Acceptable Use

Last updated: 2026-08-19

This sits alongside the Terms of Service and covers the hosted service. The client is MIT licensed: do what you like with it, including running your own.

1. The client is not restricted by this

Fork it, self-host it, sell something built on it. The MIT licence means that, and nothing on this page takes it back. Everything below is about the hosted service.

2. One seat, one person

A seat belongs to a person, not to a chair. Sharing an account so two people can use one seat is not on. Machines are different: add as many of your own devices as you like, at no extra cost, because that is the whole point of device sync.

3. Do not attack the service

No attempts to break authentication, read another team's records, exhaust our capacity, or interfere with anyone else's use. Rate limits exist; do not work around them.

Automating your own account through the documented API is fine and expected. That is what the CLI does.

4. Do not misuse the relay

The relay carries plan sync between your devices when a direct connection cannot be made. It is not a general-purpose tunnel, a proxy for other traffic, or somewhere to move large volumes of unrelated data.

We cannot read what it carries, which is by design. It also means we judge misuse by volume and pattern rather than content, and we will ask before acting where there is any doubt.

5. Do not use it to do harm

Do not use the service to store or coordinate anything unlawful, to harass anyone, or to infringe someone else's rights.

Note what this does and does not mean. Your plan content never reaches us, so we are not reviewing it and we are not in a position to. This clause exists so that an account being used for something plainly unlawful can be closed, not so that we can inspect your work.

6. Do not impersonate

Do not sign up as somebody else, invite people to a team under a false identity, or represent yourself as speaking for flanner.

7. Reporting a vulnerability

Please tell us before telling anyone else. Write to security@flanner.io with enough detail to reproduce it.

We will acknowledge within three working days. Test against your own account only, do not access anyone else's data, and do not run anything that degrades the service for other people. Report in good faith on that basis and we will not pursue you.

8. What happens if this is broken

Usually an email asking you to stop. For serious or repeated breaches, or anything actively harming other users, suspension without notice, and in the worst cases termination.

Suspension affects the hosted service only. Your plans, their history and every local feature keep working, because they are on your machines and always were.

9. Changes

Published here with a new date at the top. Read this with the Terms of Service, which it forms part of. Questions to support@flanner.io.