Legal · English text prevails · all documents

Acceptable Use Policy

This policy forms part of the Terms of Service and of the Business Terms. It applies to every Vilkax surface: the website, the API, the desktop apps, the mobile apps, the browser extension, the VPN and DNS-filtering features, and the KIN, Guardianship and Hearth features. Capitalised words have the meaning given in the Terms.

Vilkax exists to protect people from fraud and abuse. The rules below are the ones that keep it from being turned into a tool for the opposite.

1. Use it for yourself, or with permission

You may use Vilkax to check messages, links, files, calls, wallets and websites that were sent to you, that you found, or that you are otherwise entitled to examine. You may not use it to examine another person's private communications, accounts, devices or whereabouts unless that person has agreed, or you have legal authority to do so, for example as the parent of a child below the age of digital consent.

In particular you may not:

• add a person to a KIN circle, share their location, or track their device without their knowledge and consent, or after they have withdrawn it;
• set up Guardianship over an adult who has not personally accepted it in the app, or keep it in place after they revoke it;
• use any feature to stalk, harass, intimidate, control or surveil a partner, family member, colleague or anyone else;
• install Vilkax on a device you do not own or administer, or on an employee's, tenant's or guest's device without the disclosure and consent the law of your country requires.

Covert monitoring of another adult is a criminal offence in most countries, including Spain and Lithuania. We cooperate with the authorities when it is reported to us.

2. No illegal or harmful use

You may not use Vilkax to do, plan, promote or conceal anything that is illegal where you are or where the affected person is, or to violate anyone's rights. Without limiting that, you may not use the service to:

• commit, facilitate or launder the proceeds of fraud, theft, extortion or any other crime;
• test whether your own scam, phishing kit, malware or fraudulent site evades detection;
• infringe copyright, trade marks, trade secrets, privacy or personality rights;
• create, store or share material that sexually exploits children, or that incites violence or hatred against a group of people;
• impersonate another person or organisation, including Vilkax and its staff.

3. Do not attack or overload the service

You may not:

• probe, scan or test the security of the service other than under the Vulnerability Disclosure Policy;
• circumvent authentication, rate limits, plan limits, consent gates or any other technical control;
• introduce malware, or interfere with the operation of the service or of another user's device;
• send automated requests to the public scan endpoints or the API beyond the documented limits, or scrape the service;
• resell, sublicense, rent or provide the service to third parties as a service of your own, except under a written agreement with us.

4. Software and intellectual property

You may not copy, modify, reverse engineer, decompile or disassemble the Vilkax software, or extract its threat-pattern lists, models or data sets, except to the extent Article 6 of Directive 2009/24/EC (or the equivalent provision of your national law) allows decompilation to achieve interoperability, or an open-source licence that accompanies a specific component allows it. You may not remove or obscure notices of ownership.

5. Accounts

One person, one account, with truthful details. Do not share credentials or transfer an account. You are responsible for what is done with your account until you tell us it has been compromised. If you are below the age of digital consent in your country (14 in Lithuania and in Spain), you may use Vilkax only with the consent of a parent or guardian.

6. API, business and integrations

Business customers and API users must also keep to the documented interfaces, the rate limits and the data-handling obligations in the Business Terms and the Data Processing Agreement. You may not use verdicts or scores to make a decision about a person that produces legal or similarly significant effects for them without the safeguards that Article 22 GDPR and the EU AI Act require, and you may not present a Vilkax verdict as a finding of fact about a named individual.

7. VPN, DNS filtering and the extension

The VPN and DNS-filtering features may be used only for lawful purposes and in accordance with the VPN and DNS Filtering Policy. You may not use them to hide unlawful activity, to attack other networks, to distribute malware or unsolicited bulk messages, or to evade a sanction or a court order. The browser extension may not be modified, repackaged or distributed by anyone other than us through the official stores.

8. Reporting abuse

If you believe someone is using Vilkax in breach of this policy, or you have received a threat or an abusive message through the service, write to legal@vilkax.com or use the report function in the app. If you are in immediate danger, contact the emergency services first: 112 anywhere in the European Union.

9. What we do when the rules are broken

Depending on the seriousness, we may warn you, remove content, limit or suspend features, suspend or terminate the account, and, where the law requires or allows, report the matter to the authorities and preserve evidence. For a serious breach, especially of sections 1 and 2, we may terminate immediately and without refund, as the Terms of Service describe. Where we act on a report about you, we tell you what we did and why, unless the law prevents us or telling you would put someone at risk, and you may ask us to review the decision by writing to legal@vilkax.com.

10. Changes

We may update this policy when features or the law change. Material changes are announced in the app and on the legal hub at least 30 days before they take effect, as the Terms of Service provide.

Last updated: 2026-09-06 · Version v1