Use Selv-a with care and respect.

ACCEPTABLE USE POLICY

Effective date: 2026-03-19 Last updated: 2026-04-19

Preamble: single-operator structure and no Data Protection Officer

Luminibus S.r.l.s. socio unico is a single-person company. The sole director and sole shareholder is the only natural person involved in operating the Service. No Data Protection Officer (DPO / RPD) has been designated, as none of the conditions of Article 37(1) GDPR are triggered at current scale; the internal memorandum recording this determination is available on request at privacy@selv-a.com. The privacy contact point is privacy@selv-a.com; the certified corporate email address (PEC) is luminibus@legalmail.it. Where this policy uses the first person plural (“we”, “us”, “our”), this is linguistic convention for readability and does not imply the existence of additional staff, a dedicated privacy team, a Data Protection Officer, or any third-party personnel beyond the Processors and AI Providers named in the relevant chapter.

1. Purpose

This Acceptable Use Policy explains what is allowed and prohibited when using Selv-a.

2. Scope

This Policy applies to all users and all use of the Service, including:

• submitting User Content
• using Outputs
• using sharing features (links, group comparisons)
• using paid features and trials
• interacting with safety systems

3. Definitions

Service: the Selv-a app and related features. User Content: anything you submit, including text, files, and other content. Outputs: content generated by the Service, including AI-generated content. High-stakes domains: decisions that can significantly affect a person’s rights, opportunities, or access to essential services (for example employment, credit, insurance, education, legal status, and health).

Terms defined in this Policy have the meaning assigned to them in the Terms and Conditions unless otherwise specified.

4. Core rules

4.1 Use the Service lawfully

You must comply with applicable laws and regulations.

4.2 Do not harm others

You must not use the Service to, without limitation:

• harass, threaten, or abuse others
• promote hate or incite violence
• generate, distribute, or promote child sexual abuse material (CSAM), or otherwise exploit, endanger, or sexually exploit minors
• produce, distribute, or promote terrorist content or violent extremism
• encourage self-harm
• share non-consensual intimate imagery or sexual content
• dox or publish personal data of others without a lawful basis
• distribute spam, phishing content, malware, or abusive automated messaging
• offer, promote, or facilitate illegal goods or services, including weapons, controlled substances, or stolen data
• infringe intellectual property rights or misappropriate another person’s likeness, voice, or identity

4.3 High-stakes restriction

You must not use the Service or Outputs to make, support, or substitute decisions in high-stakes contexts, including:

• employment, worker management, recruitment, or performance-evaluation decisions
• credit, banking, insurance, or financial-eligibility decisions
• education admissions, grading, evaluation, proctoring, or disciplinary decisions
• legal status, immigration, border control, law enforcement, judicial, or administrative-justice decisions
• medical diagnosis, treatment, clinical triage, or crisis intervention
• eligibility for essential public or private services, including social benefits, housing, utilities, or public healthcare
• biometric identification or categorisation of natural persons
• any automated decision-making that produces legal effects or similarly significant effects on a person within the meaning of Article 22 GDPR
• If you use Outputs in any context that could materially affect a person’s rights, opportunities, or access to essential services, you must obtain independent human and professional review before acting, and you remain solely responsible.

4.3-bis B2B and institutional-enrolment prohibition

The Service is offered to natural persons acting in their own personal capacity for self-directed wellbeing reflection only. You must not, and you must not enable a third party to:

• enrol, register, onboard, license, or grant Service access to employees, contractors, students, pupils, patients, members, insureds, beneficiaries, applicants, or any other category of persons on a collective or institutional basis
• procure, sponsor, or pay for Service access on behalf of an employer, school, university, training provider, healthcare or social-care provider, insurer, payer, public authority, religious or political organisation, sports body, or any other institutional principal
• aggregate, cross-reference, export, or transmit any User Content or Output to such an institutional principal
• use Outputs to inform any decision concerning the persons so enrolled, including recruitment, performance evaluation, academic standing, fitness for service or duty, health-status determination, insurance pricing or coverage, benefits eligibility, or any similar determination.
• This prohibition is independent of the §4.3 high-stakes restriction and applies regardless of any consent obtained from the enrolled individuals. Selv-a does not offer bulk, enterprise, education, or institutional licensing. Any account opened or used in breach of this clause may be suspended without notice and is not eligible for any pro-rated refund. This clause exists because emotion-recognition systems used in workplace and educational settings fall within Annex III of Regulation (EU) 2024/1689 (AI Act) and are categorically prohibited in those contexts under Article 5(1)(f) of that Regulation; Selv-a is not designed, evaluated, or authorised for those contexts.

4.4 No deception or impersonation

You must not:

• represent Outputs as professional advice (medical, psychological, legal, or financial)
• misrepresent AI-generated content as human-generated in a deceptive way
• impersonate a person or organization or falsely claim affiliation

4.5 Respect privacy

You must not:

• submit personal data about other people without permission or another lawful basis
• attempt to identify or re-identify individuals from shared content
• collect information about other users without consent

4.6 No abuse of the platform

You must not:

• scrape or harvest content at scale
• reverse engineer the Service, prompts, routing logic, or safety systems, except to the extent permitted by mandatory law as set out below
• bypass or evade safety controls
• probe for vulnerabilities or attempt unauthorized access
• use bots or automation to overload or disrupt the Service
• Mandatory carve-out. Nothing in this §4.6 limits the rights of study, observation, testing, and decompilation that are mandatorily granted by Articles 64-ter and 64-quater of Italian Law no. 633/1941 (Italian implementation of Articles 5 and 6 of Directive 2009/24/EC on the legal protection of computer programs), nor any equivalent mandatory provision of the user’s national law. Such rights remain subject to the conditions and limitations set out in those Articles, in particular the requirement that the resulting information be used solely for the purposes permitted by law and not be communicated to third parties save where necessary for those permitted purposes.

Security research must be coordinated through security@selv-a.com under a coordinated-disclosure protocol. Unauthorized testing of production systems is prohibited.

4.7 Comply with third-party AI provider rules

Selv-a may route requests to different AI providers. You must not use Selv-a in ways that violate the applicable content and usage rules of the AI provider powering the feature you use. You are responsible for reviewing and complying with, in particular:

• the Anthropic Usage Policy at https://www.anthropic.com/legal/aup; and
• the OpenAI Usage Policies at https://openai.com/policies/usage-policies/.
• The AI Notice (Chapter 2 thereof) lists which provider currently powers each Service feature. Provider routing may change; the controlling document is the AI Notice in force at the time of use.

5. Enforcement and statement of reasons

5.1 Enforcement actions. We may take actions including:

• removing or disabling access to specific Outputs or User Content
• limiting features (including sharing, group comparison, or AI-generated postcards)
• suspending or terminating the User Account
• restricting access to paid features or trials
• reporting serious abuse where required by law or necessary to protect users, the Service, or third parties.

We may use automated tools (including provider-side moderation classifiers and our own circuit-breaker logic) to detect potential violations. Significant enforcement actions that materially affect access to the Service (such as account suspension or termination) include human review by the sole director before taking effect, except where immediate action is needed to protect users, the Service, or third parties from imminent harm.

5.2 Statement of reasons (Article 17 DSA). Where Regulation (EU) 2022/2065 (Digital Services Act) applies and we restrict, suspend, or terminate your access to the Service or remove specific Outputs or User Content, we will provide you with a clear, specific, and contemporaneous statement of reasons including:

• (a) whether the action is removal, restriction of visibility, suspension, or termination, and its territorial and temporal scope
• (b) the facts and circumstances relied on, including, where relevant, whether the information relates to a notice submitted under Article 16 DSA
• (c) where applicable, the use of automated means in the detection of, or decision relating to, the contested information, and a meaningful description of the role of any human reviewer
• (d) the legal ground or contractual provision relied on, including a reference to the specific clause of these terms or this Policy
• (e) clear and user-friendly information about your right to redress, including the possibility of internal complaint to support@selv-a.com (response within 30 days), recourse to a certified out-of-court dispute settlement body under Article 21 DSA (the body designated for the time being is identified in Chapter 19 of the Terms and Conditions), and judicial redress before the competent courts.

5.3 Internal-complaint handling. Internal complaints under §5.2(e) are reviewed by the sole director within 30 days of receipt; an acknowledgement is sent within 5 business days. The outcome and a reasoned response are recorded and made available to the user.

6. Reporting

Report misuse or violations by emailing support@selv-a.com. The app also includes an in-app safety report for flagging problematic AI outputs directly from the screen where the output appears. Notices submitted under Article 16 DSA (illegal content) should follow the form available at https://selv-a.com/report-illegal-content (or, until that form is published, by email to support@selv-a.com referencing the illegal-content basis).

7. Contact

Support: support@selv-a.com