CRYPTO HEARTS LLC ACCEPTABLE USE POLICY

Last Updated: August 29, 2026

Effective Date: August 29, 2026

This Acceptable Use Policy ("AUP") governs your use of the Heart.Fi platform. This AUP is incorporated into and forms part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

Because Heart.Fi offers custodial accounts and fiat rails operated by a regulated custody partner, breaching this AUP can result not only in losing access to the Platform but in your funds being frozen, your activity being reported to authorities, and your account being closed. Section 6 explains what enforcement looks like.

You agree to use the Platform only for lawful purposes and in accordance with these guidelines. You are responsible for ensuring that your use complies with all applicable laws and regulations in your jurisdiction, and for obtaining any licence, registration, or permission your activity requires.

Use your own account, for yourself. Your account, your custodial wallets, and your verified identity are personal to you. Using them to move money for anyone else — whether as a favour, as a service, or for a fee — is prohibited under Section 3.

You may NOT use the Platform to:

Financial Crimes:

• Launder money, or operate money transmission without the required licensing
• Finance terrorism, proliferation, or support sanctioned organizations
• Conduct transactions involving proceeds of criminal activity
• Structure transactions to evade reporting, verification, or threshold requirements
• Evade taxes or assist others in tax evasion
• Engage in fraud, embezzlement, or financial deception

Sanctions Violations:

• Transact with individuals or entities on OFAC's Specially Designated Nationals (SDN) List, or on any equivalent UN, EU, or UK list
• Transact with individuals or entities subject to blocking sanctions, or owned or controlled by them
• Conduct transactions involving comprehensively sanctioned jurisdictions
• Circumvent geographic restrictions or sanctions compliance measures, including by VPN, proxy, or false location
• Assist others in evading sanctions

Illegal Activities:

• Purchase or sell illegal goods or services
• Facilitate drug trafficking, weapons trafficking, or human trafficking
• Distribute child sexual abuse material
• Engage in or facilitate any activity that violates applicable criminal law
• Circumvent legal restrictions on digital asset use in your jurisdiction

Fraudulent Conduct:

• Create false, misleading, or deceptive donation campaigns
• Impersonate other individuals, organizations, or entities, including a beneficiary
• Misrepresent your identity, affiliation, or authority to fundraise
• Operate scams, Ponzi schemes, or pyramid schemes
• Engage in phishing or social engineering attacks
• Solicit donations under false pretenses

Platform Abuse:

• Create multiple accounts for fraudulent purposes or to circumvent restrictions, limits, or a prior termination
• Use automated systems (bots, scripts, scrapers) without authorization
• Attempt to gain unauthorized access to Platform systems or user accounts
• Interfere with or disrupt Platform infrastructure or security
• Exploit bugs, vulnerabilities, or errors for personal gain, including keeping funds credited to you in error
• Reverse engineer, decompile, or disassemble Platform software
• Copy, modify, or create derivative works from Platform content
• Circumvent rate limits, access controls, or security measures

Harmful Content:

• Upload malware, viruses, or harmful code
• Distribute spam or unsolicited communications
• Post content that promotes violence, hatred, or discrimination
• Harass, threaten, or abuse other users
• Violate the intellectual property rights of others
• Post content that is defamatory, obscene, or illegal

The following are prohibited because they would make your use of a custodial account a regulated activity, expose our custody partner to obligations it has not underwritten, or defeat the controls that keep the Platform lawful.

Acting for others:

• Transacting on behalf of an undisclosed third party
• Using your account or custodial wallets as a pass-through to move funds for someone else, including layering, nesting, or "smurfing"
• Accepting funds from, or sending funds to, a person whose identity you conceal from us
• Selling, renting, or sharing access to your verified account

Operating a financial business through the Platform:

• Running an exchange, brokerage, remittance service, payment processor, escrow service, or money services business through your account
• Providing custody, wallet, or payment services to third parties from your Heart.Fi balance
• Aggregating other people's funds into your account

Investment and securities activity:

• Offering or selling securities, tokens, or investment products
• Soliciting investment, promising or implying a financial return, or describing a donation as an investment, loan, profit share, or revenue share
• Operating a fund, pool, or collective investment arrangement
• Providing regulated financial, investment, or insurance advice through campaigns or profiles

Gambling and prize activity:

• Gambling, betting, lotteries, raffles, sweepstakes, prize draws, or games of chance, including "donate to enter" mechanics

Commerce disguised as donation:

• Accepting payment for goods or services through the donation flow in order to avoid chargeback rights, consumer protection rules, or card network rules
• Offering rewards, equity, tokens, or any other consideration in exchange for a donation
• Debt collection or the sale or transfer of receivables

Circumventing verification:

• Submitting forged, altered, borrowed, or stolen identity documents
• Presenting another person's documents, image, or biometrics as your own
• Providing false information about your identity, address, nationality, occupation, beneficial ownership, or source of funds
• Attempting to verify on behalf of another person, or arranging for someone else to verify on your behalf
• Using synthetic or AI-generated identity documents, images, or liveness footage

You agree to:

Identity and Information:

• Provide accurate and truthful information during registration and identity verification
• Keep your account information, identity documents, and address current
• Not create accounts using false identities or information
• Respond within a reasonable time to requests for additional information or documentation from us or our custody partner

Account Security:

• Maintain the confidentiality of your login credentials and any second factor
• Keep control of the email address and recovery methods attached to your account
• Report suspected unauthorized access immediately to info@heart.fi
• Not share your account with anyone

Because Heart.Fi wallets are custodial, your account credentials are what protect your funds. Someone who takes over your account may be able to move your balance. If you additionally connect an external self-custody wallet, securing that wallet's keys and recovery phrase remains entirely your responsibility.

Compliance:

• Comply with all applicable laws and regulations
• Obtain any necessary licences or permissions for your activities, including charitable solicitation registration where it applies
• Maintain appropriate records for tax and regulatory purposes, and report income you receive
• Respond to legitimate requests for information from authorities

Community Standards:

• Treat other users with respect
• Report suspicious or abusive behaviour
• Not interfere with other users' use of the Platform

If you create donation campaigns or solicit donations through the Platform:

Truthfulness:

• All campaign descriptions must be accurate and truthful, and images must be your own or licensed to you and must genuinely depict what you claim
• Clearly disclose how donated funds will be used
• Update donors if circumstances change materially, including if the stated need is met or no longer exists
• Do not misrepresent charitable status, endorsement, verification, or affiliation

Authority and beneficiaries:

• Only fundraise for yourself, or for a beneficiary who has authorized you to do so
• Do not publish identifiable information about a beneficiary — especially a child, a patient, or a person in crisis — without the right to do so
• Deliver funds to the stated beneficiary where you have said you will

Compliance:

• Comply with charitable solicitation laws in applicable jurisdictions
• Do not claim tax-deductible status unless the recipient organization independently qualifies
• Maintain records of donations received and their use
• Provide reasonable transparency to donors

Prohibited Campaigns:

• Fundraising for illegal activities
• Campaigns that promote violence, hatred, or discrimination
• Misleading or deceptive campaigns, including fabricated or exaggerated circumstances
• Campaigns impersonating others or misrepresenting affiliations
• Campaigns for bail, fines, or legal defence of violent crime where prohibited by law
• Campaigns that are in substance a sale, an investment offer, or a game of chance (see Section 3)

Our Rights: We reserve the right, but have no obligation, to:

• Monitor Platform use and transactions for AUP and legal compliance
• Investigate suspected violations, and request documentation from you
• Remove or disable access to violating content, and delist campaigns
• Suspend or terminate accounts for violations
• Instruct our custody partner to freeze or hold funds
• Report illegal activity to law enforcement and file regulatory reports
• Cooperate with legal and regulatory investigations

Enforcement Actions: Violations may result in:

• Warning notices
• Temporary suspension of your account or of specific features
• Limits on transactions or withdrawals
• A freeze on your balance
• Permanent account termination
• Legal action
• Reporting to law enforcement or regulatory authorities

Effect on your funds. Where lawful and operationally possible, we will allow you to withdraw a remaining balance to a bank account or external wallet in your own name after an enforcement action. Where a sanctions obligation, court order, or other legal requirement prohibits returning funds to you, we cannot, and we may be prohibited from explaining why. See Section 19 of the Terms of Service.

Notice. We will give you notice of enforcement action where we are able to. In some cases — a legal prohibition on tipping off, an active investigation, or an immediate security risk — we cannot give notice in advance or explain our reasons.

Appeals: If you believe enforcement action was taken in error, contact us at info@heart.fi with supporting information. We will review appeals in good faith. Our decisions are final, and we cannot override a decision our custody partner or a regulator requires.

If you become aware of any violation of this AUP, please report it to:

Email: info@heart.fi Subject Line: "AUP Violation Report"

You can also report a campaign or profile from within the Platform.

Please include:

• Description of the violation
• Username, campaign, or wallet address involved (if known)
• Any supporting evidence or screenshots
• Your contact information (optional)

We investigate reports promptly and maintain reporter confidentiality where possible. Do not submit knowingly false reports.

We may update this AUP at any time. Continued use of the Platform after changes constitutes acceptance. Material changes will be communicated through the Platform or via email, and may require you to review and accept the updated terms before continuing to use affected features.