Acceptable Use Policy

This policy is part of the Terms of Service and applies to everyone who uses Imaginess: the club that holds the account, its staff and coaches, and the families who register through it.

Most of what follows is ordinary. It is written down because Imaginess holds records about children - names, birthdates, allergies, medical notes, photographs and coaches' written observations - and a club deciding what is acceptable should not have to guess where we stand.

1. Use the data for the club's own purposes

• Look at a family's record because your role requires it, not because you are curious. Access is logged.
• Do not export member lists to sell, rent or share with anybody outside the club, and do not use them for marketing unrelated to the club.
• Do not use another person's account, and do not share your own sign-in. Ask an administrator for the access your role needs.

2. Children

• Photographs of an athlete whose family has withheld photo consent must not be published, and the product marks those athletes on every roster.
• Medical notes and allergies exist so that the person running a session can keep a child safe. They are not to be discussed outside that purpose.
• Written observations about an athlete should be the kind of thing you would be willing to read aloud to their guardian, because a guardian may request them.

3. Communications

• Club messaging and broadcasts are for club business. Do not use them for third-party advertising, political campaigning or chain messages.
• Canada's anti-spam legislation applies to what a club sends through us. Keep your consent records accurate and honour unsubscribes; the product records both.
• Harassment, threats, and abusive or discriminatory messages are not permitted anywhere in the product, including chat, comments and incident reports.

4. The platform itself

• Do not attempt to reach another organization's data, escalate your own permissions, or bypass a paywall, rate limit or approval step.
• Do not scrape, load-test, or run automated tooling against the service without our written agreement.
• Do not upload malware, or content you have no right to distribute.
• Do not use the built-in assistant to generate content that would breach this policy, and do not enter another person's sensitive information into it unnecessarily.

5. Reporting a problem

If you believe someone has misused the platform or mishandled a child's information, tell the club's administrator and write to support@imaginess.ai. If it concerns privacy specifically, write to privacy@imaginess.ai.

Security researchers are welcome. Report a vulnerability to support@imaginess.ai before disclosing it, do not access data belonging to real people while testing, and we will not pursue action against good-faith research that follows those two rules.

6. What we do about a breach

We would rather ask than act. Where a breach is serious, ongoing, or puts someone at risk, we may suspend an individual account or a club account without prior notice, and we will tell the club's owner why. Suspension for misuse does not entitle a club to a refund of fees already earned; see the Refund Policy.

We are also required to report certain matters, such as a privacy breach creating a real risk of significant harm, to the appropriate regulator and to the people affected.