute, except that a court decides (a) whether Section 20.7 is valid or enforceable, (b) whether Section 20.2 has been followed, and (c) any dispute about which version of this Section 20 applies. When JAMS's Mass Arbitration Procedures and Guidelines apply under Section 20.11, any arbitrator appointed under them decides the questions those procedures assign to that arbitrator. The award is final and binding, and judgment on it may be entered in any court with jurisdiction.

20.7. Individual claims only. YOU AND CURAEAI EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS, COLLECTIVE, CONSOLIDATED OR REPRESENTATIVE PROCEEDING. The arbitrator may not consolidate more than one person's claims and may award relief only in favor of the individual party seeking it and only to the extent needed to provide relief on that party's individual claim.

20.8. Jury trial waiver. YOU AND CURAEAI EACH WAIVE ANY RIGHT TO A JURY TRIAL for any Dispute, whether it is resolved in arbitration or, if this Section 20 does not apply, in court.

20.9. Claims that stay in court. Either of us may bring an action in court for an injunction to stop the infringement or misappropriation of intellectual property. If the law does not allow a claim for public injunctive relief to be arbitrated, that claim is brought in court, after the individual claims have been arbitrated, and the court proceedings on it are paused until the arbitration ends.

20.10. Your right to opt out. You can opt out of this Section 20 by emailing privacy@curaeai.com within 30 days after you first accept these Terms, with the subject line "Arbitration Opt-Out" and a message that gives your name and the email address on your account and says that you opt out of arbitration. Opting out does not affect any other part of these Terms, and it does not affect any earlier or later arbitration agreement between us.

20.11. Many similar claims. If demands for arbitration raising similar claims are filed against CuraeAI, or by CuraeAI, in a number and with the representation that make them a mass arbitration as JAMS's Mass Arbitration Procedures and Guidelines define it, you and CuraeAI agree that those procedures, and the fees they name, apply to those demands. Any time limit for bringing a claim is paused while its demand is pending under those procedures.

20.12. Changes to this Section. If we change this Section 20 after you accepted it, you may reject the change by emailing privacy@curaeai.com within 30 days after the change takes effect. If you reject it, the version of this Section 20 that you last accepted continues to apply to you.

20.13. Severability. If a court decides that any part of this Section 20 cannot be enforced as to a particular claim, that part is severed and the rest of Section 20 still applies, except that if Section 20.7 cannot be enforced as to a claim seeking class, collective or representative relief, that claim (and only that claim) is decided in court under Section 22.

21. Time limit for claims

To the extent the law allows, any claim arising out of or relating to these Terms or the Service must be brought within two years after the claim arises, or it is permanently barred. This Section does not apply where the law of your state does not allow the time to bring a claim to be shortened by agreement.

22. Governing law and courts

These Terms and any Dispute are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules, except that Section 20 is governed by the Federal Arbitration Act. This choice of law does not take away any protection you have under the consumer-protection or privacy laws of the state where you live that cannot be waived by agreement. For any Dispute that is not arbitrated, you and CuraeAI agree to the jurisdiction of the state and federal courts located in the State of Delaware, and you may instead bring it in the courts of the county where you live.

23. General terms

23.1. Entire agreement. These Terms and the documents listed in Section 1.1 are the entire agreement between you and CuraeAI about the Service and replace any earlier agreement about it.

23.2. Assignment. You may not transfer these Terms or your account. We may transfer these Terms in connection with a merger, acquisition, reorganization or sale of all or part of our business, but only to a party that agrees to be bound by them and by our Privacy Policy and Consumer Health Data Privacy Policy.

23.3. Severability and waiver. If any part of these Terms cannot be enforced, it is changed only as much as needed to make it enforceable, and the rest stays in effect. Our failure to enforce a part of these Terms is not a waiver of our right to enforce it later.

23.4. Events beyond our control. We are not responsible for delay or failure caused by events beyond our reasonable control, such as a failure of a cloud or internet provider, a natural disaster, war, terrorism, civil unrest, a labor action, or an act of government.

23.5. Export. You may not use or export the Service in violation of United States export control or sanctions laws.

23.6. Interpretation. Headings are for convenience only. "Including" means "including without limitation." No one other than you and CuraeAI has any rights under these Terms.

24. State-specific notices

24.1. New Jersey. If you live in New Jersey, Sections 17, 18, 19 and 21 apply only to the extent New Jersey law allows, and nothing in these Terms limits any right you have under New Jersey law that cannot be limited by agreement.

24.2. Your privacy rights under state law are described in the Privacy Policy and the Consumer Health Data Privacy Policy.

25. Contact

CuraeAI Inc. is a Delaware corporation that operates online. Write to us at privacy@curaeai.com for anything about these Terms, your account or your information, and at support@curaeai.com for help using the Service. Don't include health information in an email to us. To see, share or delete your records, sign in and use the Service.