Acceptable use policy

1.1 Application. This AUP applies to (a) every person who creates, accesses, registers for, browses, queries, prompts, fine-tunes, integrates with, redistributes, scrapes, or otherwise uses any portion of the Service, including the Bruner mobile applications, web client, application programming interfaces ("APIs"), embeddings, course content, AI-generated outputs ("Outputs"), and all related materials (collectively, "Users" or "you"); (b) every Input you submit to the Service; (c) every Output you receive from the Service; and (d) every act or omission undertaken using your account credentials, your API keys, your devices, or any session originating from any of the foregoing, whether or not authorized by you. You are strictly liable for all activity attributable to your account.

1.2 Relationship to Other Documents. The ToS governs the contractual relationship between you and Storm Force. The Privacy Policy governs Storm Force's processing of personal data. This AUP governs what you may do, what you may not do, and what we may do in response. In the event of any conflict between this AUP and the ToS, the more restrictive of the two shall govern with respect to your conduct, and the more permissive of the two shall govern with respect to our enforcement rights.

1.3 Adult-Only Service (Restated). Bruner is offered exclusively to natural persons aged eighteen (18) years or older. You represent and warrant on a continuing basis that you are at least 18, that you have the legal capacity to enter into binding contracts in your jurisdiction, and that you are not barred from receiving the Service under the laws of the United States, the European Union, the United Kingdom, or any jurisdiction in which you reside or from which you access the Service. Use of Bruner by, or on behalf of, any person under 18 is strictly prohibited and constitutes a material breach of this AUP and the ToS, and we may report any such use to relevant authorities, parents, guardians, schools, and platform partners.

1.4 No Endorsement of Permitted Conduct. Listing a category of conduct as prohibited does not mean that conduct not listed is permitted. We may treat any conduct that is harmful to Bruner, our Users, third parties, our model providers, our payment processors, our distribution partners (including mobile app stores and our merchant of record), or the integrity of the Service as a violation, in our sole and absolute discretion.

You shall not, and shall not attempt to, encourage, enable, or permit any third party to use the Service in connection with any of the conduct enumerated below. The list is non-exhaustive and is to be read disjunctively and in the broadest manner permitted by law. Each category is independently sufficient grounds for the consequences set forth in Section 6.

2.1 Violations of Law. You shall not use the Service in any manner that violates, facilitates the violation of, or is intended to circumvent any applicable federal, state, local, foreign, or international law, regulation, treaty, sanctions program, court order, or industry standard, including without limitation laws of (a) the United States and any U.S. state from which the Service is accessed; (b) the State of Delaware (the jurisdiction of formation of Storm Force); (c) the user's jurisdiction; and (d) any jurisdiction in which the conduct, its effects, or the affected persons are situated.

2.2 Child Safety; Child Sexual Abuse Material ("CSAM"). You shall not use the Service to generate, solicit, request, transmit, store, host, link to, distribute, market, monetize, share, fine-tune toward, or otherwise traffic in any content that sexualizes, sexually exploits, depicts in a sexual context, grooms, fetishizes, normalizes the abuse of, or facilitates the trafficking, sextortion, or coercion of any individual under the age of eighteen (18), regardless of (i) whether the content is real, fictional, simulated, AI-generated, cartoon, animated, anime, lolicon, shotacon, or otherwise stylized; (ii) the user's stated purpose, including purported research, journalism, art, satire, parody, or harm reduction; (iii) the jurisdiction of the User or any depicted or described person; and (iv) whether the depicted person is real, composite, fictional, deceased, or generated. You shall not engage the Service in roleplay, simulation, or persona-building that places the AI tutor or the User in the role of a minor in any romantic, sexual, sexualized, or grooming context.

We define a minor as any natural person under the age of 18, regardless of jurisdictional age-of-consent or age-of-majority variation. We use automated detection tools and, where appropriate, human review to identify apparent CSAM. We will report apparent CSAM, online enticement of a minor, and child sex trafficking to the National Center for Missing & Exploited Children ("NCMEC") via the CyberTipline as required by 18 U.S.C. § 2258A, will preserve the report and associated content for at least the statutory minimum (currently one year, as amended by the REPORT Act, Pub. L. 118-59), will cooperate with U.S. and foreign law enforcement, and will permanently terminate the offending account, ban the User across the Service, and take such other action as we deem necessary, including without limitation civil and criminal referral.

2.3 Sexual Content; Pornography; Erotica. Bruner is a learning platform, not an adult-content platform. You shall not use the Service to depict, request, generate, store, transmit, or share (a) sexual intercourse or sex acts; (b) erotic chat, sexting, or "companionship" roleplay of a romantic or sexual nature; (c) content related to sexual fetishes or fantasies; (d) incest or bestiality, in any form; (e) content created for the purpose of pornography or sexual gratification; or (f) any sexually explicit, lewd, lascivious, or obscene material. This prohibition applies regardless of the depicted persons' apparent age, fictionality, or consent.

2.4 Non-Consensual Intimate Imagery ("NCII"); TAKE IT DOWN Act. You shall not use the Service to create, generate, request, possess, distribute, threaten to distribute, or otherwise traffic in any intimate visual depiction or "digital forgery" (as those terms are used in the TAKE IT DOWN Act of 2025 and 47 U.S.C. § 223 as amended) of any identifiable individual without that individual's express, knowing, freely given, and verifiable consent to the specific act of publication. Consent to the creation of an image is not consent to its publication. This prohibition includes AI-generated, manipulated, "deepfake," "undressing," "nudifying," and face-swap depictions. We will, where applicable, comply with valid takedown notices in the manner and timeframes required by law and reserve the right to remove suspected NCII proactively without notice.

2.5 Self-Harm; Suicide; Eating Disorders. You shall not use the Service to plan, coordinate, request, encourage, glorify, romanticize, instruct, role-play with, or seek operational assistance with respect to suicide, self-harm, self-injury, disordered eating, unhealthy or compulsive exercise, body-image degradation, or any analogous psychological or physical harm to yourself or any other person. You acknowledge that the Service is not a crisis resource, not a therapeutic intervention, not a mental-health provider, and not a substitute for professional care. We expressly reserve the right to refuse to engage, to decline output, to surface safety information, to terminate a session, to suspend or terminate the account, and to notify emergency services or appropriate third parties where, in our sole judgment, the User presents an imminent risk to life or safety. The Service's safety classifiers' decisions to refuse output are not bugs, errors, defects, or actionable conduct, and you waive all claims arising therefrom to the maximum extent permitted by law.

2.6 Violence, Incitement, Terrorism, and Violent Extremism. You shall not use the Service to (a) threaten, incite, plan, glorify, celebrate, recruit for, finance, provide material support for, or facilitate violence against any person, group, animal, or property; (b) produce or distribute content praising, promoting, or providing operational support for designated terrorist organizations, foreign terrorist organizations (8 U.S.C. § 1189), Specially Designated Global Terrorists, or violent extremist movements; (c) coordinate, organize, or recruit for organized violence; or (d) glorify, gratuitously depict, or sexualize gore.

2.7 Hate Speech and Discrimination. You shall not use the Service to attack, dehumanize, harass, demean, or promote hatred, violence, or discrimination against any individual or group on the basis of race, ethnicity, color, national origin, ancestry, immigration status, religion, caste, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy, parental status, disability, serious illness, veteran status, genetic information, or any other characteristic protected under the law of any jurisdiction in which the affected person resides or in which we operate.

2.8 Weapons; Mass-Casualty Capabilities. You shall not use the Service to design, produce, modify, acquire, deploy, or provide operationally meaningful uplift toward (a) chemical, biological, radiological, nuclear, or high-yield explosive weapons or their precursors, including means of evading detection or medical countermeasures; (b) cyberweapons, including malware, ransomware, exploits, or persistent-access tooling; (c) conventional firearms or weapons in violation of any applicable law; (d) untraceable, 3D-printed, or otherwise circumvention-oriented weapons; or (e) any device, technique, or substance designed to cause mass casualties or large-scale property destruction.

2.9 Critical Infrastructure. You shall not use the Service to attack, plan attacks against, identify vulnerabilities in, disrupt, or facilitate the disruption of critical infrastructure, including without limitation power grids, water treatment and distribution, oil and gas pipelines, transportation, aviation, healthcare delivery systems, medical devices, hospitals, emergency services, voting systems, financial markets, telecommunications, military bases, and air-traffic control.

2.10 Malware, Hacking, Unauthorized Access; Computer Fraud and Abuse Act. You shall not use the Service to (a) author, modify, optimize, distribute, deploy, or evaluate malware, ransomware, spyware, stalkerware, rootkits, botnets, exploits, or denial-of-service tooling; (b) discover or exploit vulnerabilities in any system, network, application, or device without the express, prior written authorization of the system owner; (c) gain or attempt to gain unauthorized access to any system, account, network, application, or device, whether by technical attack or social engineering; (d) circumvent authentication, session, rate-limit, geofencing, key-management, billing, or other security or commercial controls of Bruner or of any third party; or (e) otherwise engage in conduct that would, if successful, constitute a violation of the Computer Fraud and Abuse Act, 18 U.S.C. § 1030, or analogous law of any jurisdiction. We do not authorize unsolicited security research against Bruner; legitimate security research must proceed exclusively through the Coordinated Vulnerability Disclosure ("CVD") policy published at withbruner.com/security, and any conduct outside the CVD policy is unauthorized as a matter of contract and as a matter of access control.

2.11 Anti-Circumvention; DMCA § 1201. You shall not circumvent, disable, attempt to circumvent, or assist others in circumventing any technological measure that controls access to or use of Bruner, our model providers' systems, or any third-party content, including content-classifier, prompt-injection-defense, system-prompt-protection, watermarking, provenance, digital-rights-management, or rate-limiting measures. Such circumvention is prohibited as a matter of contract and may also violate 17 U.S.C. § 1201 and analogous laws.

2.12 Fraud, Scams, and Deceptive Practices. You shall not use the Service to (a) generate or facilitate phishing, smishing, vishing, business-email-compromise, romance, recruitment, investment, advance-fee, technical-support, "pig-butchering," tax-impersonation, or other fraud or scam content; (b) generate or distribute false reviews, fake testimonials, sockpuppet endorsements, or other fake user-generated signal in violation of FTC Section 5 (15 U.S.C. § 45) or analogous law; (c) create, alter, or distribute counterfeit, illicit, or unauthorized goods, currency, identification documents, government documents, academic credentials, or licenses; (d) operate or promote multi-level marketing, pyramid, Ponzi, or chain-letter schemes; or (e) deploy subliminal, dark-pattern, or otherwise deceptive techniques to materially distort the behavior of natural persons.

2.13 Spam and Unsolicited Bulk Content. You shall not use the Service to generate, distribute, automate, or facilitate spam, unsolicited bulk e-mail or messaging, mass commercial solicitation, comment-flood content, automated review-bombing, SEO doorway content at scale, or analogous bulk inauthentic content.

2.14 Deception, Impersonation, and Synthetic Persona Misrepresentation. You shall not use the Service to (a) impersonate any natural person, including a public figure, without that person's express written authorization; (b) impersonate Storm Force, Bruner, our employees, our agents, our partners, or any of our investors; (c) create personas designed to deceive natural persons about their human or AI nature in violation of any applicable disclosure law, including without limitation the EU AI Act, Article 50 (Reg. (EU) 2024/1689), and analogous U.S. state law; or (d) misrepresent AI-generated Output as human-authored where disclosure is required by law, contract, professional ethics, or platform rule.

2.15 Election Integrity and Political Manipulation. You shall not use the Service to (a) generate synthetic audio, video, image, or text impersonations of candidates for public office, elected officials, election officials, or election infrastructure of any jurisdiction; (b) generate or disseminate materially deceptive content regarding voting procedures, polling places, voter eligibility, or election administration; (c) engage in voter suppression, voter intimidation, or coordinated inauthentic political behavior; (d) conduct personalized voter or campaign micro-targeting using profile-based persuasion at scale; or (e) violate any applicable U.S. federal, state, or foreign election-integrity law, including without limitation California AB 2655 and AB 2839 (subject to applicable judicial limitations) and analogous laws of states (including but not limited to MI, MN, NY, FL, TX, WA) that have enacted prohibitions or disclosures with respect to AI-generated political content.

2.16 Privacy Violations; Surveillance; Doxxing. You shall not use the Service to (a) gather, infer, aggregate, expose, or distribute the personal information of any natural person without lawful basis and, where required, the consent of that person; (b) "dox," stalk, surveil, geolocate, biometrically identify, infer emotional state from, or infer sensitive attributes (race, ethnicity, political opinion, trade-union membership, religious or philosophical belief, sex life, sexual orientation, health status) of any natural person; (c) use the Service for facial recognition or other biometric identification of third parties; or (d) collect data about persons that you are not authorized to collect.

2.17 Intellectual Property. You shall not use the Service to infringe, misappropriate, or facilitate the infringement or misappropriation of any third party's copyright, trademark, trade dress, patent, trade secret, right of publicity, moral right, or analogous right. Copyright complaints are processed exclusively in accordance with the DMCA notice-and-takedown procedure set forth in ToS § 21; such notices are not properly addressed via this AUP's reporting mechanism.

2.18 Misinformation, Disinformation, Coordinated Inauthentic Behavior. You shall not use the Service to (a) generate or disseminate, at scale, false or misleading information that targets a person, group, entity, or governmental or scientific institution; (b) generate false medical, scientific, public-health, or safety claims; (c) operate networks of inauthentic accounts; (d) attribute generated content to fictitious or real persons or entities without lawful basis; or (e) engage in any "covert influence operation" of the kind enumerated in the published threat-intelligence reports of leading model providers.

2.19 High-Risk Professional Advice. You shall not use the Service as a substitute for, and you shall not represent the Service to be, a licensed medical, legal, financial, tax, accounting, mental-health, psychological, psychiatric, immigration, or other regulated professional. The Service is informational and educational only. This restatement is in addition to, and does not limit, ToS § 17.

2.20 Academic Dishonesty. You shall not use the Service to violate the honor code, academic-integrity policy, examination policy, or analogous rule of any educational institution to which you are subject, including without limitation by submitting Output as your own work where prohibited, by using Bruner during a closed-book or proctored assessment, or by sharing institutional examination materials with the Service. We may, in our sole discretion, cooperate with educational institutions investigating apparent academic-integrity violations, including by responding to lawful process and, where permissible, by sharing usage records. This restatement is in addition to, and does not limit, ToS § 19.

2.21 High-Risk Automated Decision-Making. Bruner is not a "high-risk AI system" within the meaning of Annex III to Regulation (EU) 2024/1689 (the EU AI Act), and you shall not deploy, integrate, or hold out the Service as a component of any system that materially affects, in an automated or semi-automated manner, an individual's (a) access to or terms of credit, lending, or insurance; (b) hiring, firing, promotion, demotion, scheduling, performance evaluation, or compensation; (c) access to housing or essential services; (d) eligibility for or administration of public benefits; (e) criminal-justice, parole, sentencing, predictive-policing, or recidivism determinations; (f) immigration, asylum, border, or visa decisions; (g) medical diagnosis, triage, treatment, or prescription; or (h) educational admissions, scoring, or accreditation.

2.22 Sanctions and Export Controls. You shall not access, use, export, re-export, or otherwise make the Service available, directly or indirectly, in or to (a) any jurisdiction subject to comprehensive U.S. sanctions (currently Cuba, Iran, North Korea, the Crimea region of Ukraine, and the so-called Donetsk People's Republic and Luhansk People's Republic regions of Ukraine, and as such list is updated from time to time by the U.S. Office of Foreign Assets Control ("OFAC")); (b) any individual or entity on the OFAC Specially Designated Nationals and Blocked Persons List, the U.S. Department of Commerce Bureau of Industry and Security Entity List or Denied Persons List, the EU Consolidated Sanctions List, the UK OFSI Consolidated List, or any analogous restricted-party list; or (c) any end use prohibited by the U.S. Export Administration Regulations, the International Traffic in Arms Regulations, or analogous export-control or trade-sanctions regimes. Use of virtual private networks, proxies, anonymizing networks, or false location data to circumvent these restrictions is itself a material breach of this AUP. This restatement is in addition to, and does not limit, ToS § 39.

2.23 Unauthorized Commercial Use; Resale; Sublicense. You shall not resell, sublicense, white-label, rent, lease, time-share, frame, mirror, or commercially redistribute the Service or any Output in any manner not expressly authorized in writing by Storm Force. This restatement is in addition to, and does not limit, ToS §§ 12 and 14.

2.24 Competing-Model Training; Distillation; Model Extraction. You shall not use the Service, or any Input, Output, embedding, system response, error, latency profile, or other observable signal derived from the Service, to (a) train, fine-tune, distill, augment, evaluate, benchmark publicly, or otherwise develop any artificial-intelligence model, machine-learning system, dataset (including instruction-tuning, RLHF preference, DPO preference, red-team, or eval datasets), or component thereof that is competitive with or substitutable for the Service or the underlying models of our model providers; (b) extract, reconstruct, or approximate the parameters, architecture, weights, training data, system prompts, or guard-rail logic of the Service or any underlying model; or (c) operate or assist in the operation of any process designed to do any of the foregoing. This restatement is in addition to, and does not limit, ToS § 13.4.

2.25 Scraping and Automated Access. You shall not access the Service by any automated means, including bots, crawlers, spiders, scrapers, headless browsers, or harvesters, except via our published, authenticated API and only within published rate limits. You shall not bypass, evade, or attempt to bypass any robots.txt, rate-limit, CAPTCHA, anti-automation, or anti-fraud measure.

2.26 Jailbreaking; Prompt Injection; System-Prompt Extraction. You shall not (a) attempt to override, evade, "jailbreak," or otherwise cause the Service to act inconsistently with its safety, content, or commercial guardrails, including by means of indirect prompt injection from third-party content; (b) attempt to extract, reproduce, or publish Bruner system prompts, hidden instructions, classifier signals, refusal text, or analogous internal artifacts; (c) generate adversarial prompts intended to defeat content classifiers; or (d) operate persistent jailbreak frameworks, regardless of stated motivation.

2.27 Reverse Engineering. You shall not reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, architecture, weights, training data, or internal logic of the Service, except solely to the limited extent that this restriction is prohibited by applicable mandatory law (including, in the European Economic Area, Articles 5 and 6 of Directive 2009/24/EC), and then only in strict conformity with the procedure set forth in ToS § 14.4.

2.28 Multi-Account Abuse; Circumvention of Limits or Geography. You shall not (a) maintain more than one account per natural person; (b) create accounts in bulk or by automation; (c) share account credentials with any other person; (d) operate accounts on behalf of banned Users or persons otherwise barred from the Service; (e) use the Service from a jurisdiction in which it is not offered, or use VPNs, proxies, or false-location data to circumvent geographic restrictions, free-tier limits, credit limits, rate limits, or pricing differences; or (f) re-register after termination without our prior written authorization.

2.29 Chargeback Abuse and Payment Fraud. You shall not initiate a payment-card chargeback, ACH reversal, or analogous reversal for any charge that you in fact authorized and for which you in fact received the Service. Initiation of a wrongful chargeback is a material breach of this AUP and the ToS, and we will (i) contest the chargeback with documentary evidence; (ii) terminate the account; (iii) refer the User to our payment processor and to chargeback-fraud-prevention networks; (iv) seek recovery of the disputed amount, plus chargeback fees, processing costs, and reasonable attorneys' fees; and (v) bar the User from creating future accounts.

2.30 Harassment, Stalking, Threats; Conduct Toward Storm Force Personnel. You shall not use the Service to harass, stalk, intimidate, bully, threaten, or coordinate harassment of any natural person, including Storm Force employees, contractors, agents, founders, or investors. Threats against Storm Force personnel will be reported to law enforcement.

2.31 Defamation. You shall not use the Service to generate or disseminate defamatory, libelous, or slanderous content concerning any identifiable person or entity.

2.32 Submission of Regulated Data. You shall not submit to the Service any (a) Protected Health Information governed by HIPAA (45 C.F.R. § 160.103) absent a current, fully executed Business Associate Agreement with Storm Force (which we do not currently offer); (b) "education records" within the meaning of FERPA (20 U.S.C. § 1232g); (c) "nonpublic personal information" governed by GLBA (15 U.S.C. § 6809); (d) GDPR Article 9 special-category personal data (racial or ethnic origin; political opinions; religious or philosophical beliefs; trade-union membership; genetic data; biometric data uniquely identifying a natural person; data concerning health, sex life, or sexual orientation); (e) payment-card data subject to PCI-DSS (other than via our payment processor's hosted form); (f) information classified by any government as confidential, restricted, secret, or above; or (g) any information you are otherwise contractually or legally prohibited from disclosing to a third-party processor. This restatement is in addition to, and does not limit, the Privacy Policy § 4 and ToS § 17.

2.33 Failure to Disclose AI-Generated Content Where Required. Where applicable law (including, without limitation, EU AI Act Article 50; U.S. state laws regarding AI-generated political advertisements; consumer-protection laws prohibiting fake reviews; and professional, academic, or institutional disclosure rules) requires that AI-generated content be marked, watermarked, or accompanied by a disclosure, you are solely responsible for making such disclosure when you publish, distribute, or otherwise make use of Output.

In addition to the prohibitions on Inputs and use cases above, you agree that you shall not, and shall not request, prompt, jailbreak, or otherwise cause the Service to produce, any Output that, taken alone or in combination, would fall within any prohibited category in Section 2. You bear responsibility for not requesting prohibited Output. You acknowledge that AI systems may produce unexpected, incomplete, or undesired Output; the Service's refusal, redaction, or truncation of Output in response to suspected violations is a feature, not a defect, and is not actionable.

4.1 No Obligation to Monitor; Section 230. Storm Force is an "interactive computer service" within the meaning of 47 U.S.C. § 230(f)(2). Nothing in this AUP shall be construed to (a) treat Storm Force as the publisher or speaker of any User-provided Input within the meaning of 47 U.S.C. § 230(c)(1); (b) impose upon Storm Force any duty to monitor; or (c) limit any defense, immunity, or "good Samaritan" protection available under 47 U.S.C. § 230(c)(2) for actions voluntarily taken in good faith to restrict access to or availability of material we consider to be obscene, lewd, lascivious, filthy, excessively violent, harassing, or otherwise objectionable, whether or not such material is constitutionally protected. We expressly invoke the "otherwise objectionable" clause as broadly as the law permits.

4.2 No Appeals; No Due Process. Except where required by applicable mandatory law (including, where applicable, the EU Digital Services Act and analogous regimes), we are under no obligation to provide warnings, appeals, statement-of-reasons, restoration, or any other form of process to Users whose accounts or content are restricted, suspended, terminated, refused, throttled, or otherwise affected by enforcement action. Where applicable mandatory law requires a particular procedure, we will provide that procedure, and only that procedure, to the minimum extent so required.

4.3 Cooperation with Law Enforcement and Regulators. We will cooperate with valid legal process, including subpoenas, search warrants, court orders, NSLs (consistent with applicable law), preservation requests, mutual-legal-assistance requests, and analogous foreign process. We may, but are not required to, give the affected User notice prior to disclosure unless prohibited by law or unless we determine, in our sole judgment, that notice would risk imminent harm, evidence destruction, or interference with an investigation.

5.1 Reporting Address. To report a suspected violation of this AUP, content you believe to be illegal, or a safety concern, contact us at abuse@withbruner.com.

5.2 Required Information. Reports should include, to the extent the reporter can provide it: (a) a clear description of the alleged violation and why the reporter believes it is illegal or violative; (b) the exact location of the content (e.g., a Bruner share URL, screenshot, conversation identifier, message ID, or session timestamp); (c) the reporter's name and e-mail address (which may be omitted only for reports of offenses described in Articles 3–7 of Directive 2011/93/EU, e.g., child sexual abuse material); and (d) a statement, made in good faith, that the report is accurate and complete. DMCA copyright notices must be sent to our designated DMCA agent as set forth in ToS § 21, not to abuse@withbruner.com.

5.3 EU Digital Services Act Article 16 Notice and Action. For Users and reporters in the European Union, the e-mail address abuse@withbruner.com constitutes the notice-and-action mechanism contemplated by Article 16 of Regulation (EU) 2022/2065 (the Digital Services Act). A notice that satisfies Article 16(2) shall be deemed to give us actual knowledge or awareness for the purposes of Article 6 of the DSA only to the extent that it allows a diligent provider to identify the illegality of the relevant activity or information without a detailed legal examination.

5.4 Discretion; Anti-Abuse of the Reporting Mechanism. We have no obligation to investigate any particular report, to respond to the reporter, to share investigative findings, or to provide any specific remedy. We reserve the right to refuse, deprioritize, or sanction reporters whose submissions are pretextual, harassing, automated, weaponized, made in bad faith, repetitive, or otherwise abusive of the reporting mechanism.

5.5 NCMEC Reporting. Reports involving suspected child sexual exploitation, CSAM, online enticement of a minor, or child sex trafficking will be processed by us in accordance with 18 U.S.C. § 2258A and forwarded to NCMEC's CyberTipline as required by law. Members of the public may also report directly to NCMEC at www.cybertipline.org or 1-800-843-5678.

6.1 Tiered Enforcement at Our Discretion. Upon any actual or suspected violation of this AUP, we may, at our sole discretion and in any combination, apply any one or more of the following: refusal to produce Output; redaction of Output; warning; rate-limiting; throttling; feature lock; geographic restriction; account suspension; permanent account termination; forfeiture of unused credits, prepaid balances, and subscription periods; bar against future account creation; reporting to law enforcement; reporting to NCMEC; reporting to app stores, payment processors, and model providers; civil action; and referral for criminal investigation.

6.2 No Refund. Upon termination, suspension, or restriction for breach of this AUP or the ToS, all fees paid and credits purchased are forfeited and non-refundable, except where mandatory consumer-protection law of the User's jurisdiction provides otherwise.

6.3 Survival. Sections 1, 2, 3, 4, 6, 7, 8, 9, and 10 of this AUP survive termination of the ToS or this AUP indefinitely.

6.4 Liquidated Damages. Because actual damages from many AUP violations are difficult or impossible to compute (including, e.g., reputational harm, regulatory inquiry burden, app-store-relations harm, model-provider-relations harm, and incident-response burden), and consistent with ToS § 44, you agree that for each violation of any of the following provisions you shall pay Storm Force liquidated damages of five thousand U.S. dollars (US$5,000) per violation, in addition to (and not in lieu of) all other available remedies: §§ 2.2 (CSAM), 2.4 (NCII), 2.10 (CFAA), 2.14 (impersonation), 2.22 (sanctions), 2.24 (competing-model training and distillation), 2.25 (scraping), 2.26 (jailbreaking), 2.28 (multi-account/geographic circumvention), and 2.29 (chargeback abuse). The parties agree that this amount is a reasonable forecast of just compensation for the harm caused by such violations and is not a penalty.

6.5 Cumulative Remedies. All remedies under this AUP are cumulative and in addition to any other remedies available at law or in equity.

We may update this AUP at any time. For material changes, we will provide at least seven (7) days' notice by posting the revised AUP at withbruner.com/aup, by in-app notification, or by e-mail to the address associated with your account, with the new effective date stated at the top of the document. For changes that address clearly illegal content or imminent safety risk, or that reflect new mandatory legal requirements, we may publish updates without advance notice and effective immediately. Your continued use of the Service after the effective date of any update constitutes acceptance of the revised AUP.

8.1 Severability. If any provision of this AUP is held unenforceable, the remaining provisions shall remain in full force and effect, and the unenforceable provision shall be construed to the maximum extent permitted by law to give effect to the parties' intent.

8.2 No Waiver. Our failure to enforce any provision of this AUP in any instance shall not constitute a waiver of that provision or of any other provision.

8.3 Conflict. In the event of any conflict between this AUP and the ToS, Section 1.2 governs. In the event of any conflict between this AUP and the Privacy Policy regarding the processing of personal data, the Privacy Policy governs.

8.4 Governing Law; Forum. This AUP is governed by the law and forum-selection provisions set forth in the ToS, without regard to conflict-of-laws principles.

Capitalized terms not defined in this AUP have the meanings given in the ToS or Privacy Policy. "Input" means any prompt, message, image, audio, file, attachment, or other data submitted to the Service by you or by any person using your account. "Output" means any text, image, audio, video, code, embedding, score, or other content generated by the Service in response to an Input. "Content" means Inputs and Outputs collectively. "Account" means your registered Bruner account.