Acceptable Use Policy

iBetterCoach Version: 1.2 Date: 27 July 2026

⚠️ Notice: Document defining what is and is not allowed on the Platform. Requires legal review before publication.

1. Subject matter

This Acceptable Use Policy ("AUP") sets out the prohibited uses and rules of conduct that all users of the iBetterCoach Platform commit to respect.

The AUP forms an integral part of the Terms of Use. Any breach of this Policy may result in:

• Formal notification of the user
• Temporary account suspension
• Definitive account termination without refund
• Reporting to competent authorities
• Legal action and indemnity claims

2. General principles

By using the Platform, the user undertakes to:

• Act in good faith in all interactions
• Comply with the laws of Portugal, the European Union and the countries where they reside or operate
• Respect the rights of other users and third parties
• Respect the technical integrity of the Platform
• Act with professional ethics when serving as a Professional Customer in their relationship with Athletes
• Comply with the Platform's age requirements (see section 2.1)

2.1 Age requirements and protection of minors

• The application is intended for Athletes aged 16 and over. It is forbidden to create an account or use the Platform under the age of 16.
• The submission of body photos is forbidden for minors under 18 and is subject to a technical block. It is forbidden to circumvent that block or to submit body photos of any person under 18.
• ⚠️ [to be confirmed by counsel] in the case of Athletes aged 16-17 and the processing of health data, it remains to be determined whether the data subject's own consent suffices or whether the consent of the holder of parental responsibility is required.

3. Prohibited uses

3.1 Unlawful or offensive content

It is expressly forbidden to upload, publish, share or transmit, through the Platform, content that:

• Is illegal or promotes illegal activities
• Constitutes child enticement, exploitation or abuse
• Is pornographic or sexually explicit
• Promotes violence, terrorism, hate speech, discrimination based on race, ethnicity, religion, gender, sexual orientation, gender identity, age, disability or any other protected characteristic
• Constitutes defamation, insult, slander or threats
• Infringes intellectual property rights, trademarks, trade secrets or third-party image rights
• Constitutes a breach of third-party privacy (sharing personal data without consent)

3.2 Misleading or fraudulent content

It is forbidden to:

• Create fake accounts or use a false identity
• Falsify professional credentials (titles, licences, specialisations)
• Pose as a professional without holding the legal qualifications
• Promote pyramid schemes, financial fraud, misleading multi-level marketing
• Disseminate medical, nutritional or training information that the user knows to be false, dangerous or scientifically unvalidated
• Appropriate generated prescriptions to commercialise them as one's own in other media without respecting professional and contractual obligations

3.3 Unauthorised practice

iBetterCoach is intended for professionals duly qualified under Portuguese law. It is forbidden to:

• Use the Platform to perform acts reserved to regulated professions (medicine, clinical nutrition, physiotherapy, etc.) without holding the relevant qualifications
• Act as a Personal Trainer without the TPTEF (professional title of physical exercise technician, issued by the IPDJ), where legally required in Portugal
• Act as a nutritionist without registration in the Order of Nutritionists
• Prescribe plans to people whose clinical conditions exceed the scope of the user's professional qualifications

3.4 Technical abuse

It is forbidden to:

• Perform reverse engineering, decompilation or attempts to extract source code
• Automated scraping of content, listings, exercise database, food database
• Bots or automated tools that generate traffic beyond normal human use
• Attacks of any kind: DoS, DDoS, brute force, SQL injection, XSS, CSRF, intrusive fuzzing
• Penetration testing without prior written authorisation from iBetterCoach (responsible disclosure is welcome via security@ibettercoach.com)
• Attempts to access accounts, data or areas that do not belong to the user
• Uploads of malware, viruses, trojans, ransomware, worms or malicious code of any kind
• Deliberate overload of systems (rate limit abuse, excessive requests)
• Bypassing security, authentication, billing or licensing mechanisms
• Falsifying technical identifiers (User-Agent, IP, HTTP headers) to deceive the system

3.5 Commercial abuse

It is forbidden to:

• Resell access to the Platform to third parties without a written reseller agreement with iBetterCoach
• Share account credentials with any third party; each team member must use their own access
• Use one account for multiple distinct professionals, bypassing per-seat licensing
• Create multiple accounts to avoid plan limits or promotional discounts
• Repeatedly use trials with different emails to avoid payment
• Use the Platform to directly compete with iBetterCoach (cloning, scraping to build a competing product)

3.6 Spam and unsolicited communications

It is forbidden to:

• Use the Platform's communication features to send spam
• Send mass unsolicited messages to Athletes or other users
• Practise phishing or social engineering
• Promote services or products outside the professional scope unrelated to the recipient Athlete

3.7 Breach of trust with the Athlete

The Professional Customer commits to:

• Respect professional secrecy and the deontological rules of their profession
• Never use the Athlete's health data for purposes outside the support relationship
• Never share Athlete data with third parties without express consent
• Never discriminate against Athletes based on any protected characteristic
• Ensure informed consent before any prescription

3.8 Gamification and incentivising harmful behaviour

The Platform includes metrics-display and gamification features intended to celebrate habits and adherence to the support relationship. These features do not incentivise effort beyond the limits of each Athlete and must not be used for that purpose. In particular, the Professional Customer is forbidden to use the Platform to:

• Encourage the Athlete to exceed the defined prescription (for example, messages such as "one more rep" or "one more kilometre" beyond the prescribed plan)
• Set goals or use gamification elements that promote effort, restriction or weight loss in a manner harmful to health
• Apply pressure on weight or body-composition metrics in a way that may foster risky behaviours
• Direct any incentive of this nature at minors

Gamification features must reinforce the Professional's prescription and never exceed it, with particular care in relation to weight/body metrics and to underage Athletes.

4. Reporting violations

If the user detects behaviour contrary to this AUP by another user, or security vulnerabilities, they must immediately report to:

• Conduct violations: abuse@ibettercoach.com
• Security vulnerabilities: security@ibettercoach.com
• Data protection violations: dpo@ibettercoach.com

iBetterCoach is grateful for all good-faith reports and protects the reporter's identity whenever possible.

5. Responsible Disclosure Policy

iBetterCoach encourages and thanks the security community for reporting vulnerabilities via security@ibettercoach.com. It commits to:

• Respond within 72 hours
• Take no legal action against researchers acting in good faith
• Give public credit to the researcher (with their authorisation)
• Fix critical vulnerabilities within reasonable deadlines

Research must respect the following:

• Do not access data not belonging to you
• Do not impair service operation
• Do not publicly disclose before iBetterCoach has fixed the issue (responsible disclosure)

6. Sanctions

Breach of the AUP may result in:

iBetterCoach may apply sanctions without prior notice in cases of imminent risk to the Platform, to third parties or to data integrity.

7. Data protection, health data and medical disclaimer

This AUP is complementary to the data protection obligations set out in the Privacy Policy and, where applicable, in the Data Processing Agreement (DPA). The references below are intended to frame the conduct required of users; the applicable legal regime is detailed in those documents.

7.1 Roles in data processing

(subject to qualification under legal review — see the section below)

⚠️ [UNDER LEGAL REVIEW] Qualification of the data controller

This point is being determined by legal advice and may alter the framing of several sections of this document. There are two possible readings of iBetterCoach's role: (a) Data processor of the Athlete's data, processed on behalf of the Professional (data controller), under the DPA; or (b) Data controller, possibly as a joint controller with the Professional (Art. 26 GDPR), given that iBetterCoach maintains a direct relationship with the Athlete (own account, acceptance of the Terms and consent provided directly to the Platform) and processes data for its own purposes (metrics/gamification, product improvement and security). The final determination will be reflected in this section, in the DPA document and in the consent flows. Pending validation by a lawyer specialising in GDPR.

7.2 Health data and wearables

The processing of health data (including the automatic synchronisation of wearable data from Apple Health / Health Connect) is subject to separate, specific, optional and freely revocable explicit consent at any time (Art. 7(3) GDPR), as detailed in the Privacy Policy. Any use of such data in breach of the declared purposes or without the applicable consent is forbidden (subject to qualification under legal review — see section 7.1).

7.3 Account deletion

Account deletion erases or anonymises the user's personal and health data, but retains what the law requires (in particular tax/accounting billing records and, possibly, clinical records that the healthcare professional has a duty to preserve — ⚠️ [to be confirmed by counsel]). The exact terms and periods are set out in the Privacy Policy. It is not correct to state that "everything is deleted": transparency as to what is erased and what is retained, and why, is provided at the moment of the action.

7.4 Medical disclaimer

The Platform is not a medical service, does not diagnose and does not replace medical advice. Calculations and information presented may contain errors and must be validated by the responsible professional. The user must consult a doctor whenever applicable. See the Medical Disclaimer document for the full regime.

8. Cooperation with authorities

iBetterCoach cooperates with competent authorities (CNPD, PJ, Public Prosecutor, courts) whenever validly required by law, and may provide user data in strict compliance with judicial or legal orders.

9. Updates

This AUP may be updated to reflect new threats, new features or legislative changes. Substantial changes are communicated with 30 days' notice.

10. Contact

• General: general@ibettercoach.com
• Abuse: abuse@ibettercoach.com
• Security: security@ibettercoach.com
• DPO: dpo@ibettercoach.com

Document prepared for iBetterCoach. Requires formal legal review before publication.