Terms of Use

1. What HomunculAI Is (And Isn't)

HomunculAI is a desktop application that gives a third-party AI agent — chosen and connected by you — a visual "body" it can control: a face, a form, colors, drawings, chat messages, and animations. HomunculAI does not provide the AI itself. You bring your own AI (for example Claude, ChatGPT, a local model, or another MCP-compatible agent). KrookedLilly does not operate, train, tune, moderate, or otherwise control the AI you connect. HomunculAI is a shell; the AI is the occupant.

2. License Grant

KrookedLilly grants you a personal, non-exclusive, non-transferable, revocable license to install and use HomunculAI on devices you own or control, for personal or internal business use, subject to these Terms. This license applies only to legitimate copies of HomunculAI obtained from an authorized distributor (see Section 10).

You may not redistribute, resell, sublicense, reverse engineer, decompile, disassemble, modify, or remove proprietary notices from the app, except where such restrictions are prohibited by law.

3. AI-Generated Content — No Endorsement, No Review, No Guarantee

Everything the avatar does — every word it says, image it draws, expression it shows, and message it sends — is generated by a third-party AI agent that you chose to connect. KrookedLilly does not review, endorse, verify, or guarantee any AI-generated content. AI agents generate responses by predicting patterns, not by understanding truth — they do not know whether what they say is correct. They can produce output that is false, misleading, offensive, biased, incoherent, unsafe, or simply wrong, including output that sounds confident and correct but isn't ("hallucinations"). You are solely responsible for how you interpret and act on anything the AI says or does in this app.

4. No Professional Advice

HomunculAI and any AI agent connected to it do not provide medical, legal, financial, tax, psychological, mental-health, safety, or emergency advice, and nothing produced inside the app should be treated as such. AI output is provided for entertainment, creative, and general-information purposes only. If you are experiencing a mental health crisis, please contact your local emergency services or, in the United States, the 988 Suicide and Crisis Lifeline (call or text 988). HomunculAI is not a therapist, companion, counselor, doctor, lawyer, or friend, and the avatar should not be treated as one.

5. What the AI Agent Can and Cannot Do Inside HomunculAI

HomunculAI includes a local Model Context Protocol (MCP) server. When you connect an AI agent and the agent calls inhabit, the agent is granted a narrow, fixed set of capabilities scoped to this application:

• It can set the avatar's body, face, colors, and accessories from a predefined catalog.
• It can play animations, effects, and emotes from a predefined catalog.
• It can send chat messages to you and read messages you send back. The AI agent only receives your chat messages when it explicitly requests them; HomunculAI does not push messages to the agent or maintain a continuous conversation loop. Depending on how your AI environment is configured, the agent may not read your messages in real time or at all. The agent's access to chat is scoped to its current session — when a new agent inhabits the avatar, it cannot read messages from any prior agent's session. Each session starts with a clean slate.
• It can, only after you explicitly verify the agent through an in-app prompt, draw custom SVG content inside the avatar window.
• It can read a small amount of context about the current session (for example, system idle time and session pause state) that HomunculAI chooses to expose.

HomunculAI does not grant the AI agent access to:

• Your file system, documents, photos, or any user data outside the app.
• Any shell, process, or system command on your computer.
• Any other application, browser tab, clipboard, camera, microphone, or peripheral.
• The network beyond the local loopback bridge that connects HomunculAI's own windows.
• Your API keys, credentials, or any AI-provider account.

You acknowledge that by connecting an AI agent, you are granting that agent the capabilities listed above and no others. By verifying an agent through the in-app verification prompt, you are granting that specific agent the additional ability to draw custom SVG content inside HomunculAI's avatar window. You can revoke either grant at any time by disconnecting the agent, closing the app, or un-verifying.

Custom graphics transparency. When a verified AI agent is rendering custom SVG content on the avatar, HomunculAI displays a visible transparency indicator in the avatar header so you can always tell which visuals were drawn by the AI agent and which are built-in HomunculAI UI.

Script enforcement. HomunculAI restricts the character scripts accepted in the AI agent's chat, say, think, and name fields based on your configured language setting. For example, if you select a Latin-script language (such as English, Spanish, or French), only Latin-based characters are accepted — blocking Cyrillic, CJK, Arabic, and other scripts you may not be able to read. This is a safety feature, not a content restriction — it ensures the agent communicates using characters you can physically read. However, languages that share the same script cannot be distinguished by character enforcement alone; for example, an agent could write in French while you have English selected, because both languages use Latin characters. HomunculAI restricts the script, not the language. Without this enforcement, a malicious or misaligned agent could communicate in a script you cannot parse at all, leaving you unable to monitor its behavior or evaluate its intent.

Safety layer limitations. HomunculAI includes multilingual detection for suspicious patterns — including impersonation, social engineering, credential phishing, prompt injection, and others — across multiple languages, scripts, and common attack encodings. This detection is pattern-based and is not exhaustive. Novel phrasing, synonyms, circumlocution, dialect variations, cross-message techniques, and attack methods not in the detection database can evade pattern matching. Detection coverage varies by language — some languages have broader pattern libraries than others. HomunculAI's safety layers are a best-effort aid to your judgment, not a replacement for it.

You are solely responsible for:

• Choosing which AI agent to connect and which to verify;
• Interpreting and acting on anything the AI agent says or does;
• Complying with the terms of service of your chosen AI provider;
• Monitoring agent activity via the in-app activity log and forensic audit trail;
• Using the session pause, vacate, and disconnect controls if an agent's behavior becomes unwanted.

When HomunculAI flags an agent action in the activity log, the flag indicates that a detector pattern matched — not that the AI agent has certainly done something wrong. You are responsible for reviewing flagged entries and using your own judgment about whether to dismiss, continue, pause, or vacate the session.

6. Your Responsibilities

You are responsible for:

• Choosing which AI to connect. Different providers have different capabilities, safety records, and data practices. Review theirs before connecting.
• AI provider costs. Using HomunculAI with an AI provider that charges by usage (tokens, API credits, or similar) consumes that provider's allowance at that provider's rates whenever an agent is active. Extended or continuous sessions can significantly increase usage. KrookedLilly does not receive, track, set, or manage these charges — they are solely between you and your AI provider.
• Verification decisions. HomunculAI includes safety layers (sanitization, rate limits, and a human-in-the-loop "verify" gate required before an agent can draw custom SVG). When you verify an agent, you are granting it expanded permissions; that decision, and anything the agent does with those permissions, is yours.
• Detection whitelist. HomunculAI allows you to whitelist specific words or phrases that would otherwise trigger safety flags. Whitelisted content is still recorded in the forensic audit trail — only the visual warnings in the activity log are suppressed. By adding entries to the whitelist, you accept full responsibility for any consequences of reducing detection sensitivity. KrookedLilly is not liable for actions that occur as a result of content you chose to whitelist.
• Your own conduct. Don't use HomunculAI to violate any law, infringe anyone's rights, harass anyone, generate illegal content, or circumvent the app's safety features.
• Sensitive information. Do not share passwords, API keys, financial account details, personal identifiers, or other sensitive credentials through HomunculAI's chat, say, or think channels. These channels are logged in the activity log, may be read by the AI agent you have connected, and are flagged when credential-like patterns are detected but not redacted. HomunculAI is not a secure messaging channel.
• Complying with applicable law in your country, state, and locality — including export controls, consumer-protection, and content laws.

HomunculAI is a creative and utility tool. It is not a companion, friend, therapist, emotional-support tool, or substitute for human relationships. Do not rely on the avatar or the AI agent for emotional support or in a crisis.

7. Local Data and Privacy

HomunculAI stores all data locally on your device. No avatar state, chat messages, activity logs, or forensic audit data is transmitted to KrookedLilly, to any third party, or to any cloud service by HomunculAI itself. Aside from a one-time license activation call and the manual update check described below, the only network connection HomunculAI makes is the local loopback bridge between its own windows on your computer.

HomunculAI maintains a local, tamper-evident audit trail of agent actions on your device. This log records metadata — timestamps, action types, character counts, and flag reasons — but does not record the content of chat messages, speech bubbles, or thought bubbles. The audit trail exists to protect both you and the AI agent by providing an independent record of what happened during a session.

License activation. HomunculAI requires a one-time license activation to verify your purchase. When you enter your license key on first launch, HomunculAI makes a single outbound network call to the activation service of the distributor you purchased through (currently Lemon Squeezy) to validate the key. Your license key and an anonymous instance identifier are transmitted to that service, processed according to the distributor's privacy policy, and used solely to verify that the key is valid and has not exceeded permitted activations. On successful activation, HomunculAI stores an encrypted activation token locally on your device; subsequent launches do not require network connectivity for activation. HomunculAI does not transmit any usage data, telemetry, activity logs, chat content, or avatar state at any time — before, during, or after activation. Free trial activation, if offered, is fully local and does not transmit any data.

Update checks. HomunculAI includes a manual update-check feature in Settings. When you click the update-check button, HomunculAI makes an outbound network call to KrookedLilly's release infrastructure to check whether a newer version of the app is available, and — if an update is available and you choose to install it — downloads the installer from that same infrastructure. Update checks and downloads occur only when you explicitly initiate them; HomunculAI does not check for or download updates automatically or in the background. The update check transmits your installed app version and standard HTTP request metadata (such as IP address and user agent string). It does not transmit your license key, your instance identifier, usage data, telemetry, activity logs, chat content, or avatar state.

Important: your connected AI provider is separate. HomunculAI itself does not transmit your data to any server or third party. However, the AI agent you connect to HomunculAI operates on its provider's infrastructure — for example, Anthropic's servers for Claude, OpenAI's servers for ChatGPT, or your own hardware for local models. When you use HomunculAI with a connected AI agent, the following data may be processed by your AI provider:

• Messages you send through HomunculAI's chat;
• Session context the agent requests (such as system idle time and session state);
• Your detection whitelist entries and their stated reasons, if the agent requests them.

This data is processed by your AI provider according to that provider's own privacy policy, data retention practices, and terms of service — not KrookedLilly's. Your relationship with your AI provider is between you and that provider; KrookedLilly is not a party to that relationship and has no control over, review of, or visibility into how your AI provider handles your data. By connecting an AI agent, you are directing your data through that provider's infrastructure.

Whether you connect a cloud-based or locally-running AI, HomunculAI itself does not transmit your data to any external service. However, any AI model — including those running locally on your hardware — may have its own network capabilities (such as internet access, telemetry, update mechanisms, or connections to external services) that operate independently of HomunculAI and that HomunculAI does not control. It is your responsibility to understand the network behavior of the AI you connect, to review your AI provider's privacy policy and terms of service before connecting, and to ensure that your use of AI services through HomunculAI complies with applicable law.

External AI capabilities. The AI agent you connect to HomunculAI may have capabilities beyond those granted by HomunculAI — including, depending on your AI environment, the ability to read files on your computer, browse the web, execute code, or access other applications and services. These capabilities are provided by your AI environment (for example, Claude Code, ChatGPT with plugins, or a local model with tool access), not by HomunculAI. HomunculAI does not grant, control, monitor, or have visibility into any capabilities your AI agent has outside of HomunculAI's own tools. Information the AI agent accesses through its own external capabilities may be transmitted to HomunculAI's chat or displayed on the avatar, and may thereby flow through the AI provider's infrastructure, even though HomunculAI itself did not access that information. KrookedLilly is not responsible for data the AI agent accesses, processes, or transmits using capabilities that exist outside of HomunculAI. You are responsible for understanding and managing the full capability set of any AI agent you connect, including capabilities that exist outside of HomunculAI.

Purchase and payment data. If you purchase HomunculAI directly from KrookedLilly, the transaction is handled by Lemon Squeezy (our Merchant of Record) or another authorized distributor as described in Section 10. KrookedLilly does not directly collect, store, or process your payment information. Your payment, billing, and contact information is handled by the distributor you purchased through, subject to that distributor's privacy policy.

Because all data stored by HomunculAI is local, KrookedLilly does not have access to your conversations, your activity logs, or any other data generated by your use of HomunculAI. KrookedLilly cannot recover, review, or produce this data in response to any request — it exists only on your device and is under your control.

8. Community-Created Content

HomunculAI may allow loading or sharing of community-created content (such as avatar packs, SVG art, or configurations). KrookedLilly does not create, review, endorse, or control community content and accepts no responsibility for it. You load community content at your own risk.

9. Intellectual Property and Authorized Copies

HomunculAI, including all software, artwork, documentation, trademarks, and associated materials, is the intellectual property of KrookedLilly and is protected by copyright, trademark, and other applicable laws. All rights not expressly granted to you under these Terms are reserved by KrookedLilly.

These Terms apply only to legitimate copies of HomunculAI obtained from an authorized distributor (see Section 10). If you obtained a copy of HomunculAI through any other means — including pirated copies, modified or repackaged builds, unofficial forks, or copies distributed outside an authorized distribution channel — you are not granted any license under these Terms, and KrookedLilly disclaims all responsibility for the behavior, safety, and security of that copy. Modified or repackaged copies may have had safety layers removed, added malicious code, or otherwise been altered in ways that change the product's behavior.

KrookedLilly reserves the right to take appropriate action, including technical and legal measures, against unauthorized distribution or modification of HomunculAI.

10. Distribution, Platforms, and Refunds

HomunculAI is distributed through one or more authorized channels. As of the effective date of this version, the authorized distributor is:

• Direct sales through Lemon Squeezy (KrookedLilly's Merchant of Record), via the KrookedLilly website or other KrookedLilly-operated storefronts.

KrookedLilly may add or remove authorized distributors from time to time without notice. When you purchase or obtain HomunculAI through a distributor, that distributor's terms of service, payment terms, and refund policy apply to the transaction itself in addition to these Terms. Where any distributor's mandatory terms conflict with these Terms, the distributor's terms control for the transaction.

Refunds. Refund requests are handled by the distributor you purchased from, not by KrookedLilly. For direct purchases through Lemon Squeezy, refunds are available per Lemon Squeezy's policy (currently a 14-day cooling-off window matching European Union consumer-protection standards); refund requests are submitted through Lemon Squeezy and processed by Lemon Squeezy, not by KrookedLilly. For purchases through any other authorized distributor, that distributor's refund policy controls.

11. Export Controls and Territorial Restrictions

HomunculAI is a software product subject to United States export control laws, including the Export Administration Regulations (EAR) and economic sanctions administered by the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC). By accepting these Terms and using HomunculAI, you represent and warrant that:

• You are not located in, under the control of, or a national or resident of any country or region that is subject to comprehensive U.S. economic sanctions, and you are not listed on any U.S. government list of prohibited or restricted parties;
• You will not export, re-export, transfer, or use HomunculAI in violation of U.S. export control laws or the sanctions or trade laws of any other applicable jurisdiction;
• You will comply with all local laws applicable to your use of HomunculAI, including AI-specific regulatory requirements in jurisdictions where such requirements apply to the deployment, operation, or use of artificial intelligence systems.

A current list of regions to which HomunculAI is not sold or supported is maintained in a separate document, which KrookedLilly may update from time to time to reflect changes in applicable law, distributor policy, or KrookedLilly's business decisions. If you are located in a restricted region, you are not authorized to purchase or use HomunculAI, and any copy you obtain is unlicensed (see Section 9). KrookedLilly's authorized distributor (Lemon Squeezy) enforces territorial restrictions at the point of sale through its compliance system.

12. AS-IS, No Warranty

HomunculAI is provided "as is" and "as available," with all faults and without warranty of any kind, express or implied. KrookedLilly disclaims all implied warranties — including merchantability, fitness for a particular purpose, accuracy, and non-infringement — to the maximum extent permitted by law. KrookedLilly does not warrant that the app will be error-free, uninterrupted, secure, or that AI-generated content will be accurate, safe, or appropriate. Some jurisdictions do not allow certain warranty disclaimers; in those jurisdictions, the warranties you have are limited to the minimum required by law.

13. Limitation of Liability

To the maximum extent permitted by law, KrookedLilly will not be liable for any indirect, incidental, consequential, special, exemplary, punitive, or emotional damages, or for any loss of data, loss of profits, loss of goodwill, or business interruption, arising out of or related to your use of HomunculAI or any AI-generated content it displays.

This includes, without limitation, damages arising from: (a) acting on advice, instructions, or information generated by an AI agent; (b) loss or corruption of files, chat history, activity logs, or avatar state; (c) your decision to verify or otherwise trust any particular AI agent; (d) the behavior of any third-party AI you connect; (e) loading community-created content; (f) your use of the detection whitelist to suppress safety warnings; and (g) your use of unauthorized, modified, or pirated copies of HomunculAI.

KrookedLilly's total aggregate liability for any claim arising out of or related to HomunculAI will not exceed the greater of (i) the amount you paid the authorized distributor for the app in the twelve months before the claim or (ii) USD $100. Some jurisdictions do not allow the exclusion or limitation of certain damages; in those jurisdictions, KrookedLilly's liability is limited to the minimum permitted by law.

14. Indemnification

You agree to defend, indemnify, and hold harmless KrookedLilly and its owners, contractors, and affiliates from any claim, demand, loss, or expense (including reasonable attorneys' fees) arising from (a) your misuse of HomunculAI, (b) your violation of these Terms or applicable law (including export-control or sanctions law), (c) your choice of AI agent or community content, (d) anything an AI agent does in your instance of the app as a result of your configuration or verification decisions, (e) your use of the detection whitelist to suppress safety warnings, or (f) your use of unauthorized, modified, or pirated copies of HomunculAI.

15. AI Transparency Notice

You are interacting with an AI system. The avatar's words, drawings, and expressions are machine-generated by a third-party model and are not communications from a human or from KrookedLilly. During extended sessions, HomunculAI periodically reminds you that the avatar is controlled by an AI agent, not a human. This notice and these periodic reminders are provided to help satisfy AI-transparency expectations under applicable law, including the EU AI Act where it applies and Washington State House Bill 2225 (effective January 1, 2027) regarding AI companion chatbot disclosures.

16. Updates to These Terms

KrookedLilly may update these Terms from time to time. Each version has a version number and effective date shown at the top. When a new version is released, HomunculAI will present the updated Terms on next launch and require you to accept them again before continuing use. If you reject the updated Terms, the app will close and you can uninstall it; continued use requires acceptance of the current version. Transactions completed before a Terms update are governed by the version in effect at the time of the transaction for matters relating to that transaction; all other use is governed by the current version.

17. Governing Law and Disputes

These Terms are governed by the laws of the State of Washington, USA, without regard to conflict-of-law rules. You and KrookedLilly agree that any dispute arising out of or related to HomunculAI or these Terms will be brought exclusively in the state or federal courts located in Spokane County, Washington (Spokane County Superior Court or the U.S. District Court for the Eastern District of Washington), and you consent to personal jurisdiction there.

18. General Provisions

Severability. If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be modified to the minimum extent necessary to make it enforceable, or if modification is not possible, severed from these Terms. The remaining provisions will remain in full force and effect.

Entire agreement. These Terms (together with any distributor's terms that apply to your transaction as described in Section 10) constitute the entire agreement between you and KrookedLilly regarding HomunculAI and supersede all prior or contemporaneous understandings, communications, or agreements on the subject.

No waiver. KrookedLilly's failure to enforce any right or provision of these Terms is not a waiver of that right or provision. No waiver is effective unless made in writing and signed by an authorized representative of KrookedLilly.

Assignment. You may not assign or transfer these Terms or any rights or licenses granted under them, by operation of law or otherwise, without KrookedLilly's prior written consent. KrookedLilly may assign these Terms, in whole or in part, without restriction — including in connection with a merger, acquisition, reorganization, or sale of assets. Any unauthorized assignment by you is void.

Force majeure. KrookedLilly is not liable for any failure or delay in performance caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, internet or infrastructure outages, government actions, or pandemics.

Notices. Notices to KrookedLilly under these Terms must be sent to support@krookedlilly.com. Notices to you may be provided by in-app message, by email to any address you have provided to an authorized distributor, or by posting on the KrookedLilly website.

Language. The authoritative version of these Terms is the English language version. Any translations are provided for convenience only; in the event of any inconsistency, the English version controls to the extent permitted by applicable law.

Headings. Section headings are for convenience only and do not affect the interpretation of these Terms.

Relationship. Nothing in these Terms creates any partnership, joint venture, employment, or agency relationship between you and KrookedLilly.

19. Contact

Questions about these Terms: support@krookedlilly.com

For refund requests, contact the distributor you purchased from (see Section 10).

For export-control or territorial-restriction questions, contact support@krookedlilly.com.