Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out what you may and may not do when using Money Tracker, operated by Arizu Studio ("we", "us", "our"). It forms part of our Terms and Conditions. It exists to keep the Service safe, fair and lawful for everyone, and to protect your data and ours.

1. Purpose and Scope

Money Tracker is a personal record-keeping tool for your own finances. It does not move money, hold funds or give financial, tax or legal advice. This AUP applies to the Android application, the public website, the receipt scanning feature, our application interfaces and everything else that makes up the Service, and to anyone who uses an account, whether the account is on the Free, Lite or Pro plan.

2. General Principle

Use the Service only for your own lawful personal record-keeping, in good faith, and in line with the Terms. You must follow all applicable Indonesian laws and regulations, including Law No. 11 of 2008 on Electronic Information and Transactions as amended, and the laws of the place where you use the Service. Where a use is not specifically listed here but harms the Service or others, it may still be treated as a breach.

3. Prohibited Conduct

3.1 Unlawful use and financial misuse

• Using the Service to commit, conceal, facilitate or keep records intended to disguise any unlawful activity, including fraud, money laundering, terrorism financing, tax evasion, corruption, illegal gambling or the sale of illegal goods or services.
• Creating false, misleading or fabricated records for the purpose of deceiving a third party, such as a lender, tax authority, employer or insurer, and presenting them as authentic statements of account.
• Presenting the Service as a bank, payment provider or financial institution, or representing its reports as official financial statements.

3.2 Receipt scanning and uploads

• Uploading anything other than a genuine receipt, invoice, payment slip or similar proof of a transaction for scanning.
• Uploading images that are illegal, obscene, exploitative, defamatory, hateful, infringing or that contain malware or hidden payloads.
• Uploading images that display sensitive personal data of other people, such as identity documents, full payment card numbers with security codes, passwords or health information, without a lawful reason. You must not use scanning to process other people's personal data without a legal basis to do so.
• Abusing AI scanning, for example by submitting automated, repeated or bulk requests, trying to manipulate or extract the instructions or behaviour of the AI system, attempting to use the feature as a general-purpose AI service, or submitting images designed to produce harmful or misleading output.

3.3 Circumventing limits, advertising or billing

• Bypassing, tampering with or automating daily scan quotas, plan limits, rewarded advertisements or confirmation tokens.
• Obtaining paid features without paying, for instance through modified apps, forged purchase data, replayed or shared purchase tokens, abuse of trial or refund processes, or fraudulent chargebacks.
• Using purchase information belonging to another person, or letting another person use a subscription that was purchased for you.

3.4 Accounts and identity

• Sharing, selling, renting, transferring or trading accounts or credentials, or accessing an account that is not yours.
• Impersonating any person or organisation, including our staff, or giving false information when registering or requesting support.
• Creating accounts to evade a suspension, block or limit, or using a blocked device.

3.5 Security and technical misuse

• Probing, scanning or testing the vulnerability of the Service, or bypassing authentication, authorisation or rate limits, other than through a good-faith disclosure under section 6.
• Accessing or attempting to access data that belongs to other users, or to our administration systems.
• Introducing viruses, malware or other harmful code, or interfering with the operation of the Service, for example through denial-of-service attacks or by overloading our servers.
• Reverse engineering, decompiling, disassembling or attempting to extract the source code of the application, except where the law expressly permits it despite this restriction.
• Scraping, crawling or harvesting data from the Service, or using bots, scripts or automation to access it, except through the application as we provide it.
• Removing or altering copyright, trademark or other notices, or using our name and brand in a misleading way.

3.6 Harm to others

• Harassing, threatening or abusing our staff or other people through the Service or support channels.
• Sending unsolicited communications, spam or phishing messages, or using our services to do so.
• Infringing the intellectual property, privacy or other rights of another person.

4. Optional Features

If you use automatic transaction capture, you are responsible for enabling it only on your own device and for notifications you have the right to read and record. Do not use it to monitor another person's device or communications. Your use of the AI receipt scanning feature is described in our AI & Receipt Scanning Notice.

5. How We Detect and Respond to Violations

5.1 Monitoring

We do not read your financial records. To protect the Service we monitor technical signals, such as scan volumes, sign-in activity, device information, IP addresses, security events and billing verification results. Where it is necessary to investigate suspected abuse of the scanning feature, authorised staff may view the stored result of a receipt scan; this access is limited and recorded in an audit log, as explained in the Privacy Policy.

5.2 Enforcement steps

We apply a proportionate response that depends on the seriousness, intent, frequency and impact of the violation. We may use any of the following steps, and we are not required to follow them in order where the conduct is serious or urgent.

1. Warning: a message in the app or by email explaining the issue and asking you to stop.
2. Quota or feature limit: reducing or pausing your scan allowance or other features.
3. Suspension: temporarily suspending the account, with the reason shown to you in the app.
4. Device block: blocking a device from signing in or using the Service.
5. Termination: permanently closing the account, as described in the Close Account Policy.

In addition, we may remove or refuse content, revoke paid access that was obtained improperly, notify the relevant third party such as Google, and report unlawful conduct to the authorities or cooperate with them when we are legally required to or when it is necessary to protect others.

5.3 Your opportunity to respond

Where practicable, we will explain the reason for an action and consider your explanation. If you believe we made a mistake, email arizu.team@gmail.com with your account email and a description of the situation, and we will review it and reply within a reasonable time.

5.4 No refunds for violations

If we suspend or terminate your account, or block a device, because of a violation of this AUP or the Terms, you are not entitled to a refund of any amount already paid, as stated in the Refund Policy. Cancelling the Google Play subscription remains your responsibility.

6. Reporting Violations and Security Issues

If you see a violation of this AUP, or believe an account is being misused, please tell us at arizu.team@gmail.com. For a suspected security vulnerability, please email arizu.team@gmail.com with enough detail to let us reproduce it. We ask that you:

• act in good faith and avoid accessing, modifying or deleting data that is not yours;
• not disrupt the Service or test with automated tools that generate heavy traffic;
• give us a reasonable time to fix the problem before you disclose it publicly.

We will not take action against a person who reports a vulnerability responsibly and in good faith in line with these rules.

If you believe your account was compromised, change your password, sign out of other devices in the app and contact us immediately.

7. Legal Requests

We may cooperate with law enforcement and regulators and comply with valid legal orders. We disclose personal data only through valid legal process, and as described in our Privacy Policy.

8. Changes to This Policy

We may update this AUP to respond to new risks, features or legal requirements. We will notify you of material changes as set out in the Terms. Continued use of the Service after a change takes effect means that you accept the updated AUP.

9. Governing Law and Contact

This AUP is governed by the laws of the Republic of Indonesia, and disputes are resolved as set out in the Terms and Conditions, which provide for good-faith negotiation and mediation, and then the courts of Kota Depok.

Questions about this policy: arizu.team@gmail.com. Postal address: Arizu Studio, Grand Depok City, Cluster Gardenia, Kota Depok, Jawa Barat, 16412, Indonesia..