Acceptable Use Policy (AUP)

iBetterCoach Version: 1.0 Date: [to be defined]

⚠️ Notice: Document defining what is and is not allowed on the Platform. Requires legal review before publication.

1. Subject matter

This Acceptable Use Policy ("AUP") sets out the prohibited uses and rules of conduct that all users of the iBetterCoach Platform commit to respect.

The AUP forms an integral part of the Terms of Use. Any breach of this Policy may result in:

• Formal notification of the user
• Temporary account suspension
• Definitive account termination without refund
• Reporting to competent authorities
• Legal action and indemnity claims

2. General principles

By using the Platform, the user undertakes to:

• Act in good faith in all interactions
• Comply with the laws of Portugal, the European Union and the countries where they reside or operate
• Respect the rights of other users and third parties
• Respect the technical integrity of the Platform
• Act with professional ethics when serving as a Professional Customer in their relationship with Athletes

3. Prohibited uses

3.1 Unlawful or offensive content

It is expressly forbidden to upload, publish, share or transmit, through the Platform, content that:

• Is illegal or promotes illegal activities
• Constitutes child enticement, exploitation or abuse
• Is pornographic or sexually explicit
• Promotes violence, terrorism, hate speech, discrimination based on race, ethnicity, religion, gender, sexual orientation, gender identity, age, disability or any other protected characteristic
• Constitutes defamation, insult, slander or threats
• Infringes intellectual property rights, trademarks, trade secrets or third-party image rights
• Constitutes a breach of third-party privacy (sharing personal data without consent)

3.2 Misleading or fraudulent content

It is forbidden to:

• Create fake accounts or use a false identity
• Falsify professional credentials (titles, licences, specialisations)
• Pose as a professional without holding the legal qualifications
• Promote pyramid schemes, financial fraud, misleading multi-level marketing
• Disseminate medical, nutritional or training information that the user knows to be false, dangerous or scientifically unvalidated
• Appropriate generated prescriptions to commercialise them as one's own in other media without respecting professional and contractual obligations

3.3 Unauthorised practice

iBetterCoach is intended for professionals duly qualified under Portuguese law. It is forbidden to:

• Use the Platform to perform acts reserved to regulated professions (medicine, clinical nutrition, physiotherapy, etc.) without holding the relevant qualifications
• Act as a Personal Trainer without the TPTEF (Professional Title of Physical Exercise Technician) issued by IPDJ, where legally required in Portugal
• Act as a nutritionist without registration in the Order of Nutritionists
• Prescribe plans to people whose clinical conditions exceed the scope of the user's professional qualifications

3.4 Technical abuse

It is forbidden to:

• Perform reverse engineering, decompilation or attempts to extract source code
• Automated scraping of content, listings, exercise database, food database
• Bots or automated tools that generate traffic beyond normal human use
• Attacks of any kind: DoS, DDoS, brute force, SQL injection, XSS, CSRF, intrusive fuzzing
• Penetration testing without prior written authorisation from iBetterCoach (responsible disclosure is welcome via security@ibettercoach.com)
• Attempts to access accounts, data or areas that do not belong to the user
• Uploads of malware, viruses, trojans, ransomware, worms or malicious code of any kind
• Deliberate overload of systems (rate limit abuse, excessive requests)
• Bypassing security, authentication, billing or licensing mechanisms
• Falsifying technical identifiers (User-Agent, IP, HTTP headers) to deceive the system

3.5 Commercial abuse

It is forbidden to:

• Resell access to the Platform to third parties without a written reseller agreement with iBetterCoach
• Share account credentials with third parties not authorised as team members
• Use one account for multiple distinct professionals, bypassing per-seat licensing
• Create multiple accounts to avoid plan limits or promotional discounts
• Repeatedly use trials with different emails to avoid payment
• Use the Platform to directly compete with iBetterCoach (cloning, scraping to build a competing product)

3.6 Spam and unsolicited communications

It is forbidden to:

• Use the Platform's communication features to send spam
• Send mass unsolicited messages to Athletes or other users
• Practise phishing or social engineering
• Promote services or products outside the professional scope unrelated to the recipient Athlete

3.7 Breach of trust with the Athlete

The Professional Customer commits to:

• Respect professional secrecy and the deontological rules of their profession
• Never use the Athlete's health data for purposes outside the support relationship
• Never share Athlete data with third parties without express consent
• Never discriminate against Athletes based on any protected characteristic
• Ensure informed consent before any prescription

4. Reporting violations

If the user detects behaviour contrary to this AUP by another user, or security vulnerabilities, they must immediately report to:

• Conduct violations: abuse@ibettercoach.com
• Security vulnerabilities: security@ibettercoach.com
• Data protection violations: dpo@ibettercoach.com

iBetterCoach is grateful for all good-faith reports and protects the reporter's identity whenever possible.

5. Responsible Disclosure Policy

iBetterCoach encourages and thanks the security community for reporting vulnerabilities via security@ibettercoach.com. It commits to:

• Respond within 72 hours
• Take no legal action against researchers acting in good faith
• Give public credit to the researcher (with their authorisation)
• Fix critical vulnerabilities within reasonable deadlines

Research must respect the following:

• Do not access data not belonging to you
• Do not impair service operation
• Do not publicly disclose before iBetterCoach has fixed the issue (responsible disclosure)

6. Sanctions

Breach of the AUP may result in:

iBetterCoach may apply sanctions without prior notice in cases of imminent risk to the Platform, to third parties or to data integrity.

7. Cooperation with authorities

iBetterCoach cooperates with competent authorities (CNPD, PJ, Public Prosecutor, courts) whenever validly required by law, and may provide user data in strict compliance with judicial or legal orders.

8. Updates

This AUP may be updated to reflect new threats, new features or legislative changes. Substantial changes are communicated with 30 days' notice.

9. Contact

• General: general@ibettercoach.com
• Abuse: abuse@ibettercoach.com
• Security: security@ibettercoach.com
• DPO: dpo@ibettercoach.com

Document prepared for iBetterCoach. Requires formal legal review before publication.