Acceptable Use and Account Enforcement Policy

Last updated: 16 September 2026 This policy forms part of the FaceCards Terms and Conditions. It sets rules for accounts, controller software, automated input, security, payments and enforcement. 1. Core rule Use FaceCards lawfully and in a way that does not harm people, compromise systems, evade commercial/security controls or expose us or others to unreasonable legal, safety, privacy or security risk. 2. Adult-only personal account • You must be at least 18 years old to create or use a FaceCards account. Do not share account credentials; • do not sell, rent or transfer an account; • do not use another person’s account without permission; • do not create multiple accounts to obtain repeated trials, extra device capacity or promotion benefits; and • do not create replacement accounts to evade suspension or enforcement. 3. Device and entitlement limits Do not alter installation identifiers, device records, tokens, receipts or local state to evade the active-device cap, extend a trial, create a false entitlement or reuse a refunded/revoked purchase. 4. Payment and promotion abuse • Do not use stolen or unauthorised payment methods; • do not submit fabricated refund evidence or fraudulent chargebacks; • do not exploit checkout errors or race conditions; • do not tamper with Apple/Google/Stripe receipts or transaction identifiers; • do not misuse promotion codes outside their stated conditions. A genuine billing dispute or lawful chargeback made in good faith is not prohibited. 5. Cybersecurity Without written permission, do not attempt to bypass authentication, access OWNER/admin routes, steal tokens, enumerate private user data, exploit race conditions, perform credential stuffing, deploy malware, interfere with availability, extract secrets or attack FaceCards infrastructure. Good-faith security reports are welcome through our contact route. Do not access more data than necessary to demonstrate a vulnerability, alter other users’ data or cause service disruption. 6. Reverse engineering and circumvention Do not circumvent licence, trial, device, update or security controls. Restrictions on reverse engineering apply only to the extent permitted by law; non-excludable rights for interoperability, security research or other lawful purposes remain unaffected. 7. Automated input misuse FaceCards is designed for deterministic user-configured control. Do not use it to automate fraud, spam, credential attacks, cheating, prohibited scraping, deceptive transactions, vote/rating manipulation, ticketing abuse, platform abuse or activity that violates applicable law or the target service’s binding rules. 8. Safety-critical and high-consequence systems Do not use FaceCards where accidental input could reasonably cause serious physical injury, clinical harm, dangerous machinery operation, emergency-system failure, unauthorised financial transfer, irreversible security changes or comparable high-consequence harm. 9. Third-party accounts and services You must have the right to interact with the target app, website or account. FaceCards does not give you permission to bypass a third party’s access controls, bot restrictions, examination controls, paywalls, licence rules or security measures. 10. Privacy and surveillance misuse Do not use FaceCards to secretly record, monitor, profile or control another person. Do not configure the product to collect or expose private information without lawful authority. FaceCards’ camera is intended to track the user operating the controller, not to surveil bystanders. 11. Harassment, abuse and unlawful conduct Do not use FaceCards as a tool to threaten, harass, stalk, impersonate, defraud or facilitate unlawful conduct. This applies even though FaceCards itself is not a messaging or public-content platform. 12. Excessive or disruptive use Do not generate deliberately excessive requests, pairing attempts, trial starts, download traffic or other workloads intended to degrade the service, evade rate limits or impose disproportionate infrastructure cost. 13. Security research reports Report suspected vulnerabilities to facecardssupport@gmail.com. Include enough detail to reproduce the issue. Do not include passwords, private keys or personal data belonging to another person unless strictly necessary and lawfully obtained. We do not promise a bounty or formal safe-harbour programme unless a separate written programme says so. 14. Enforcement principles We aim to act proportionately, considering seriousness, intent, actual/potential harm, repetition, prior warnings, account compromise, payment state, security risk and legal duties. We are not required to use every enforcement step in order. 15. Possible actions • guidance or warning; • rate limiting or feature restriction; • controller credential/device revocation; • forced sign-out or security verification; • temporary suspension; • termination/ban for serious or repeated breach; • preservation of limited records where lawfully needed; • refund/entitlement action where linked to a payment reversal; and • reporting or disclosure where required or permitted by law. 16. Appeals You may ask us to review a warning, suspension, ban or comparable enforcement action by contacting facecardssupport@gmail.com. Include the account email, the action being challenged, why you believe it is wrong or disproportionate and any relevant evidence. 17. No automatic refund for enforcement Lawful suspension or termination for breach does not create a contractual or discretionary refund right. This does not remove a refund or other remedy that applicable consumer law requires in the circumstances. 18. Changes We may update this policy as FaceCards and applicable security/platform requirements change. Material changes will be handled under the Terms.