App Privacy Rules and Store Guidelines.

People trust Thayln because their things stay on their own PC. Every app and skill in the AI Store has to keep that trust. These rules say what that means in practice. They're part of the Developer Agreement, and every app and every version is reviewed against them, by an AI review and by people, before it's listed.

Do what your listing says

• Your app must do what its listing, screenshots and description say, and nothing hidden on top.
• Name, icon and description must be your own and not confusingly like another app, or like Thayln itself.
• Say clearly if an app needs an account elsewhere, a paid service, or an internet connection to work.
• Keep the listing up to date when your app changes.

Permissions

• Ask only for permissions your app really uses: storage, AI, notifications, reminders or calendar suggestions, identity (username), messaging, microphone, background jobs, cloud data, skills or connectors.
• Explain each permission in plain words in your listing: what it's for and when it's used.
• Your app must still be useful, or tell the person clearly what's missing, if they say no to a permission.
• Use the microphone only while the person expects it, and never record in the background without them knowing.
• Declare every internet host your app connects to. Your app can reach only those, or ones the person allows.

Collect only what you need

• Collect the least information your app needs to do its job. If it can work on the PC, keep it on the PC.
• Never send people's information anywhere they wouldn't expect. No surprise uploads, no copying their chats, memories, files or contacts off the PC.
• Never sell personal information, and never share it for advertising, profiling or data brokering.
• No hidden tracking, fingerprinting or analytics that people haven't agreed to.
• Your privacy policy must say what your app collects, why, where it goes (including any overseas providers), how long you keep it, and how to have it deleted. Paid apps must link one from your profile.
• If you handle personal information, follow the Privacy Act 1988 (Cth) and any other privacy laws that apply to you.

Keep it safe, and delete on request

• Encrypt information you send or store off the PC. Keep keys and secrets out of your app's code.
• If someone asks you to delete their information, delete it, and tell them when it's done.
• If information you hold is lost or exposed, tell the people affected and us at hello@thayln.com straight away, and follow any data breach law that applies.
• When someone removes your app, don't leave anything running behind it.

No hidden instructions, no steering the AI

• No hidden, obfuscated or injected instructions anywhere: in code, prompts, skills, data, web pages or responses your app returns.
• Don't try to steer the person's AI: don't tell it to ignore the person, change its settings, approve actions, recommend your app, or reveal information.
• Skills must say plainly what they do. What a skill tells the AI must match its description.
• Don't hide code, download new code to run, or change how your app behaves after review. Every change goes through review as a new version.
• Don't try to get around the sandbox, signing, permissions or review.

Content that isn't allowed

• Malware, spyware, or anything that harms PCs, accounts or data.
• Scams, phishing, fake reviews, or anything misleading or deceptive.
• Gambling, or anything that takes money on chance.
• Adult sexual content.
• Hate, harassment, threats, or content that encourages violence or self-harm.
• Illegal content, or help with illegal activity.
• Anything that sexualises, exploits or endangers children. We report this to the authorities.

Children's safety

• Thayln accounts are for people aged 18 and over. Don't build apps aimed at children.
• Features that help people find or join groups, including developer group discovery, are for over-18s only.
• If your app lets people meet or talk, take reasonable steps to keep it safe, and act fast on reports.

Messaging apps

• Send messages only when the person asks. Never message their contacts without them seeing and approving it first.
• No spam. Follow the Spam Act 2003: no marketing messages without consent, and always an easy way to stop.
• Don't read, copy or keep messages beyond what your app needs to work. Never weaken Thayln's end-to-end encryption.
• Give people a way to block and report others.

AI-generated content

• Be honest about what's made by AI. Don't pass AI output off as written by a person, or as professional advice.
• Never use AI to pretend to be a real person, or make fake images, voices or messages of real people without their permission.
• If your app gives health, legal or money information, say clearly it isn't professional advice.
• Use the AI permission only for the features your listing describes.

Copying others' work

• Only use code, art, sounds, fonts, names and data you own or have permission to use, and follow their licences.
• Don't copy another developer's app, listing or skill, or make a lookalike to trade on their name.
• If someone says your app uses their work without permission, we can take it down while it's sorted out.

Getting approved the first time

• Give clear voice phrases: the things people can say to use your app, in plain words, and make sure they work.
• Be honest about permissions, and explain each one.
• Work offline where you can, and fail politely when you can't.
• Test every feature on the version you submit. Include a note to reviewers if something needs an account or set-up to try.
• Make sure your profile has a support contact and, for paid apps, a privacy policy.
• Keep it simple. Small apps that do one thing well are easiest to review.

What happens if an app breaks the rules

• Most problems are caught in review. We'll reject the version and tell you what to fix.
• If a listed app breaks the rules, we may ask you to fix it, remove it from the AI Store, or both. We'll email you the reason.
• For serious or repeated breaches, such as malware, hidden instructions or misusing people's information, we can remove all your apps, pause your developer account, hold payouts related to the problem, and tell the people affected.
• Anyone can report an app from the AI Store. We look at every report.
• If you think we got it wrong, email hello@thayln.com and a person will look again.

These rules sit alongside the Developer Agreement, our Terms of Use and our Privacy Notice.

Last updated 20 October 2026. Draft for legal review.