Acceptable Use Policy

Saphe Tech exists to help organisations keep accurate administrative records about allergies, dietary requirements, related documents and staff training. Use it for that, and for nothing else.

• Personal data you have no lawful basis or consent to hold.
• Health or other special category data about a person unrelated to your organisation's duty of care.
• Data about a child where the parent or carer has refused or withdrawn consent, unless another lawful basis genuinely applies.
• Content that is defamatory, discriminatory, harassing, obscene, or otherwise unlawful.
• Material that infringes anyone's intellectual property rights.
• Payment card numbers, national identifiers or credentials, which the platform is not designed to hold.

• Do not share your account or credentials with anyone, including colleagues.
• Do not view records you do not need for your role, even if a permission gap makes it technically possible.
• Do not export, screenshot, print or forward personal records except where your organisation's policy permits it.
• Report any suspected unauthorised access to your administrator and to us immediately.

• Probing, scanning or testing the security of the platform without our prior written permission.
• Attempting to bypass authentication, authorisation, rate limits or row-level access controls.
• Uploading malware, or any content designed to disrupt or damage systems or data.
• Scraping, bulk-extracting or reverse-engineering the platform, or reselling access to it.
• Using automated systems to place unreasonable load on the service.

Do not use the platform as an emergency alerting system, a substitute for a medical record, or the sole source of truth in an incident. It is not monitored around the clock and is not designed for those purposes. Always follow your organisation's emergency and first-aid procedures.

If you become aware of information in the platform that suggests a child is at risk, follow your organisation's safeguarding procedure immediately and escalate to your designated safeguarding lead. Do not rely on the platform to raise it for you.

We may investigate suspected breaches, and may suspend or remove access with or without notice where there is a risk to individuals, to data, or to the platform. Serious misuse may be reported to the Information Commissioner's Office, to a regulator, or to law enforcement.

Report suspected misuse or abuse to abuse@saphetech.com. Reports are treated confidentially.