ACCEPTABLE USE

Acceptable Use Policy

Last updated 27 September 2026Version 2026-09-27

This Acceptable Use Policy (the “AUP”) is part of Thumb's Terms of Service between you and GETRYK, the business in Israel that operates Thumb. It applies to you, to anyone using your account, and to every Agent that uses your API keys or your dashboard. What your Agent does counts as done by you (Terms, section 6). Words with capitals, like Phone and Agent, mean what the Terms define them to mean.

The examples below are not a complete list. If you're unsure whether something is allowed, ask us at hello@thumb.run before you do it.

1. Illegal activity

Don't use Thumb for anything that breaks the law, or that helps someone else break it. That includes the laws of Israel, of the country you work from, and of the places where the people and services you deal with are.

2. Fraud, scams and deception

Don't:

• run scams, phishing or any other kind of fraud;
• impersonate a person, a company or an authority, or misrepresent who you are or who a message comes from;
• create or post fake reviews, ratings, followers or engagement;
• receive or pass on verification codes for accounts that aren't yours or your organisation's, or offer phone verification as a service to others;
• use messages, calls or verification codes meant for someone else, including a previous holder of a Phone's number;
• launder money or move the proceeds of crime;
• hide that people are dealing with an AI where the law requires you to tell them.

3. Spam and unwanted messages or calls

Don't:

• send unsolicited bulk messages, by SMS, email, messaging apps or social networks;
• send advertising without the recipient's prior consent where the law requires it, including under section 30A of Israel's Communications (Telecommunications and Broadcasting) Law, 5742-1982, and similar laws elsewhere;
• make automated, pre-recorded or bulk calls;
• hide or fake the sender's identity or number;
• keep contacting people who have asked you to stop;
• break a mobile carrier's rules, including its limits on commercial or bulk SMS.

4. Fake accounts and other services' rules

Don't:

• create accounts in bulk, or by automated means where the service doesn't allow it, or create fake accounts;
• use several accounts to get around a service's limits, suspensions or bans;
• get around CAPTCHAs, rate limits, device or integrity checks (such as attestation), geographic restrictions or other access controls without the service owner's permission;
• fake a device's identity, location or integrity signals;
• access accounts, data or systems you aren't authorised to access.

Pausing your Agent so that you can sign in or solve a CAPTCHA yourself, as the docs describe, is fine.

5. Harassment, stalking and surveillance

Don't:

• harass, threaten, bully, intimidate or defame anyone, or publish their private information;
• track a person's location, or monitor their communications or activity, without their consent (for example with stalkerware or covert tracking);
• secretly record or intercept anyone's calls or messages;
• collect, scrape or profile people's personal data without a lawful basis;
• use facial recognition or other biometric identification of people.

6. Cameras, microphones and sensors

Use a Phone only through the apps you use for your work. Don't use its cameras, microphones, location services, Wi-Fi or Bluetooth scanning or other sensors to capture, observe or locate anything around the Phone, and don't try to find out where the Phones are. The Phones are kept at a location we don't disclose, and we may cover or disable these sensors.

7. Children

Never use Thumb to create, obtain, store, share or view child sexual abuse material, to sexualise minors, or to contact, groom or exploit a child. We report such material and activity to the authorities, preserve the evidence, and end the account immediately.

8. Malware, attacks and unauthorised access

Don't:

• create, spread or run malware, spyware or other harmful code;
• attack, overload or probe other people's networks, services or devices, or break their security;
• use a Phone as a proxy, VPN or relay for other traffic, or to hide where traffic comes from;
• relay or terminate other people's calls or SMS through a Phone (for example as a SIM box or messaging gateway);
• attack, probe, overload or reverse engineer Thumb, or try to reach other customers' Phones or data;
• get around Thumb's security, rate limits or blocked links, or the restrictions on a Phone;
• root, flash or modify a Phone's system software.

9. Intellectual property and content

Don't infringe copyright, trademarks or other people's rights, obtain or share pirated material, or publish content that is illegal or defamatory, or that incites violence or hatred.

10. Sanctions and export controls

Don't use Thumb in breach of sanctions or export-control laws, for anyone those laws bar, or for military, weapons or unlawful surveillance purposes (Terms, section 21).

11. Reselling and sharing access

Without our written permission, don't:

• resell, rent or sublicense access to Thumb or to a Phone;
• offer a Phone, its number or its connection as a service to others;
• share your API keys or dashboard access with anyone outside your organisation.

12. Emergency services and high-risk use

Thumb is not a phone service for people, and a Phone can go offline without warning. Never use a Phone to call or text emergency services: emergency calling from a Phone may not work, or may report the wrong location. Don't use Thumb where a failure or delay could cause death, injury or serious damage, such as medical, life-safety or critical-infrastructure uses, or for any AI practice that the law prohibits, such as those banned by the EU AI Act.

13. Protecting Thumb, our network and our numbers

Don't do anything that exposes GETRYK, its network, its internet addresses or its phone numbers to abuse, blocking, blocklisting or legal risk. For example: sending traffic that gets them flagged as a source of spam or attacks, using an unreasonable share of capacity, or trying to get around our limits, a blocked link or a Phone that we have made temporarily unavailable.

14. How we enforce this policy

• We look for abuse using activity metadata (Terms, section 10), the reports we receive, and information from carriers and other services. We don't watch your screen to do this; section 10 of the Terms says when we may access a Phone.
• If we investigate, you will help us reasonably, for example by telling us what your Agent was instructed to do and which accounts it used (Terms, section 12).
• When we find or suspect a breach, we may investigate and take proportionate steps: warn you, block a link, revoke an API key, make a Phone temporarily unavailable, suspend your account, or end your access. Section 11 of the Terms says when we give notice first.
• We may report illegal activity to the authorities and cooperate with them, and with carriers and other affected services, as the law allows or requires (Terms, section 12).
• You will reimburse the reasonable costs we actually incur to put right damage your breach causes, such as replacing a banned SIM card or number (Terms, section 8).
• If you think we've made a mistake, write to hello@thumb.run and we will review it.

15. Reporting abuse

• If you see a Thumb Phone being used for anything this policy forbids, email abuse@thumb.run. Say what happened and when, and include any phone numbers, accounts, links or messages involved.
• For child sexual abuse material, describe where you saw it, but never send the material itself. Report it to the police as well.
• We aim to acknowledge reports within 24 hours. We may not be able to tell you what action we took.
• To report a security problem in Thumb itself, email hello@thumb.run.

16. Changes

We update this policy as section 22 of the Terms describes. The version and date at the top tell you which one applies. See also the Privacy Policy.