Acceptable Use Policy

1. Purpose & Scope

This Acceptable Use Policy sets out the standards of behaviour and permitted use that apply to everyone who interacts with the OurClub platform, including club administrators, members, visitors, and anyone using our mobile applications, application programming interfaces (APIs), or authorised integrations. By accessing or using any part of the service, you agree to comply with this policy.

This policy should be read alongside our Terms of Service, Privacy Policy, Data Processing Agreement, Safeguarding Policy, and Breach Procedure.

2. Prohibited Activities

You must not use the OurClub platform, through any interface (web, API, mobile app, or otherwise), to engage in any of the following:

• Uploading, sharing, or distributing illegal, harmful, abusive, obscene, or discriminatory content
• Harassment, bullying, or threatening behaviour towards other users via direct messages, community posts, comments, or any other platform functionality
• Sending unsolicited commercial messages (spam), mass-messaging members with content unrelated to club business, or promoting external products or services through direct messages or community posts
• Publishing another member's personal details (“doxing”), including home address, telephone numbers, workplace, date of birth, or other identifying information, in community posts, comments, or direct messages
• Sharing the contents of private direct messages or locked community posts outside the platform (including by screenshot) without the consent of all parties
• Fraud, money laundering, terrorist financing, sanctions evasion, or any other unauthorised commercial activity
• Payment abuse, including card testing, initiating chargebacks or disputes in bad faith, creating multiple accounts or tenancies to circumvent platform policies, or processing payments off-platform that should be on-platform in order to avoid platform fees
• Sharing credentials, tokens, or API keys with anyone else; selling, transferring, or operating an account on behalf of a third party; or operating more than one personal account
• Attempting to access other clubs' data, accounts, or systems; circumventing platform security measures; probing authentication, authorisation, or rate-limiting outside the scope of our Security Research terms (§9 below)
• Uploading malware, viruses, ransomware, or any other malicious code or files
• Scraping, crawling, bulk-extracting, or using automated tools to pull data from the platform beyond the scope of your own account, or using the API for purposes other than the legitimate operation of your own club
• Reverse engineering, decompiling, or creating unauthorised clients or mobile app distributions based on the platform
• Tampering with, modifying, or redistributing our mobile application binaries, or running the mobile app on a device whose security controls have been compromised (rooted or jailbroken) for the purpose of bypassing platform protections
• Using member personal data (including names, photos, messages, and grading records) to train machine-learning or artificial-intelligence models, or submitting it to third-party AI services for inference, without the explicit consent of the members concerned
• Submitting false or repeated reports through the in-app report function to suppress legitimate content or weaponise moderation against other users
• Impersonating other users, clubs, coaches, or organisations, or misrepresenting your affiliation with any club

3. Content Standards

All user-generated content on the platform (including posts, messages, club policies, event descriptions, uploaded documents, images, and video) must be accurate, lawful, and must not infringe the intellectual property rights or other rights of any third party. Image uploads must be content you own or have the right to use, and must comply with the consent requirements in our Safeguarding Policy where minors are depicted.

Some moderation decisions are informed by automated systems, such as profanity and safeguarding screening on direct messages as described in our Privacy Policy. OurClub reserves the right to remove content that violates these standards. Where content is removed, the affected user will be notified by email where practicable and may request human review via [email protected].

4. Protection of Minors

Many clubs on OurClub include members who are under 18. Everyone using the platform must take particular care to protect those members.

• Adult-to-minor direct messages must take place only in documented coaching or club contexts, and may be subject to audit by your club's safeguarding lead
• Photographs or videos of minors must not be posted to community features, uploaded as profile images, or shared in direct messages without the consent required by our Safeguarding Policy
• You must not solicit personal contact information (phone number, home address, social-media handles) from any member you reasonably believe to be a minor
• Clubs whose membership includes minors must designate a safeguarding lead, as set out in our Terms of Service and Safeguarding Policy

5. Club Administrator Responsibilities

Club administrators bear additional responsibility for the appropriate use of the platform within their club. Administrators must:

• Ensure all collection, use, and storage of member data complies with applicable data protection laws and the terms of our Data Processing Agreement, under which clubs act as data controllers for member data they collect
• Moderate content within their club and take prompt action against misuse by members, including responding to reports submitted via the in-app report function
• Comply with all applicable safeguarding obligations, including those set out in our Safeguarding Policy
• Cascade this Acceptable Use Policy to their members as a condition of joining the club, and enforce it against members who breach it
• Notify OurClub promptly (within 24 hours where possible) of any suspected data breach or security incident, following our Breach Procedure
• Ensure that any communications sent through the platform are lawful, appropriate, and relevant to club business
• Take responsibility for any third-party integrations they enable (for example, connecting an external marketing or analytics provider), including ensuring the downstream processor handles member data lawfully; OurClub is not liable for downstream use once data leaves the platform via an authorised integration

6. API & Integrations

OurClub exposes application programming interfaces (APIs) to support our mobile applications and authorised integrations. When you use the API, additional rules apply.

• Authentication tokens and API credentials are personal and non-transferable. Sharing, selling, or publishing credentials is a breach of this policy and may be a breach of your Terms of Service
• Reasonable-use rate limits apply to every API endpoint. You must not attempt to circumvent rate-limiting by rotating accounts, forging headers, or coordinating requests across credentials
• The API is provided to operate your own club lawfully. You must not use it to scrape, bulk export, or mirror data beyond the scope of your own account, nor to resell platform data to third parties
• Data extracted from OurClub via the API remains subject to applicable data-protection law, most notably UK GDPR. Clubs and members are responsible for handling extracted data lawfully once it leaves our systems
• We may rate-limit, suspend, or revoke tokens without notice where we reasonably suspect abuse. Significant abuse may lead to termination of the underlying account or tenancy

7. Mobile App Use

Our mobile applications are distributed through official app stores. Using the mobile app is subject to the same rules as the rest of the platform, plus the following:

• Install the mobile app only through supported distribution channels (the Apple App Store and Google Play Store). Sideloaded, modified, or repackaged builds are not supported and will not receive security updates
• Do not modify, repackage, or redistribute the mobile app binary. Reverse engineering the app to build an unauthorised client is prohibited
• Do not tamper with device-level security controls, push-notification throttling, or anti-fraud signals provided by the operating system in order to bypass platform protections
• Do not use automation frameworks, accessibility services, or input-simulation tools to drive the app without user presence, for example to auto-post content, auto-check-in members, or impersonate ordinary activity at scale

8. Moderation, Reporting & Appeals

If you become aware of content or behaviour that violates this policy, please report it via our in-app report function, our contact page, or by emailing [email protected]. We aim to review most reports within 72 hours, with safeguarding and safety-critical reports prioritised.

OurClub may use automated systems to assist with moderation, such as profanity and safeguarding screening of direct messages. Where an automated system materially affects your account or content (for example, by restricting, hiding, or removing a post), you may request human review by emailing [email protected] within 28 days. We will respond in writing with our final decision.

9. Security Research

We welcome good-faith security research. If you discover a vulnerability, we ask that you test only against your own account or tenancy, avoid accessing, modifying, or exfiltrating data belonging to other users, and report the issue promptly to [email protected] before public disclosure.

OurClub will not pursue legal action against researchers who comply with these terms in good faith. Disruption of the service, denial-of-service testing, social-engineering attacks against our staff or customers, and physical access attempts are excluded from this protection.

10. Consequences of Misuse

Where we identify a breach of this policy, we may take action proportionate to the severity of the violation. This may include:

• Issuing a formal warning to the user or club administrator
• Revoking API tokens or restricting API access
• Removing offending content, without prior notice in safety-critical cases
• Temporarily suspending access to the platform or specific features
• Permanently terminating the user's account or the club's tenancy
• Referring the matter to law enforcement, regulators, or the relevant national governing body where appropriate

OurClub reserves the right to suspend or terminate accounts immediately and without notice in cases of serious violations, including but not limited to illegal activity, safeguarding concerns, security threats, or persistent payment abuse.

11. Changes to This Policy

We may update this Acceptable Use Policy from time to time. We will notify users of material changes by posting a notice on the platform or by email. Your continued use of the service after changes are published constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

12. Contact

General questions about this Acceptable Use Policy should be sent to [email protected]. Security vulnerability reports should be sent to [email protected].