# pvtcoms — License & Additional Permissions

pvtcoms is licensed under the **GNU Affero General Public License, version 3 or (at your
option) any later version** (`AGPL-3.0-or-later`). The full, unmodified license text is in
[`LICENSE`](./LICENSE). The license itself is free — there is no fee to use, modify, or
redistribute pvtcoms (see [ADR-002](./docs/ADR/002-license-agpl-3.0.md)).

SPDX identifier for source files:

```
// SPDX-License-Identifier: AGPL-3.0-or-later
```

---

## Additional permission under AGPL-3.0 section 7 — App Store distribution

> This is an *additional permission* as allowed by section 7 of the GNU AGPL v3. It only
> **grants** rights; it does not restrict any rights granted by the AGPL. (Pattern adapted
> from Signal's app-store exception.)

As an additional permission under section 7 of the GNU Affero General Public License version 3,
the copyright holders of pvtcoms grant you the additional permission to convey the resulting
work through any application distribution platform — including, without limitation, the Apple
App Store, Google Play, and F-Droid — **even if that platform's terms of service impose
restrictions incompatible with the AGPL**, provided that:

1. you otherwise comply with the AGPL for the corresponding source code (i.e. you make the
   complete corresponding source available under the AGPL to the recipients of the binary), and
2. you do not impose any further restriction on the recipients' AGPL rights beyond those imposed
   by the distribution platform itself.

This permission lets honest forks ship pvtcoms on the Apple App Store and Google Play (whose
terms otherwise conflict with copyleft), and lets pvtcoms reuse other AGPL components (e.g.
Signal's SPQR) that carry the same exception. It does **not** waive any source-availability
obligation of the AGPL.

---

## Third-party / vendored code

Dependencies retain their own licenses. The combined work is distributed under AGPL-3.0-or-later
(which is inbound-compatible with MIT / Apache-2.0 / BSD / ISC / MPL-2.0 dependencies — see
[`deny.toml`](./deny.toml)). If pvtcoms ever vendors third-party AGPL code (e.g. SPQR / RingRTC),
that code's own App Store additional-permission grant must be verified before an iOS build is
distributed (tracked in the security review).

## Trademarks

The license above covers the **code**. The pvtcoms **name and logo** are governed separately by
[`TRADEMARK.md`](./TRADEMARK.md) — AGPL does not grant trademark rights.

## Copyright

Copyright © 2026 the pvtcoms contributors. (A named legal entity / foundation
will hold/steward copyright for distribution — TBD; see `BUILD_PLAN.md`.)