Acceptable Use Policy

What you must not do with ProvenBatch, and what happens if you do.

Effective 5 September 2026

1. Purpose and scope

1.1 This Acceptable Use Policy (“AUP”) sets out what you must not do when using ProvenBatch, the service operated by Stella Apps, trading as ProvenBatch (“we”, “us”, “our”). It applies to every user of every Account, on every Plan, and is incorporated into our Terms of Service by reference. A serious or repeated breach of this AUP is a material breach of the Terms of Service and may lead to suspension or termination under clause 17 of those Terms.

1.2 This policy exists to keep the Service safe, lawful, and reliable for every food business that depends on it for a compliance record. Most of it is common sense; we would rather state it plainly than assume it.

2. Lawful use

You must not use the Service to do anything unlawful under the law of England and Wales, Scotland, or Northern Ireland (as applicable to you), or to help anyone else do so. This includes, without limitation, using the Service to:

  • produce a label, declaration, or record that you know to be false or misleading, for the purpose of misleading a regulator, an auditor, an environmental health officer, or your own customers;
  • process, store, or transmit personal data you are not lawfully entitled to hold (see clause 4);
  • infringe someone else’s intellectual property rights, including by uploading recipes, images, or text you do not have the right to use;
  • engage in fraud, including using the Service, or data produced by it, to misrepresent the provenance, allergen content, or origin of a product you sell.

3. Misuse of the Service and its systems

You must not:

3.1 attempt to gain unauthorised access to any part of the Service, another customer’s Account or data, or the systems that operate the Service, including by circumventing authentication, probing for vulnerabilities, or attempting to access another tenant’s data;

3.2 conduct security testing, penetration testing, or vulnerability scanning against the Service without our prior written permission — if you believe you have found a security issue, please report it responsibly to support@provenbatch.co.uk rather than testing it further;

3.3 interfere with or disrupt the integrity or performance of the Service, including by introducing malware, attempting a denial-of-service, or placing excessive automated load on the Service (including scripted or bulk use of any API or upload feature beyond ordinary use for a single food business);

3.4 attempt to reverse-engineer, decompile, or extract the source code of the Service, except to the extent applicable law makes such a restriction unenforceable;

3.5 use the Service, or any output of the Service (including generated Labels or exported data), to build, train, or improve a competing product or a competing AI model;

3.6 circumvent, or attempt to circumvent, the usage limits of your Plan — for example, by creating multiple Accounts to exceed a per-Plan limit on products, recipes, or users, where a single paid upgrade is what you actually need. If your Business has genuinely outgrown its Plan, talk to us at support@provenbatch.co.uk;

3.7 resell, sublicense, white-label, or provide the Service to third parties as your own product, except with our prior written agreement.

4. Misuse of photo, voice, and AI-assistant features

The Service includes features that read photographs of receipts, food packaging, and recipe pages, transcribe voice notes, and answer questions through an in-app assistant — some of which are processed by a third-party AI provider (see clause 7.4 of the Terms of Service and the Privacy Policy). When using these features you must not:

4.1 photograph, record, or upload anything other than your own business’s material — do not use these features to process documents, recordings, or conversations belonging to someone else without their consent, and do not deliberately record another person through the voice-note feature without their knowledge;

4.2 deliberately upload content, or send messages to the assistant, designed to manipulate, confuse, or “attack” the automated reading, allergen-detection, or assistant features (for example, attempting prompt injection against the AI provider, attempting to make the assistant act outside its documented, read-only tools, or uploading deliberately corrupted or adversarial images) other than for good-faith bug reporting to us first;

4.3 include in a photograph or a voice note any personal data beyond what is reasonably incidental to the record you are making (for example, do not deliberately photograph an unrelated third party’s ID document or personal correspondence and upload it to the Service, and do not dictate personal data a note does not reasonably need).

5. Content standards

Content you upload or enter into the Service — including ingredient names, supplier declarations, notes, and any free-text fields — must not:

  • be defamatory, obscene, or intended to harass or abuse another person, including our support staff or other customers;
  • contain another identifiable individual’s personal data unless you have a lawful basis to process it for your Business’s purposes (see clause 4 and the Data Processing Agreement);
  • knowingly misrepresent an allergen, ingredient, or supplier declaration.

6. Fair use

Plan limits (for example, the number of products, recipes, or users on a Plan) are published on our pricing page and are not a technical ceiling designed to be gamed — they describe the size of business each Plan is built for. We may treat use that is materially inconsistent with ordinary use of a Plan (for example, running what is clearly a much larger operation, or multiple unrelated businesses, on a single Starter Account) as a matter to discuss with you rather than an automatic breach — we will always talk to you first.

7. Reporting misuse or a security issue

If you believe another user is breaching this policy, or you have found a security vulnerability, tell us at support@provenbatch.co.uk. We take security reports seriously and will acknowledge them in line with our Complaints Procedure even where the report is not itself a complaint.

8. Consequences of breach

8.1 We may, depending on the severity of a breach: ask you to stop and remedy the behaviour; remove or disable the content or feature involved; suspend your Account, in whole or in part, under clause 17 of the Terms of Service; or terminate your Account for serious or repeated breaches.

8.2 Where suspected illegal activity is involved, we may report it to the relevant authority and cooperate with any resulting investigation.

8.3 Suspension or termination for breach of this AUP does not entitle you to a refund of fees already paid, save as required by law.

9. Changes to this policy

We may update this AUP from time to time, in the same way and under the same notice provisions as our Terms of Service (clause 19).

10. Contact

Stella Apps, trading as ProvenBatch support@provenbatch.co.uk