Acceptable Use Policy

1. Scope

This Acceptable Use Policy (“AUP”) applies to every user of ClearReport, including organization administrators, facility administrators, and workers. The customer organization is responsible for ensuring its users follow this AUP. Violations may result in suspension or termination of access; serious violations may be reported to law enforcement.

2. Prohibited uses

You may not use ClearReport to:

2.1 File knowingly false or fraudulent reports

• Falsify, fabricate, or omit material facts from an incident report
• Submit a report on behalf of a facility you are not authorized to act for
• Backdate or otherwise misrepresent the time of an incident or response
• Knowingly submit a report you understand to be inaccurate, with the intent to mislead a regulator or third party

2.2 Defeat security or access controls

• Attempt to access another customer organization's data
• Bypass, disable, or interfere with the role-based access controls or audit-log functions
• Circumvent authentication, including by sharing accounts or credentials
• Reverse-engineer, decompile, or attempt to derive source code or AI model weights
• Probe, scan, or test the vulnerability of the service except as part of a coordinated security research program with our written consent

2.3 Misuse the AI features

• Use the AI advisor (Ace) or the AI review for purposes outside California assisted living incident reporting
• Attempt to extract regulation text or stored facility criteria for republication outside the service
• Submit prompt-injection content designed to alter the AI's instructions
• Use AI output as legal advice or as a substitute for the judgment of a licensed professional

2.4 Violate law

• Use ClearReport in a way that violates HIPAA, CCPA, California Welfare and Institutions Code, the California Code of Regulations Title 22, or any other applicable law
• Use ClearReport to harass, threaten, or defame any individual
• Use ClearReport to distribute malware, spam, or other unwanted content

2.5 Resell or repurpose

• Resell, lease, sublicense, or white-label ClearReport without our written consent
• Use ClearReport to build a competing product
• Use ClearReport to provide services to facilities other than those covered by your subscription

2.6 Burden the service

• Exceed reasonable API rate limits, including AI request rate limits
• Initiate automated workflows designed to inflate usage metrics or quota
• Generate volume of report drafts in excess of what an actual facility would produce

3. PHI / PII handling

ClearReport stores resident, family, and reporter personal information that may include sensitive data under HIPAA, CCPA, or California elder-protection laws. Users must:

• Only enter information that is necessary for the regulatory report and authorized by your facility's policies
• Never paste full Social Security Numbers — SOC 341 stores only the last four digits, by design
• Never paste credit-card numbers, full medical-record numbers, or other unrelated PHI/PII into free-text fields
• Not download, screenshot, or redistribute Customer Data outside the scope of your authorized use

4. Service Provider data

ClearReport relies on third-party services (e.g. Anthropic, Stripe, Clerk, Supabase). You may not abuse those services through your use of ClearReport, including by triggering content that violates their policies (e.g. prompt-injection attacks on Anthropic's API).

5. Reporting violations

If you become aware of a violation of this AUP, report it to contact@skdaddle.com. We will investigate, take appropriate action, and respond to the reporter within five business days.

6. Enforcement

We may suspend or terminate access to a user, a facility, or an entire organization that violates this AUP. For serious or repeated violations, we may notify law enforcement or relevant regulators. Termination for AUP violation is governed by Section 13 of our Terms of Service.

7. Updates

We may update this AUP from time to time. Material changes will be announced through the application or by email to the organization administrator. Continued use after the effective date constitutes acceptance.