Third-Party & Open-Source Notices

Effective 2026-07-28 · Version 1.0

The Lonzo service (the "Service"), operated by Vista del Lago Software LLC, includes open-source and other third-party software components that are licensed to us under their own license terms. Those licenses — which include, among others, the MIT, BSD (2-clause and 3-clause), and Apache License, Version 2.0 — continue to govern the components they cover, and several of them require that we reproduce the applicable copyright and permission notices. This document collects those notices and attributions.

This document is referenced from, and supplements, the Terms of Use (§ 19.13) and the Copyright, DMCA & Trademark Policy (§ 7). Nothing in the Terms of Use or those policies limits any right you have under an applicable open-source license with respect to the component it covers; in the event of a conflict between those terms and an applicable open-source license as to that component, the open-source license controls for that component.

The components below are drawn from the software that ships as part of the Service, including:

  • the Android app (the Lonzo Android application and its bundled Gradle dependencies) — Android ships first;
  • the web shell (the browser-side JavaScript application and its bundled dependencies), including assets loaded at runtime from a public CDN; and
  • the native server components that ship with the Service and their compiled dependencies.

In-app "Open source licenses" screen (Android). As a Google Play convention, the Android app provides an in-app "Open source licenses" screen that reproduces these notices; the contents of that screen and this document are drawn from the same license scan and must be kept in sync.

This document is generated from a license scan of the shipped dependency trees (the Android Gradle dependency tree, the browser application's lockfile, and the Rust crates' Cargo.lock), and is regenerated whenever the shipped dependency set changes.

Components and Notices

The following components are reported by the license scan run 2026-07-12 against the shipped dependency trees. All distributed dependencies are under permissive licenses, with a single copyleft exception (tech.kwik:kwik, LGPL-3.0) addressed in its own section below; there are no GPL, AGPL, or MPL obligations in the distributed code.

Android app (Gradle dependencies)

ComponentLicenseCopyright / Notice
AndroidX librariesApache-2.0Copyright The Android Open Source Project. Preserve NOTICE-file contents (Apache-2.0 §4).
Jetpack ComposeApache-2.0Copyright The Android Open Source Project.
Material Components for AndroidApache-2.0Copyright The Android Open Source Project / Google LLC.
kotlinx-coroutinesApache-2.0Copyright JetBrains s.r.o. and contributors.
CoilApache-2.0Copyright Coil Contributors.
Chaquopy 15.0.1Apache-2.0Copyright Chaquo Ltd.
tech.kwik:kwik 0.10.10LGPL-3.0Copyright Peter Doornbosch and the Kwik contributors. Copyleft — see the LGPL-3.0 notice and obligations below.

Web shell (npm runtime dependency)

ComponentLicenseCopyright / Notice
morphdom 2.7.8MITCopyright (c) Patrick Steele-Idem. (vitest, jsdom, and coverage tooling are dev-only and not distributed.)

Web shell (assets loaded from public CDN at runtime)

ComponentLicenseCopyright / Notice
KaTeX 0.16.9MITCopyright (c) Khan Academy and other contributors.
highlight.js 11.9.0BSD-3-ClauseCopyright (c) Ivan Sagalaev and other contributors.
Mermaid 10MITCopyright (c) Knut Sveidqvist and contributors.

Rust workspace (362 external crates)

Component setLicenseCopyright / Notice
362 external crates (compiled dependencies)MIT / Apache-2.0 / BSD-3-Clause / ISC / Unicode-3.0 / Zlib / BSL-1.0 / CC0-1.0All permissive. Reproduce each crate's copyright + license text (MIT/BSD/ISC) and preserve Apache-2.0 NOTICE contents; the full per-crate list is generated by the scan tool into the shipped notices file.
r-efi (UEFI stub, triple-licensed)MIT / Apache-2.0 (elected) — LGPL option not electedCopyright the r-efi Authors. This crate offers an LGPL option; we elect MIT/Apache-2.0 and take on no LGPL obligation for it.

Full License Texts

The verbatim license texts below cover the components listed above, grouped by license. The per-component copyright lines are as reported by the scan (see the tables above); the auto-generated notices file shipped with each artifact (and the Android in-app "Open source licenses" screen) enumerates the full per-component copyright lines. Representative texts:

MIT License

Covers: morphdom 2.7.8; KaTeX 0.16.9; Mermaid 10; and the MIT-licensed Rust crates.

MIT License

Copyright (c) <year> <copyright holders>

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

BSD 3-Clause License

Covers: highlight.js 11.9.0; and the BSD-3-Clause-licensed Rust crates.

BSD 3-Clause License

Copyright (c) <year>, <copyright holder>
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this
   list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice,
   this list of conditions and the following disclaimer in the documentation
   and/or other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its contributors
   may be used to endorse or promote products derived from this software
   without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Apache License, Version 2.0

Covers: the AndroidX libraries, Jetpack Compose, Material Components for Android, kotlinx-coroutines, Coil, and Chaquopy 15.0.1 (Android); and the Apache-2.0-licensed Rust crates. For Apache-2.0 components, the contents of any NOTICE file distributed with the component are preserved and reproduced alongside this text in the shipped notices file / in-app licenses screen (Apache-2.0 §4).

                                 Apache License
                           Version 2.0, January 2004
                        http://www.apache.org/licenses/

   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

   1. Definitions.
      ... [the complete verbatim text of the Apache License, Version 2.0, is
      reproduced in full in the shipped notices file and the in-app "Open
      source licenses" screen; it is available at
      http://www.apache.org/licenses/LICENSE-2.0 ] ...

   Copyright <year> <copyright holder>

   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
   You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

   Unless required by applicable law or agreed to in writing, software
   distributed under the License is distributed on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.

The excerpt above is abridged for readability. The complete verbatim Apache-2.0 text, together with each component's NOTICE-file contents, is reproduced in the shipped notices file and in the Android in-app "Open source licenses" screen, and is available at www.apache.org/licenses/LICENSE-2.0.

Other permissive licenses (Rust workspace)

Rust crates also appear under ISC, Unicode-3.0, Zlib, Boost Software License 1.0 (BSL-1.0), and CC0-1.0. Each is permissive; the scan tool reproduces the required copyright and license text for each covered crate into the shipped notices file. r-efi is triple-licensed and we elect MIT/Apache-2.0 (its LGPL option is not elected).

GNU Lesser General Public License, Version 3.0 (LGPL-3.0) — tech.kwik:kwik 0.10.10

The Android app links against tech.kwik:kwik 0.10.10, which is licensed under the GNU Lesser General Public License, Version 3.0. This is a copyleft license and carries real obligations. To comply:

  • Source availability. The complete corresponding source code of tech.kwik:kwik 0.10.10 (as distributed to us, including any modifications we make) is made available. We provide it — or a written offer, valid for the period required by the license, to supply the source — through the in-app "Open source licenses" screen and at the Third-Party / OSS Notices URL. Kwik is upstream at its public repository; we distribute the corresponding source for the exact version we ship.
  • Relinking / reverse engineering for debugging. You may modify the tech.kwik:kwik library for your own use and relink it with the application, and you may reverse-engineer the application solely to debug such modifications, as permitted by LGPL-3.0.
  • Dynamically replaceable. We keep tech.kwik:kwik a dynamically replaceable dependency (a separate, replaceable library module — not statically fused into non-LGPL code) so that a user-modified version can be substituted, consistent with LGPL-3.0 §4.
  • License text. The full verbatim text of the GNU Lesser General Public License, Version 3.0 (which incorporates by reference the GNU General Public License, Version 3.0) is reproduced in the shipped notices file and the in-app "Open source licenses" screen, and is available at www.gnu.org/licenses/lgpl-3.0.html.
                   GNU LESSER GENERAL PUBLIC LICENSE
                       Version 3, 29 June 2007

 Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
 Everyone is permitted to copy and distribute verbatim copies
 of this license document, but changing it is not allowed.

  This version of the GNU Lesser General Public License incorporates
the terms and conditions of version 3 of the GNU General Public
License, supplemented by the additional permissions listed below.
      ... [the complete verbatim text of the GNU LGPL v3.0 and the GNU GPL
      v3.0 it incorporates is reproduced in full in the shipped notices file
      and the in-app "Open source licenses" screen; both are available at
      https://www.gnu.org/licenses/lgpl-3.0.html and
      https://www.gnu.org/licenses/gpl-3.0.html ] ...

The excerpt above is abridged for readability. The complete verbatim LGPL-3.0 and GPL-3.0 texts are reproduced in the shipped notices file and in the in-app "Open source licenses" screen, and are available at www.gnu.org/licenses/lgpl-3.0.html and www.gnu.org/licenses/gpl-3.0.html. The corresponding-source offer described above is available through the same in-app screen.

Lonzo own-code copyright

Except for the third-party components listed above (which remain governed by their own licenses), the Lonzo software is © 2026 Vista del Lago Software LLC All rights reserved.

Contact

Vista del Lago Software LLC 18381 Vista del Lago, Yorba Linda, CA 92886, USA Email: legal@lonzo.ai

All legal documents · Help · Lonzo home