Troi — Acceptable Use Policy

Draft pending attorney review. This is a usable, production-quality draft implementing Kanah LLC's founding legal decisions. It is not a substitute for sign-off by licensed counsel and must be reviewed before publication.

Summary (plain-language — not a substitute for the full policy)

• This policy lists what you may not do with Troi. It is part of your Terms of Service.
• Troi is a private personal tool and a trusted-team tool — not a social network. So this is about keeping your own use lawful and safe, not about policing a public community.
• The short version: don't use Troi for anything illegal, abusive, deceptive, or harmful — including child sexual abuse material, non-consensual intimate images, deepfakes of real people without consent, malware, spam, infringement, or attacks on systems.
• Many of these rules also come from the upstream providers we rely on (Apple, Google, Azure, Twilio, Anthropic, OpenAI, and others). Their rules flow down to you.
• If you break this policy, we can suspend or terminate your account, remove offending content, and — where the law requires — report certain material (for example child sexual abuse material) to the authorities.

1. Scope

This Acceptable Use Policy (the "AUP") applies to everyone who uses Troi (Troi Studio, Troi Life, and the Troi Runner), operated by Kanah LLC ("Kanah," "we," "us"). It is incorporated into and part of the Terms of Service. Terms defined there (such as "Your Content" and "AI Output") have the same meaning here.

Because Troi is a private, single-user tool (Troi Life) and a trusted, invited-team workspace (Troi Studio) — not a public or social platform — enforcement here means suspending accounts and removing content, not running a public moderation system. This policy still binds your own use.

2. Prohibited content and conduct

You must not use the Service, the Runner, or any AI feature to create, upload, store, generate, transmit, or publish any of the following, or to help anyone else do so.

2.1 Child safety

• Child sexual abuse material (CSAM) or any sexualized content involving minors, including AI-generated or computer-generated depictions.
• Grooming, sexual solicitation of minors, or any content that sexualizes a person under 18.

We prohibit this content absolutely. Where we obtain actual knowledge of apparent CSAM, we will report it to the National Center for Missing & Exploited Children (NCMEC) and cooperate with law enforcement as required by law.

2.2 Non-consensual and intimate content

• Non-consensual intimate imagery (NCII), including "revenge porn" and AI-generated intimate images of real people made or shared without consent.
• Sexual content involving a real, identifiable person created or distributed without that person's consent.

2.3 Impersonation, deepfakes, and synthetic media of real people

• Non-consensual voice cloning or synthetic voice of a real person without that person's clear consent.
• Deepfakes or synthetic images, audio, or video of real, identifiable people created or used to deceive, defraud, harass, or without a lawful basis and required disclosures.
• Election, political, or government deepfakes — synthetic media that misrepresents a candidate, official, party, or government, or that is designed to interfere with an election or mislead voters.
• Impersonation of any person, organization, or Kanah/Troi, or falsely suggesting affiliation or endorsement.

2.4 Violence, extremism, and dangerous goods

• Terrorist or violent-extremist content, or content that promotes, incites, or provides instructions for terrorism or mass violence.
• Content that incites, threatens, or glorifies violence against people.
• Facilitation of weapons (including firearms trafficking or the manufacture of weapons or explosives), controlled substances, or other illegal goods or services.

2.5 Harassment and abuse

• Harassment, bullying, threats, stalking, doxxing (publishing private information to harm someone), or hateful content targeting people based on protected characteristics.

2.6 Security, malware, and system abuse

• Creating or distributing malware, ransomware, spyware, or other malicious code.
• Using the Runner or AI features to attack, penetrate, disrupt, or gain unauthorized access to any system, network, account, or data — including hacking, credential theft, denial-of-service, or unauthorized vulnerability exploitation.
• Circumventing or attempting to circumvent the Service's security, access controls, rate limits, usage limits, or safety mechanisms.
• Probing or scanning systems you are not authorized to test.

2.7 Spam, deception, and fraud

• Spam or unsolicited bulk messaging (email, SMS, or other channels), or using connected messaging or social features to send bulk unsolicited communications in violation of anti-spam laws or a platform's rules.
• Phishing, scams, fraud, deceptive or misleading commercial practices, or fake engagement.

2.8 Intellectual property and data misuse

• Infringing anyone's copyright, trademark, patent, trade secret, or other rights, or publishing content you don't have the rights to.
• Scraping, crawling, or harvesting data from any service, website, or platform in violation of that service's terms or applicable law, or using the Service to do so.
• Violating anyone's privacy rights or entering third-party personal data without a lawful basis.

2.9 Illegal use generally

• Any use that violates applicable law, regulation, or a third party's rights.

2.10 Sanctions and export

• Any use by, for, or on behalf of a sanctioned or embargoed party, or from a comprehensively sanctioned jurisdiction (Cuba, Iran, North Korea, Syria, or the Crimea, Donetsk, or Luhansk regions), or that would breach US or other applicable sanctions or export-control laws (see the Terms of Service, sanctions and export section).

3. Regulated-advice misuse

Troi does not provide medical, mental-health, financial, tax, or legal advice, and its AI Output is information, not professional advice. You must not present AI Output as, or use the Service to provide, licensed professional advice or services you are not authorized to provide, or in a way that would constitute the unauthorized practice of medicine, law, or a regulated profession.

4. Upstream provider rules flow down to you

Troi is built on third-party platforms and providers, and many of the rules above come directly from them. When you use a feature that relies on a provider, that provider's acceptable-use and content rules also apply to you, and you must comply with them. This includes, for example:

• Apple and Google (app-store and platform policies, including rules on AI-generated content) when you build or publish apps;
• Microsoft Azure (our hosting and communications infrastructure);
• Twilio (SMS/messaging rules and anti-spam requirements) where messaging is enabled;
• Anthropic, OpenAI, and other AI and media providers (their usage policies and prohibited-use rules) when you use AI features; and
• any external platform you publish to (for example a social network), whose content and AI-disclosure rules apply to what you post there.

If an upstream provider prohibits something, you must not do it through Troi even if it isn't listed above. A provider's restrictions may require us to restrict or remove a feature or content.

5. Enforcement

If we believe you have violated this AUP, we may, at our discretion and as appropriate to the violation:

• remove, quarantine, or disable access to the offending content;
• issue a warning and ask you to fix the problem;
• suspend or terminate your account or specific features (immediately, without prior notice, for serious violations such as CSAM, NCII, security attacks, or sanctions issues); and
• where required or permitted by law, report the matter to law enforcement or the appropriate authority (for example reporting apparent CSAM to NCMEC), and preserve relevant records.

Because Troi is a private/team tool, enforcement is handled through account and workspace controls — suspension, removal, and (within a Studio team) an admin's ability to remove a member or revoke access — not through a public reporting or moderation system.

We may also be required to act on a valid legal process or a provider or rights-holder notice. Nothing here limits any other remedy available to us under the Terms of Service or the law.

6. Reporting a concern

If you believe content or activity on Troi violates this policy or the law, contact us:

• Copyright / DMCA notices: info@kanah.app (and see our DMCA page at /legal/dmca).
• Other legal or abuse reports: info@kanah.app.
• General contact: info@kanah.app · +1 (424) 291-5470.

7. Changes

We may update this AUP as the Service, our providers' rules, or the law change. Material changes are handled the same way as changes to the Terms of Service (versioned, with notice for material changes). This AUP is part of the Terms of Service; the Terms govern in the event of any conflict on a general point.

Kanah LLC · 1603 Capitol Avenue, Suite 413A, #2280, Cheyenne, WY 82001, Laramie County, USA Dedicated email aliases may forward to info@kanah.app.