Acceptable Use Policy

1. Scope

This policy covers everything you do with Dragy: what you send, receive and share; the share links you create and distribute; the device names you choose; and how you use our servers, relay, storage and Nearby. It applies whatever route a transfer takes — even transfers that never touch our servers remain subject to the Terms. You are responsible for anyone who uses Dragy through your account or devices.

Because content is end-to-end encrypted, we do not and cannot monitor it. That makes your responsibility greater, not smaller: you must make sure your own use is lawful.

2. Illegal content and activity

You must not use Dragy to send, store, share or facilitate anything that is illegal where you are or where your recipient is, including content that:

• incites or glorifies terrorism or violent extremism, or provides material support to it;
• threatens violence, or promotes or facilitates human trafficking, sexual exploitation or self-harm of others;
• shares intimate images of someone without their consent;
• contains personal data you have no lawful right to disclose, such as leaked databases, stolen credentials or doxxing material;
• facilitates fraud, money laundering, the sale of illegal goods or services, or the evasion of sanctions or export controls.

3. Child sexual abuse material — zero tolerance

Never use Dragy for child sexual abuse material (CSAM) or any content that sexualises minors. We have zero tolerance. When we receive a credible report, we disable the share link and delete its data, permanently terminate the accounts involved, preserve the limited records we hold, and report the matter to [the competent UAE authorities and, where applicable, the U.S. National Center for Missing & Exploited Children (NCMEC) — confirm]. We cooperate fully with law enforcement in these cases.

If you come across such material through a Dragy share link, do not download, copy or forward it. Report the link to [email protected] (see Report abuse) and to your local police or hotline.

4. Malware and phishing

• Don’t send or share viruses, ransomware, spyware, trojans, cryptominers or any other code designed to damage, take control of or gain unauthorised access to devices or data.
• Don’t use share links to host phishing pages, fake installers, credential-harvesting files or payloads for attacks, or to deliver files linked from phishing or spam messages.
• Don’t disguise files to trick recipients into opening them, for example with misleading names or double extensions.

Legitimate security professionals may exchange samples between their own devices for research, provided they are handled safely, never sent to anyone who hasn’t agreed, and never shared through a public link.

5. Intellectual property and privacy infringement

Don’t send or share material that infringes someone else’s copyright, trademark, trade secret, privacy, publicity or other rights — for example pirated films, music, software, games or books, or software cracks and licence keys. Rights holders can use our Copyright Policy to report share links; accounts with repeated valid notices are terminated.

6. Harassment and unwanted transfers

• Don’t harass, bully, threaten, stalk or intimidate anyone, or send content intended to cause distress.
• Don’t send transfers, transfer requests or links to people who haven’t agreed to receive them, or keep sending after someone declines.
• Don’t send spam — unsolicited bulk or commercial content — including by distributing share links in spam messages.
• Don’t impersonate any person, company or organisation, including through device names or account names, or misrepresent your affiliation.

7. Misusing Nearby

Nearby shows your device to people on the same network so you can share with them easily. Don’t abuse it:

• don’t send unsolicited transfer requests to strangers — for example on public, café, airport, hotel, school or office Wi-Fi;
• don’t use offensive, sexual, threatening or deceptive device names, or names that impersonate other people’s devices;
• don’t use Nearby to track, identify or monitor people, or to collect information about devices on a network;
• don’t bypass verification emoji or trick someone into accepting a transfer.

8. Relay, storage and quotas

• Don’t use the relay or cloud storage as general-purpose file hosting, a backup service, a content-delivery network, or a way to distribute files to the public.
• Don’t circumvent quotas, storage limits, transfer-size limits, daily relay limits, rate limits or connection limits — for example by using multiple accounts, rotating IP addresses, or splitting transfers to evade limits.
• Don’t send traffic designed to exhaust the relay, storage or signalling capacity.
• Don’t use our STUN, signalling or relay infrastructure for anything other than Dragy transfers.

9. Share links

• Share links are for sending files to people you choose. Don’t publish them on public websites, forums or social networks to distribute content at scale.
• Everything in this policy applies to content shared through links, and to the places and ways you distribute them.
• We may disable any link that breaches this policy, without notice.

10. Automation and accounts

• Don’t create accounts by automated means, in bulk, or with false or disposable details to evade limits or enforcement.
• Don’t sell, rent or share accounts, or create a new account after we terminated yours without our permission.
• Don’t access the service through scripts, bots or unofficial clients, or scrape it, except through the Apps we provide or with our written permission.
• Don’t try to access accounts, devices, transfers or data that aren’t yours, or guess connection codes or share-link identifiers.

11. Attacking or interfering with the service

• Don’t disrupt, overload or impair the service, our infrastructure or our providers — including denial-of-service attacks.
• Don’t reverse engineer, decompile or modify the Apps or the protocol in order to attack the service or other users, bypass security or limits, or build tools for doing so.
• Don’t introduce malicious code into the service, tamper with other users’ transfers, or try to intercept or impersonate other devices.
• Don’t use Dragy to attack any other system or network.

12. Security research

We welcome good-faith security research that follows our vulnerability reporting guidelines: test only against your own accounts and devices, don’t access other people’s data, don’t degrade the service (no denial-of-service or load testing), and report what you find to [email protected] before disclosing it. Research that follows those guidelines does not breach this policy.

13. Enforcement

We can’t see content, so we act on reports from users and rights holders, information from authorities, and technical signals that don’t require reading content (such as traffic volume, quota use and connection patterns). Depending on the seriousness of a breach, we may:

• warn you or ask you to stop;
• disable share links and delete their encrypted data;
• delete stored transfers, remove or block devices, and apply tighter limits;
• block network addresses from the relay or the service;
• suspend or permanently terminate accounts, and refuse new registrations (see Terms, section 18);
• preserve the limited records we hold and report the matter to law enforcement where the law requires or where we believe in good faith it is necessary to protect someone from harm.

Where reasonable, we will tell you what we did and why, and give you a chance to respond. We may act immediately and without notice where a breach is serious or where the law requires it. Not acting in one case doesn’t waive our right to act in another. If you think we made a mistake, write to [email protected] and a person will review the decision.

14. Reporting a breach

Report abusive share links, accounts or devices to [email protected] — our Report abuse page explains what to include. Copyright and trademark notices follow our Copyright Policy, and security vulnerabilities go to [email protected]. If someone is in immediate danger, contact your local emergency services first.

15. Changes to this policy

We may update this policy as Dragy and the risks it faces change. Material changes follow the notice process in our Terms of Service. The date at the top shows the last update.

Questions about this policy? Write to [email protected].