Acceptable Use Policy

Last updated: 29 September 2026

This Acceptable Use Policy sets out what you may not do with Lumy. It applies to everything you ask Lumy to make, every project you build, publish, download or distribute, every app and game made with Lumy and how it is used by its end users, and everything you do on the Service. It forms part of our Terms of Service. Words defined in the Terms have the same meaning here.

These rules apply whether a project is published or not, and whether content was written by you or generated for you. You are responsible for your projects and for how they are used. If you are unsure whether something is allowed, do not build it, or ask us first through /support.

1. Illegal content and activity

Do not use Lumy to create, host, promote or facilitate anything that is illegal where you are, where your users are, or in Israel or the United States, or that helps anyone else break the law. This includes fraud, trafficking, money laundering, terrorism financing, sanctions evasion and the sale of illegal goods or services.

2. Child safety: zero tolerance

• Never create, request, upload, share or link to any content that sexualises minors, depicts child sexual abuse, or grooms, exploits or endangers children. This includes drawn, animated, AI-generated and fictional content.
• We remove such content immediately, terminate every related account without notice or appeal, preserve evidence, and report it to the relevant authorities and child protection organisations, as the law requires.
• Do not build apps or games designed to contact, track or gather information about children, or to arrange meetings with them.

3. Sexual and adult content

Do not build or publish sexually explicit content, pornography, nudity for sexual purposes, sexual services, escort or "adult" dating services, or non-consensual intimate imagery of anyone, real or generated.

4. Violence, threats and dangerous acts

Do not build or publish content that:

• threatens, incites or glorifies violence against real people or groups;
• promotes, supports or recruits for terrorist or violent extremist organisations;
• gives instructions for making weapons, explosives or harmful substances, or for carrying out attacks;
• promotes dangerous challenges or acts likely to cause serious injury.

Cartoon and fantasy violence in games is allowed where it is clearly fictional and not aimed at real people.

5. Hate and harassment

Do not build or publish content that:

• attacks, dehumanises or promotes hatred or discrimination against people based on race, ethnicity, national origin, religion, caste, disability, sex, gender identity, sexual orientation, age, serious illness or any other protected characteristic;
• bullies, harasses, stalks, doxxes, shames or intimidates anyone;
• targets private individuals with mockery, including games or apps built around a real person without their consent.

6. Self-harm

Do not build or publish content that encourages, glorifies or instructs suicide, self-harm or eating disorders. Supportive and recovery-focused content is allowed.

7. Gambling, betting and prizes

Do not build or operate:

• real-money gambling, casinos, slots, poker for money, or games of chance where money or anything of monetary value can be won;
• sports betting, prediction markets for money, lotteries, raffles or sweepstakes, unless you are fully licensed and we have agreed in writing;
• loot boxes, gacha mechanics or random rewards that can be bought with real money and cashed out, traded or sold for money or items of real value;
• social casino or skill games that lead to real-money payouts.

Free games with in-game points that have no real-world value are allowed.

8. Regulated goods and services

Do not use Lumy to sell, broker or promote:

• weapons, firearms, ammunition, parts or accessories;
• illegal drugs, controlled substances, drug paraphernalia, or prescription medicines without a licence;
• tobacco, vaping, alcohol or cannabis products in breach of the law or to minors;
• counterfeit or stolen goods;
• human organs, body parts or any form of human trafficking or exploitation.

9. Scams, fraud and financial harm

Do not build or publish:

• scams, fake stores, fake charities, pyramid or Ponzi schemes, "get rich quick" or advance-fee schemes;
• fake investment, trading or crypto platforms, or unregistered securities offerings;
• fake reviews, fake ratings or schemes to manipulate reviews, rankings or votes;
• fake invoices, receipts, certificates, documents or records presented as genuine;
• checkouts that pretend to take real payments without a real, connected payment processor.

10. Phishing, credentials and security threats

Do not build or publish anything that:

• collects passwords, sign-in codes, card numbers, bank details, government ID numbers or other credentials under false pretences;
• imitates a sign-in, payment or account page of any organisation;
• contains or distributes malware, spyware, ransomware, viruses, exploit kits, keyloggers or other harmful code;
• mines cryptocurrency, uses visitors' devices without clear consent, or runs hidden background tasks;
• attacks, scans or exploits other systems, or sends denial-of-service traffic.

11. Impersonation, deception and clones

Do not:

• impersonate any person, company, brand, government body or Lumy itself, or falsely claim an affiliation;
• build "clones" of existing products, sites or games designed to confuse or deceive people into thinking they are the original, or that copy its name, logo, characters, art, text or trade dress;
• use another person's name, face, voice or likeness without their permission;
• present Output or a project as made by someone who did not make it.

References for inspiration are allowed as described in our AI Output, References and Similarity Policy.

12. Deceptive AI content and elections

Do not build or publish:

• deepfakes or synthetic images, audio or video of real people without their consent, or presented as real;
• AI-generated content designed to mislead people about facts, events or who made it;
• content or tools designed to mislead voters about when, where or how to vote, to suppress voting, to impersonate candidates or officials, or to interfere with elections or census processes;
• political campaign tools that break election or advertising law.

13. Professional services and advice

Do not present your project as providing medical, mental health, legal, financial, tax, investment, insurance or other professional services or advice, unless you are appropriately qualified and licensed, you comply with the law, and you show clear disclosures. Health or safety apps must not replace professional care and must tell users to seek professional help in an emergency.

14. Privacy and personal data

Do not:

• collect, store or use personal data without a lawful basis, a clear privacy notice and any consent the law requires;
• collect data from children without verified parental consent where the law requires it;
• use Lumy to collect card numbers, bank credentials, government ID numbers, passwords for other services, health records, biometric data or other sensitive data, unless we have agreed in writing;
• build tools for covert surveillance, stalking, tracking people's location without consent, facial recognition of private individuals, or monitoring partners, employees or others secretly;
• build people-search, data-broker or profiling tools that expose private information;
• publish other people's private information.

Photos and personal information you choose to upload. Lumy never asks for and does not encourage anyone to share private or personal information, including photos of people. Some features let you upload a photo so that a character or profile can be made from it. Whether to upload anything of that kind is solely your decision, given with your own consent and at your own responsibility. You are responsible for having the agreement of every person shown (for a child, their parent or guardian), and for the lawfulness of the upload. A photo used to make a character is sent once to the AI system for that step and is not stored, logged or reused by Lumy; only the resulting character is saved in your project. Lumy accepts no responsibility for personal information you choose to share.

15. Intellectual property

Do not upload, request, build or publish content that infringes or misappropriates anyone's copyright, trademark, design, patent, trade secret, publicity or other rights, including music, characters, logos, art, text, code and names you do not have the rights to use. See our Copyright, Trademark and Takedown Policy.

16. Spam and unwanted messages

Do not use Lumy, or apps built with it, to send unsolicited email, messages or notifications, bulk marketing, chain messages or deceptive invitations. App email is for transactional messages to signed-in users or the app owner only. Referral invites must go only to people you know, within the limits in our Referral Program Terms.

17. Abuse of Lumy

Do not:

• get around, disable or interfere with limits, caps, rate limits, allowances, early-access gates, token metering or billing;
• create multiple accounts, use fake identities or automate sign-ups to farm free tokens, referral rewards or allowances, or to evade a suspension;
• share, sell or rent accounts, early-access codes or tokens;
• use prompt injection, jailbreaks or adversarial inputs to extract our system instructions, prompts or kit, to bypass safety measures, or to attack other users or our systems;
• scrape, crawl or extract content, projects, prompts or the game kit by automated means;
• use Lumy or its Output to build or train a competing builder or AI model;
• probe or test our security outside our Security and Responsible Disclosure rules;
• overload the Service, run builds in automated loops, or use it in ways that degrade it for others;
• abuse reporting, appeal or support channels, including false or bad-faith reports.

18. Enforcement

We may investigate any suspected breach and take any action we consider appropriate, at our discretion and without notice where we judge it necessary. Actions include:

1. refusing or stopping a request or build;
2. removing or changing content, names or references;
3. warning you;
4. de-listing a project from Explore, restricting remixing, or disabling online features;
5. taking down a published project or disconnecting a custom domain;
6. limiting building, publishing, integrations or referrals, and withholding or removing rewards;
7. suspending your account;
8. terminating your account and any related accounts, with forfeiture of tokens under our Terms of Service;
9. reporting to law enforcement, regulators or rightsholders, and preserving evidence.

We decide which step fits the seriousness of the breach. Clearly harmful content, such as child safety issues, credible threats, scams, malware and phishing, is taken down first and reviewed afterwards. We do not have to follow the steps in order. We tell the owner why when we can.

19. Reporting and appeals

• Report a project or behaviour at /abuse. Harmful content reports are handled as fast as possible, any day.
• Someone in danger: contact local emergency services first, then report at /abuse.
• Appeals: if we took action on your project or account, you may appeal once per decision at /abuse. A different person reviews the appeal, and we aim to answer within 10 business days. Decisions after appeal are final.
• False, abusive or repeated bad-faith reports or appeals are themselves a breach of this policy.