Acceptable Use Policy

This Acceptable Use Policy sets out the rules for using the Babiha platform. It forms part of our Terms of Service and applies to every user of the Services.

1. General Principles

You must use the Services lawfully, professionally, and only for delivering and managing care. You are responsible for all activity under your account and for your Authorised Users' compliance with this policy.

2. You Must Not

• Use the Services for any unlawful, fraudulent or harmful purpose;
• Access, or attempt to access, data belonging to another agency or any account you are not authorised to use;
• Upload data you do not have a lawful basis or the necessary permissions to process;
• Introduce viruses, malware, or any code intended to disrupt, damage or gain unauthorised access to the Services or their data;
• Probe, scan, or test the vulnerability of the Services, or breach or circumvent security or authentication measures, except through our responsible disclosure process;
• Attempt to copy, reverse engineer, resell or provide the Services to third parties except as permitted by your Subscription;
• Use the Services to send unsolicited or unlawful communications, or store unlawful, defamatory or infringing content;
• Place an unreasonable load on the Services, or use automated means to access them in a way that disrupts other users.

3. Data Protection

You must handle service user and staff data in line with your obligations as a data controller and our Data Processing Agreement, including keeping login credentials secure and only granting access to those who need it.

4. Security Concerns

If you become aware of a security vulnerability or a suspected breach, please report it to security@babiha.care. Do not exploit it or access data beyond what is necessary to demonstrate the issue.

5. Enforcement

Personal messages and staff announcements must not contain harassment, bullying, threats, sexual abuse, hateful or discriminatory conduct, spam, or other unlawful or objectionable content. Accept the current rules before posting. A limited automated filter refuses explicit abusive phrases in messaging; care records are not filtered.

Use Report user, Report message or Report announcement to send a confidential report, and Block user to stop new personal messages in both directions. Authored announcements from blocked people are hidden. Reporting and blocking need an online confirmation; if an action fails, retry the same report or block action. Blocking cancels pending message alerts even after unblocking. Message history is retained, and alerts already dispatched cannot be recalled. Blocking never changes care assignments, records, account access, or essential system-generated care notifications.

Authorised agency leadership may review reports and dismiss them, restrict personal messaging or restore it. The reported person and reporter cannot access or decide the report. Where local leadership has a conflict, independently authorised Babiha platform support can handle it. Original report evidence and a confidential review history are retained for handling and accountability; they are not published to colleagues.

Reporting is not an emergency or safeguarding response. Telephone your agency's office and follow its safeguarding procedures for urgent care concerns; call 999 in immediate danger. For independent help, use our support contact.

If you breach this policy, we may suspend or restrict access, remove offending content, or terminate the Services in line with our Terms of Service, and we will cooperate with law enforcement where required. Where possible we will give notice and an opportunity to fix the issue first, but we may act immediately where there is a serious or ongoing risk.

6. Contact

Questions about this policy: legal@babiha.care.