Acceptable use

Draft, under legal review

Last updated 28 October 2026

This page applies to everything you ask Kiln to build, upload to Kiln or publish from Kiln. It is part of the terms of use.

Do not use Kiln for

These are forbidden:

Impersonation: pretending to be another person, a company, a bank, a public body or Kiln, or copying someone’s name, logo or sign-in page so that people take your app for theirs.
Phishing and credential theft: pages or forms that collect passwords, codes, card details or bank details under false pretences.
Scams and fraud: fake shops, fake investments, fake giveaways, and deceptive payment or donation pages.
Malware: code that harms, spies on or takes control of a device or an account, including ransomware, stealers and hidden miners.
Illegal content: anything unlawful in the United Kingdom or where its users are, including child sexual abuse material, terrorist content, content that incites violence or hatred, and intimate images shared without consent.
Infringement: copying work, names or marks you have no right to use, or exposing other people’s private information.
Harassment and threats against any person or group.
Spam: bulk or unwanted messages.
Attacks: scanning or attacking Kiln, other apps or other people’s systems, trying to read another person’s apps or data, or getting around Kiln’s checks and limits.
Using an app’s AI feature to produce anything on this list.

Apps in the style of another product

You can ask for an app that does a similar job to an existing product. You cannot use that product’s name, logo or look-alike address, or present your app as made by or connected to them.

Personal data in your app

If your app collects personal data, tell its users what you collect and why. Kiln does not give your app a privacy notice yet.

Kiln’s checks do not decide what is allowed

The checks Kiln runs on a build look for security and quality problems. They do not judge what an app is for, so a build that passes can still break these rules.

What Hellmai can do

Hellmai can refuse or stop a build, disable or remove an app, suspend an account, keep records of what happened, and tell the police, a regulator or an affected person.

Report a problem