Acceptable use
Highwind lets you create and publish an app in minutes. To keep the platform safe for everyone (you, your apps’ visitors and other users), some uses are forbidden. This page sums up the rules from the terms of use and explains how moderation and reporting work.
What’s forbidden
Section titled “What’s forbidden”You may not use Highwind to:
- create phishing pages or impersonate a person, a brand or a service (fake bank login page, fake government site, fake store of a brand…);
- spread malware, scams or spam;
- publish illegal content: hate, violence, terrorism, child exploitation, counterfeiting…;
- collect personal data without a legal basis or without informing people;
- attack, overload or bypass the limits and protections of Highwind or third parties;
- resell or share access to the service without permission.
A few examples
Section titled “A few examples”| Allowed | Forbidden |
|---|---|
| A sign-in page for the accounts of your own app (with its backend) | A page copying the logo and login screen of a bank or a well-known service |
| A newsletter sign-up form that explains what the address will be used for | Collecting emails or phone numbers without saying so, to resell them or send spam |
| A store selling your products with real payments (Stripe, Mollie…) | A fake store that takes money and never delivers |
| A site presenting a brand whose name you have the right to use | A site passing itself off as a brand, a person or a government agency |
You’re responsible for your published apps
Section titled “You’re responsible for your published apps”By publishing an app, you become its publisher: you’re responsible for its content and for the personal data it collects. You commit to following the applicable law: informing users, protecting their data, holding the rights to the copy and images you use. See Privacy.
Automatic checks
Section titled “Automatic checks”Before every publish, Highwind checks your app:
- Phishing detection. Highwind looks for typical signals in the code: password or credit card fields, requests for a crypto wallet recovery phrase, or wording like “your account is suspended” combined with a well-known brand. The vast majority of apps show no signal and go straight through. If there are some, an AI model examines the app: an app judged dangerous is not published, and a doubtful one is flagged to the Highwind team for review.
- Database security. If the app has a backend, a critical flaw that would expose its users’ data also blocks publishing. See Security.
Report an app
Section titled “Report an app”Every app published with Highwind shows, at the bottom right, a small Made with Highwind badge with a flag button (“Report this app”). Any visitor can use it, without a Highwind account.
- On the app in question, click the flag next to the Made with Highwind badge. The Report an app form opens on highwind.app, with the app already filled in (Reported app).
- Pick the reason (Why are you reporting it?):
- Phishing (fake login page);
- Scam or fake shop;
- Malware or suspicious download;
- Illegal or shocking content;
- Impersonates a brand or a person;
- Other.
- Add Details (optional): what you saw, what you were asked for.
- Leave Your email (optional) if you want to be kept posted.
- Click Send report.
Your report only goes to the Highwind team, never to the app’s creator. Your IP address isn’t stored in clear (only a non-reversible hash, to prevent abuse).
What happens next
Section titled “What happens next”- Every report is reviewed by the Highwind team. Several reports about the same app in a short time get it handled first.
- If the app breaks the rules, it’s taken down.
- Its creator’s account may be suspended or closed, without notice in urgent cases (phishing, illegal content). A suspension stops builds in progress, takes published apps down and deletes their databases.
A suspended account sees the Account suspended message when signing in. If you think it’s a mistake, write to the Highwind team.
Report a security vulnerability
Section titled “Report a security vulnerability”A vulnerability in Highwind itself (rather than a fraudulent app) is reported by email to securite@highwind.app. See Security.