RYPT Acceptable Use Policy

Last modified: 9th November, 2026 · Version 1.0

1. Who this applies to

1.1 This policy applies to everyone who uses RYPT: organisations and coaching businesses that hold a Gym (“Customers”), coaches and staff with Trainer accounts, athletes and clients with End User accounts, and people who buy Products. “You” means any of them.

1.2 It forms part of the Customer Terms of Use and the End User Terms. Customers are responsible for ensuring their Trainers and End Users follow it. Capitalised terms have the meanings given in those documents.

1.3 If you see something that breaks this policy, inform us by email (Section 9).

2. General principles

2.1 RYPT exists to help coaches develop athletes. Use it for that purpose, in a way that is lawful, safe and respectful of the people whose data passes through it.

2.2 You must comply with all laws that apply to your use, including data protection, consumer protection, intellectual property, and safeguarding rules that apply to your sport or organisation.

2.3 Where this policy and a more specific rule in the Customer Terms of Use, End User Terms or DPA conflict, the more specific rule applies.

3. Prohibited content

You must not upload, create, share or sell content through RYPT that:

1. is unlawful, or promotes or instructs unlawful activity;
2. is sexual, sexually suggestive or contains nudity, including in exercise videos, progress photos or profile images; this applies with no exceptions to any content involving a person under 18;
3. threatens, harasses, bullies, intimidates or defames any person, or is hateful or discriminatory on the basis of a protected characteristic;
4. promotes, supplies or instructs the use of substances or methods prohibited under the World Anti-Doping Code or the anti-doping rules of a relevant sport, or of unlicensed performance-enhancing drugs;
5. promotes disordered eating, extreme or unsafe weight loss, or training practices that a reasonable coach would consider dangerous for the athlete concerned;
6. makes medical claims (to diagnose, treat, cure or prevent a disease or condition) or presents coaching content as medical advice;
7. infringes another person’s copyright, trade mark or other rights, including exercise videos, programs, images or music you do not have the right to use;
8. contains another person’s personal data, image or likeness without a lawful basis to share it; for a person under 18, without the consent of a parent or guardian in addition;
9. is deliberately false or misleading, including false claims about qualifications, results or the effects of a program or Product;
10. contains malware, scripts or links intended to compromise any system; or
11. is unrelated to coaching and athletic development and is spam, advertising or solicitation.

4. Prohibited conduct

You must not:

1. use RYPT to send unsolicited marketing or bulk messages, or to contact people who have not agreed to be contacted, in breach of the ePrivacy rules or equivalent laws that apply to you;
2. impersonate any person or organisation, misrepresent your affiliation or qualifications, or create accounts using false information or on behalf of someone who has not authorised it;
3. share your login credentials or allow anyone else to use your account, or use another person’s account;
4. create multiple Gyms or accounts to avoid Plan limits, fees or an enforcement action;
5. use RYPT to collect, store or process data for any purpose other than coaching and athletic development of the people connected to your Gym;
6. harass, abuse or threaten RYPT staff or other users, including through support channels;
7. use RYPT in a way that is intended to, or does, bring RYPT into disrepute, including by using it as a vehicle for fraud, deception or unlawful conduct; or
8. encourage or assist anyone else to do any of the above.

5. Safeguarding and minors

5.1 Many athletes on RYPT are under 16. Customers that connect End Users under 16 to their Gym must have a safeguarding policy that meets the requirements of their sport’s governing body and national law, and must apply it to their use of RYPT.

5.2 Trainers must use RYPT’s messaging and comment features only for coaching purposes. Communications with an End User under 16 must be appropriate to a coach-athlete relationship, must not be used to arrange contact outside the coaching context, and must be conducted in a way the Customer’s safeguarding policy permits. Messages between Trainers and End Users are not private from the Customer: a Customer’s authorised administrator may request a record of messages sent through its Gym from RYPT for safeguarding, complaint or compliance purposes, and we will provide it on the Customer’s instruction under the DPA. Trainers and End Users should not expect messages sent through RYPT to be confidential from the Customer.

5.3 Customers must not connect an End User under the applicable digital age of consent without the verifiable consent of a parent or guardian, and must not collect health, body composition, nutrition or menstrual cycle data from a minor unless it is necessary for their coaching and the Customer has a lawful basis for it.

5.4 Photographs and videos of End Users under 16, including technique videos and progress photos, must only be captured and uploaded with the consent of a parent or guardian, and must not be shared beyond the Gym.

5.5 If we become aware of content or conduct that suggests a risk to a child, we may remove the content, suspend the account, notify the Customer’s safeguarding contact, and report to the relevant authorities. We will do so whether or not the person concerned is a user of RYPT.

6. Data and privacy

6.1 Customers and Trainers may only access, use and share End User Data for the coaching of that End User and for the Customer’s legitimate athlete-management purposes. You must not export End User Data for use outside the Gym, share it with third parties, or use it for marketing, unless you have a lawful basis to do so and the End User has been informed.

6.2 Trainers who leave a Customer’s organisation must not retain or take End User Data with them. Customers must remove a Trainer’s access promptly when they leave.

6.3 You must not upload data about people who are not connected to your Gym, except as needed to invite them.

6.4 You must not upload categories of data the Services are not designed for, including genetic data, biometric data used for identification, criminal records, or data about sexual orientation, religion, political opinion or trade union membership.

6.5 End Users control the data-sharing settings in their own profile where the Services provide them. Trainers must not pressure an End User to share data they have chosen not to share.

6.6 You must not attempt to re-identify any individual from aggregated or anonymised data RYPT provides.

7. Security and platform integrity

You must not:

1. probe, scan or test the vulnerability of RYPT, or breach or circumvent any security or authentication measure, except under a written security-testing agreement with us;
2. access RYPT other than through the interfaces we provide, or use bots, scrapers or automated tools to extract data or content, or send requests at a rate beyond what a person using the app could produce;
3. copy, download in bulk, resell or redistribute the exercise library, technique videos, templates or other RYPT Content outside the Services;
4. reverse-engineer, decompile or attempt to derive the source code of the Services;
5. interfere with the operation of RYPT, including by introducing malware, overloading our systems or disrupting other users;
6. access or attempt to access another Customer’s Gym or data; or
7. circumvent Plan limits, fees, Product access periods or any restriction we have placed on your account.

If you discover a security vulnerability, report it to [hello@rypt.app] and do not exploit it or disclose it publicly until we have had a reasonable opportunity to fix it.

8. Products and commercial use

8.1 Trainers may sell Products through RYPT only using the in-app sales feature and the Customer’s Stripe Connect account. You must not use RYPT to direct Purchasers to off-platform payment to avoid platform fees.

8.2 Product listings must describe accurately what the Purchaser will receive, the duration of access, and the Trainer’s qualifications. You must not make claims about results that you cannot substantiate.

8.3 Products must not promote or contain any content prohibited by Section 3, and must not be targeted at people under 16 unless the Customer has the safeguarding measures in Section 5 in place.

8.4 You must not use RYPT to advertise or sell goods or services other than Products, including supplements, equipment or third-party services, except within your own Gym to your own connected End Users where that is part of your coaching relationship with them.

8.5 You must not use RYPT, or data obtained through it, to build a competing product or service.

9. Reporting

9.1 Report content or conduct that breaks this policy by email to [hello@rypt.app]. Tell us what you saw, where, and when. We will acknowledge reports within two business days.

9.2 Report suspected security vulnerabilities to [hello@rypt.app] and suspected unauthorised access to your account to the same address.

9.3 Where a report concerns the safety of a child or an immediate risk to a person, contact the relevant authorities first, then us.

10. Enforcement

10.1 We may investigate any suspected breach of this policy. We may review content and account activity for that purpose, within the limits set by our Privacy Policy [https://www.rypt.app/privacy-policy and the DPA [https://www.rypt.app/data-protection-agreement].

10.2 Depending on the seriousness of the breach, we may: give a warning; remove or restrict content; restrict access to a feature, such as messaging or Product sales; suspend an account; terminate an account; withhold Product payouts to cover refunds or disputes; or notify the Customer, a governing body, a safeguarding authority or law enforcement.

10.3 We will normally give notice and an opportunity to fix the problem first. We may act immediately, without notice, where the breach creates a risk to a person, to the security of RYPT, or of legal liability for us, or where we are required to by law.

10.4 Where we suspend or terminate a Trainer or End User account for breach, we will tell the Customer. Suspension or termination of a Customer’s Gym is governed by the Customer Terms of Use [https://www.rypt.app/customer-terms-of-use].

10.5 If you believe we have taken action in error, contact us at [hello@rypt.app] within 14 days and we will review it.

11. Changes

We may update this policy from time to time. We will post the updated version at [https://www.rypt.app/acceptable-use-policy] and update the “Last modified” date. For material changes we will notify Customers by email or in-app notice at least 14 days before they take effect.