Acceptable Use Policy

Last updated: 16 May 2026

This Acceptable Use Policy ("AUP") describes what is and is not permitted when using the Tawaasal platform — the tawaasal.com website, the customer portal, the Tawaasal mobile applications for iOS and Android, and any related APIs (together, the "Service").

This AUP forms part of the Terms of Service between Ibdaa Ltd ("Ibdaa", "we", "us", "our") and the school or organisation that subscribes to the Service (the "School"). It applies to the School, to every individual the School authorises to use the Service ("User"), and to any content uploaded, sent, or generated through the Service ("Content").

If a User violates this AUP, the School is responsible for taking appropriate action — including disciplinary measures consistent with its safeguarding and code-of-conduct policies. We reserve the right to act independently as set out in section 7.

1. Lawful use

You must use the Service only for lawful purposes and in compliance with all applicable laws and regulations — including data protection law, intellectual property law, child protection law, and the laws of the jurisdiction in which the School operates.

2. Prohibited content

You must not use the Service to upload, send, store, link to, or distribute Content that:

• is illegal under the laws applicable to the School;
• sexually exploits, abuses, or endangers a child, or that constitutes child sexual abuse material (CSAM) under any applicable law;
• depicts or promotes violence, self-harm, suicide, or harm to others;
• harasses, bullies, intimidates, threatens, or defames any person;
• incites or promotes hatred, discrimination, or violence against any person or group on the basis of race, ethnicity, religion, nationality, gender, sexual orientation, disability, or any other protected characteristic;
• contains pornographic, obscene, or otherwise sexually explicit material;
• infringes any third party's intellectual property, privacy, publicity, or other rights;
• contains malware, viruses, ransomware, or any other code designed to disrupt, damage, or gain unauthorised access to a computer system;
• contains material that promotes illegal drugs, weapons, gambling, or other activities prohibited in the School's jurisdiction; or
• is designed to deceive — for example, phishing material, spoofed messages, or fraudulent content.

3. Prohibited behaviour

You must not:

• impersonate another person, including another User, a member of staff, a guardian, a student, or an Ibdaa employee;
• create accounts using false or misleading information, or share account credentials between Users;
• contact, harass, or attempt to befriend Users outside the context of their legitimate educational relationship;
• send unsolicited bulk messages, spam, or marketing communications through the Service;
• attempt to access Content, accounts, or systems you are not authorised to access — including Content belonging to other Schools;
• collect or harvest Personal Data from other Users for any purpose other than the legitimate educational use of the Service;
• use the Service to develop, train, or evaluate any artificial-intelligence model without our prior written consent; or
• engage in any conduct that, in our reasonable view, harms or threatens the safety, dignity, or wellbeing of any User — especially any child User.

4. Children's safety

Tawaasal is used by children. Conduct that endangers a child is treated with the highest priority.

In addition to the obligations elsewhere in this AUP, you must not:

• send sexual, romantic, or otherwise grooming-style communications to a child;
• request a child's personal contact details (address, phone number, social-media handle) outside the legitimate operation of the School;
• arrange private meetings with a child outside the School's safeguarding procedures; or
• share or solicit images of a child for any purpose other than legitimate educational record-keeping.

Suspected child safety incidents must be reported immediately under the School's safeguarding policy. They may also be reported to us at [email protected] so we can take action across the Service and, where required, notify the appropriate authorities.

Content that we reasonably believe to constitute child sexual abuse material will be removed without notice, preserved as required by law, and reported to the relevant law-enforcement authorities (including, in the United Kingdom, the National Crime Agency's CEOP Command).

5. Security and system integrity

You must not:

• probe, scan, or test the vulnerability of the Service, or attempt to defeat any security or authentication measure, except under a written authorisation from us (for example, a coordinated security disclosure programme);
• introduce malware or any other code intended to disrupt or damage the Service;
• attempt to gain unauthorised access to the Service, related systems, or other Schools' data;
• circumvent or attempt to circumvent rate limits, usage limits, or licence-key enforcement;
• reverse-engineer, decompile, or disassemble the Service, except to the extent expressly permitted by law;
• use automated means (bots, scrapers, crawlers) to access the Service, other than the published APIs used in accordance with their documentation; or
• interfere with another User's enjoyment of the Service.

If you discover a security vulnerability, please report it responsibly to [email protected]. We appreciate good-faith research and will not pursue legal action against researchers who follow standard coordinated-disclosure norms.

6. Fair use of resources

The Service is provided subject to the usage limits set out in your subscription plan. You must not:

• use the Service in a way that imposes a disproportionate load on our infrastructure or that degrades the experience of other customers;
• exceed published API rate limits except under an arrangement agreed with us in writing;
• store, transmit, or process data unrelated to the legitimate operation of the School (for example, using Tawaasal as a general-purpose file store or backup service); or
• attempt to circumvent storage, user, message, or other plan limits.

Where your usage is genuinely growing beyond your current plan, we will work with you to find an appropriate plan or arrangement.

7. Enforcement

We may take any of the following actions, with or without prior notice, if we reasonably believe that you or a User has violated this AUP or applicable law:

• request that the School investigate and remedy the issue;
• remove or restrict access to specific Content;
• suspend the account of the User concerned;
• suspend the School's access to the Service in whole or in part;
• terminate the Terms of Service in accordance with their termination provisions; and
• report the matter to the appropriate authorities.

Wherever practicable and consistent with our legal obligations, we will give the School notice and an opportunity to address the issue before taking action. For matters involving child safety, immediate threats to security, or legal compulsion, we may act first and notify afterwards.

The School remains responsible for the actions of its Users on the Service. Suspension or termination does not relieve the School of any fees due for the then-current paid term.

8. Reporting violations

To report a suspected violation of this AUP, please contact us at:

| | | |---|---| | Child safety concerns | [email protected] | | Abuse, harassment, or unlawful content | [email protected] | | Security issues | [email protected] | | All other matters | [email protected] |

Where the report concerns ongoing harm or an immediate risk to a person, please also notify the appropriate authorities (in the United Kingdom, the police on 999 in an emergency or 101 otherwise; or contact your local equivalent).

9. Changes to this policy

We may update this AUP from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email or in-portal notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated AUP.

10. Contact

| | | |---|---| | General enquiries | [email protected] | | Registered office | Ibdaa Ltd, 128 City Road, London, EC1V 2NX, United Kingdom | | Company number | 11658668 |