SULUHU ACCEPTABLE USE POLICY

You must use Suluhu in compliance with all applicable laws and regulations.

You must not use Suluhu to:

• commit a crime;
• facilitate criminal activity;
• defraud another person;
• evade legal obligations;
• violate court orders;
• facilitate unlawful transactions; or
• assist another person in unlawful activity.

Users must provide accurate information.

You must not:

• impersonate another person;
• create fraudulent accounts;
• submit false documents;
• misrepresent qualifications;
• misrepresent business ownership;
• provide false contact information; or
• deliberately provide misleading information.

Users are responsible for protecting their account credentials.

You must not:

• share your password;
• allow unauthorized persons to use your account;
• sell your account;
• rent your account;
• transfer your account without authorization; or
• attempt to access another user's account.

If you suspect unauthorized access, you must notify Suluhu promptly.

The following activities are prohibited:

• payment fraud;
• fake Bookings;
• fake cancellations;
• fraudulent refunds;
• false complaints;
• fake reviews;
• fake identities;
• fraudulent verification documents;
• manipulation of transaction records;
• manipulation of OTPs;
• location spoofing;
• account farming;
• collusion; and
• other deceptive conduct.

You must not interfere with the proper operation of Suluhu.

Prohibited conduct includes:

• manipulating rankings;
• manipulating ratings;
• artificially generating Bookings;
• exploiting technical vulnerabilities;
• scraping Platform data without authorization;
• using bots without authorization;
• reverse engineering Platform systems;
• bypassing security controls;
• introducing malware; or
• attempting unauthorized access.

Users must not deliberately circumvent Suluhu's payment mechanisms.

Examples include:

• moving a Suluhu Booking off-platform to avoid applicable fees;
• falsifying payment status;
• manipulating transaction records;
• using fraudulent payment methods;
• encouraging another user to bypass Platform payment systems; or
• exploiting refunds or credits.

Nothing in this section prevents transactions that are genuinely unrelated to Suluhu and independently initiated, subject to applicable contractual obligations.

Users must treat others respectfully.

Prohibited conduct includes:

• harassment;
• bullying;
• threats;
• intimidation;
• stalking;
• abusive conduct;
• discriminatory conduct;
• sexual harassment;
• unwanted sexual conduct;
• extortion; and
• deliberate humiliation.

Suluhu may take immediate action where conduct creates a credible safety concern.

You must not use Suluhu in a manner that creates an unreasonable risk of harm.

Prohibited conduct includes:

• intentionally exposing another person to dangerous conditions;
• performing services while severely impaired;
• deliberately damaging property;
• threatening violence;
• bringing unauthorized weapons to a service location;
• creating dangerous working conditions; or
• requesting unsafe or unlawful Services.

Suluhu may prohibit certain categories of Services.

Users must not use the Platform to facilitate:

• illegal services;
• fraudulent services;
• trafficking;
• exploitation;
• forced labour;
• prostitution or sexual services;
• sale of illegal drugs;
• unlawful weapons transactions;
• stolen goods;
• counterfeit goods;
• hacking services;
• malware distribution;
• identity theft;
• financial fraud; or
• other unlawful activities.

Suluhu may restrict additional categories where necessary for safety, legal, regulatory, or operational reasons.

Users must respect property belonging to other users.

You must not:

• steal;
• intentionally damage;
• misuse;
• remove without permission;
• conceal; or
• retain

another person's property.

Users must not misuse personal information obtained through Suluhu.

You must not:

• collect unnecessary personal information;
• sell another user's information;
• publish another user's information;
• use another user's information for unrelated marketing;
• share personal information without authorization; or
• retain personal information unnecessarily.

Service Providers must comply with Suluhu's Privacy Policy and applicable data protection law when handling Customer information.

Users must not upload content that:

• is unlawful;
• infringes copyright;
• contains malicious code;
• is fraudulent;
• is deliberately misleading;
• contains unnecessary private information;
• constitutes harassment;
• contains sexually explicit material unrelated to a legitimate Platform purpose;
• promotes violence or criminal activity; or
• violates another person's rights.

You must not upload or distribute content that infringes another person's intellectual property rights.

You must have the necessary rights to use photographs, logos, documents, trademarks, text, videos, or other content that you upload.

Suluhu may remove content where there is a reasonable basis to believe it violates intellectual property rights or applicable law.

Users must provide honest and genuine feedback.

You must not:

• create fake reviews;
• review yourself;
• review a competitor dishonestly;
• pay for misleading reviews;
• threaten someone over a review;
• retaliate against a user for a negative review; or
• coordinate review manipulation.

Users must use OTPs and other verification mechanisms honestly.

You must not:

• request an OTP without a legitimate purpose;
• submit someone else's OTP;
• manipulate OTP records;
• falsely claim attendance;
• falsely claim Job commencement; or
• falsely claim Job completion.

Users must not manipulate location information for fraudulent or unauthorized purposes.

This includes:

• GPS spoofing;
• falsifying service location;
• pretending to be at a Customer location;
• falsely reporting arrival; or
• manipulating geofencing systems.

Users must not circumvent:

• authentication;
• identity verification;
• payment controls;
• subscription controls;
• geographic restrictions;
• account restrictions;
• fraud controls;
• OTP verification;
• dispute procedures; or
• other Platform safeguards.

Users may not create multiple accounts for the purpose of:

• avoiding suspension;
• manipulating ratings;
• obtaining promotional benefits repeatedly;
• committing fraud;
• circumventing limits; or
• otherwise abusing the Platform.

Suluhu may permit multiple accounts where reasonably necessary for legitimate business purposes.

Unless expressly authorized by Suluhu, users must not use:

• bots;
• crawlers;
• scrapers;
• automated scripts;
• automated account creation systems; or
• other automated systems

to access or interact with the Platform.

Users must not conduct security testing, penetration testing, vulnerability scanning, or other security assessments against Suluhu systems without prior written authorization.

If you discover a security vulnerability, you should report it to Suluhu through the designated security contact.

Users must not use Suluhu to exploit, abuse, endanger, or unlawfully interact with children.

Any suspected child exploitation or abuse may be reported to appropriate authorities.

Users must not attempt to circumvent enforcement action by:

• creating a new account;
• using another person's account;
• changing identifying information;
• falsifying documents;
• manipulating devices; or
• otherwise evading Platform restrictions.

Where Suluhu reasonably believes that this Policy has been violated, it may take appropriate action.

Actions may include:

• warning;
• content removal;
• Booking cancellation;
• temporary restrictions;
• payment review;
• withholding or delaying payment where contractually and legally permitted;
• account suspension;
• permanent account termination;
• removal from the Platform; or
• referral to relevant authorities.

The action taken will depend on the seriousness and circumstances of the violation.

Suluhu may immediately restrict or terminate access where necessary to address serious risks, including:

• credible threats of violence;
• serious fraud;
• identity theft;
• sexual exploitation;
• serious harassment;
• child exploitation;
• serious security attacks;
• criminal activity; or
• significant risks to users or the Platform.

Where legally required or appropriate, Suluhu may report suspected criminal activity to relevant authorities.

Users may report suspected violations through:

Email: info@suluhu.net

Telephone: +254707776447

In-App Reporting: Directly contact support through the platform

Reports should provide enough information for Suluhu to investigate.

False or malicious reports may themselves constitute a violation of this Policy.

Suluhu may investigate suspected violations.

Users may be required to provide relevant information or cooperate with an investigation.

Suluhu may review information reasonably relevant to the investigation, including:

• account information;
• Booking information;
• communications;
• payment records;
• OTP records;
• location records;
• photographs;
• ratings;
• complaints; and
• technical logs.

Suluhu will handle personal data in accordance with its Privacy Policy and applicable law.

Where Suluhu suspends or terminates an account, the affected user may request a review where an appeal process is available.

Appeals should provide relevant facts or evidence that may assist Suluhu in reviewing the decision.

Suluhu may maintain restrictions where necessary for safety, fraud prevention, legal compliance, or other legitimate reasons.

Suluhu may update this Acceptable Use Policy to reflect:

• changes to the Platform;
• new services;
• emerging risks;
• legal requirements;
• security requirements; or
• changes in marketplace practices.

Material changes will be communicated through reasonable means where required.

This Policy forms part of Suluhu's Platform rules and should be read together with:

• Suluhu Terms of Service;
• Service Provider Agreement;
• Privacy Policy;
• Refund and Cancellation Policy;
• Community Guidelines; and
• other applicable Platform policies.

A violation of this Policy may also constitute a breach of the applicable Terms or Service Provider Agreement.

This Policy shall be governed by the laws of the Republic of Kenya.

Nothing in this Policy limits any rights or remedies available under applicable law.

SULUHU ON DEMAND SERVICES LIMITED

Email: info@suluhu.net

Telephone: +254707776447

Address: Duldul Business Park Phase III, Mombasa Road, Kenya

Version: 1.0 Effective Date: 11th August 2026