Acceptable Use Policy

SealMyApp is operated by Richmond Capital Holdings Ltd, trading as SealMyApp. Registered in England and Wales, company number 17137348. Registered office: Halsey House, 18a Milner Street, London SW3 2PU. Contact: hello@sealmyapp.com.

This policy explains how you may use SealMyApp. It forms part of our Terms of Service; if anything here seems to conflict with the Terms, the Terms apply.

1. Only scan what you own or are authorised to test

• Only scan apps, and the backend services they use (such as a Supabase or Firebase project), that you own or that the owner has given you written permission to test.
• Proving control of a domain is not permission on its own. If the app or its backend belongs to someone else, you need their authority first.
• Don't scan on behalf of someone else unless they have authorised you to.

2. Don't get around our safeguards

• Don't try to bypass ownership verification, rate limits or the request budget a scan runs within.
• Don't use the scan API in an automated or bulk way, for example scripting it to scan many sites or running scans in a loop.

3. Don't use findings to access or exploit data

• Don't use anything SealMyApp reports to access, copy, change or exploit someone else's data.
• If you come across exposed data in an app you don't own, stop. Tell the owner privately and responsibly, and don't use SealMyApp (or anything else) to keep probing it.

4. Keep it legal

Don't use SealMyApp for anything unlawful, including under the Computer Misuse Act 1990, UK GDPR and the Data Protection Act 2018, or equivalent laws where you are.

5. Reports and the “Sealed” badge

• Our reports come from automated checks. Don't resell or present them as a manual security audit or penetration test without making clear they come from SealMyApp's automated scan.
• The “Sealed” badge means our latest automated scan found no critical or high issues. It is not a guarantee that an app is secure. Don't copy it, alter it, show it for an app it wasn't issued to, or describe it as more than it is.

6. Partners

If you promote SealMyApp through our partner programme, the partner terms on that page apply. In short:

• Always disclose that you are a partner and may earn a commission.
• No spam, including unsolicited bulk email, comment spam or messages to people who haven't asked to hear from you.
• No misleading claims. For example, don't say SealMyApp makes an app “guaranteed secure”.
• Don't bid on “SealMyApp” or close variations of it in search or social ads.

7. Reporting abuse

If you think someone is misusing SealMyApp, for example scanning your app without permission, email hello@sealmyapp.com with the details and we'll look into it.

8. Security

We welcome responsible disclosure of security issues in SealMyApp itself. Please email hello@sealmyapp.com with details and give us a reasonable time to fix the issue before sharing it publicly. We won't take legal or other action against good-faith research on sealmyapp.com that avoids harm to our users and their data, doesn't access or keep other people's data, and doesn't disrupt the service. Our contact details are also published in security.txt.

9. What we may do

If we believe this policy has been broken, or to protect our users or the apps we scan, we may:

• refuse, rate-limit or stop any scan;
• suspend or end your access, or end a partnership;
• cooperate with law enforcement and respond to lawful requests for information.

10. Changes

We may update this policy. We'll post the new version here with its date.