Terms of Service

These Terms of Service ("Terms") govern your access to and use of auth.ng, including our sign-in pages, identity verification flows, account dashboard, developer console, and related services (together, the "Service"). By creating an account, verifying your identity, or using auth.ng to sign in to a connected app, you agree to these Terms. If you don't agree, please don't use the Service.

If you're using auth.ng on behalf of a company as a developer or client, you're also agreeing on that company's behalf, and you're confirming you have the authority to do so.

auth.ng is a brand of Bolrach Technologies Limited, and it's the entity you're contracting with under these Terms. auth.ng is an identity, verification, and sign-in service built for Nigerian users and the apps they use. It gives people one verified identity they can reuse to sign in across participating apps, instead of creating a new account and repeating verification everywhere they go. auth.ng is currently in a pre-launch phase, which means parts of the Service, including specific verification methods and partner integrations, are still being built out and may change before general availability.

You must be at least 18 years old to create an auth.ng account. By registering, you're confirming that you meet this age requirement and that you have the legal capacity to enter into these Terms under the laws of your jurisdiction.

We may decline to open an account, or may suspend one, where we reasonably believe a user doesn't meet this requirement or where we're required to do so by law.

When you create an auth.ng account, you agree to provide accurate, current information and to keep it up to date. Your profile photo should be one real, recent photo of you, not a logo, illustration, celebrity image, or a photo of someone else. This matters because auth.ng's whole value to the apps you sign in to is that the person behind the account is real and verified.

• You're responsible for keeping your password, passkeys, and any recovery methods secure.
• You're responsible for activity that happens under your account, unless it's the result of our own security failure.
• Tell us right away at [email protected] or through a support ticket if you think your account has been compromised.
• One person, one account. Don't create accounts for other people or share your login with someone else.

You agree to use auth.ng only for lawful purposes and in line with our Acceptable Use Policy, which sets out in more detail what's not allowed, things like creating fake or duplicate identities, impersonating someone else, trying to defeat or bypass our verification checks, scraping the Service, or using auth.ng to enable fraud on a connected app. A breach of the Acceptable Use Policy is a breach of these Terms and can lead to suspension or termination of your account.

Part of what makes auth.ng useful is that we verify people, not just email addresses. When you go through verification, you consent to us collecting and processing the information needed to confirm your identity, this can include your name, date of birth, a government-issued document, and a live selfie or short liveness check, and to us running that information through secure, encrypted checks.

Our approach is designed to be privacy-first: wherever possible, we store and share your verification status (for example, "identity verified") with connected apps rather than the underlying document numbers themselves. auth.ng is not currently connected to NIMC or any other national identity database, we're building our own in-house verification engine, and we'll be clear in the product about exactly what's being checked at any given time.

You're responsible for submitting genuine documents that belong to you. Submitting a forged, altered, or someone else's document is a serious breach of these Terms and may be reported where the law requires it.

If you register an app or client to use "Login with auth.ng," you agree to a few extra obligations on top of the ones above:

• Only request the scopes and profile data your app actually needs, and explain to your users why you're asking.
• Don't use data you receive through auth.ng for anything beyond what you told your users and what they consented to.
• Don't sell, rent, or pass along a user's auth.ng profile data to a third party without that user's clear consent.
• Keep API keys, client secrets, and webhook signing keys confidential, and rotate them if you suspect they've leaked.
• Tell us promptly if you discover a security issue affecting auth.ng users, through a support ticket marked urgent.

We can suspend a client's access if we reasonably believe it's misusing user data, harming users, or breaking these Terms, and where possible we'll try to give notice first.

Our Privacy Policy explains what we collect, why we collect it, and how it's protected, and it's part of these Terms. In short: we collect what we need to verify you and keep the Service secure, we encrypt data in transit and at rest, and we don't sell your personal information.

The auth.ng name, logo, and the design, code, and content of the Service belong to Bolrach Technologies Limited, except for content you provide yourself (like your profile photo). We grant you a limited, personal, non-transferable right to use the Service for its intended purpose. You don't get any ownership rights in auth.ng by using it.

Please don't copy, reverse-engineer, or reuse our branding, verification badges, or design system without our written permission.

auth.ng is currently a pre-launch product, and features, verification methods, and availability can change as we keep building. The Service is provided on an "as is" and "as available" basis. To the extent allowed by law, we don't make promises that the Service will be uninterrupted, error-free, or fit for a particular purpose beyond what we say in these Terms.

We do not claim, and you should not assume, that auth.ng verification is connected to or endorsed by NIMC or any other government identity system. Verification on auth.ng reflects checks performed by our own systems and, where used, by our licensed partners.

To the maximum extent permitted by law, Bolrach Technologies Limited won't be liable for indirect, incidental, or consequential damages arising from your use of the Service. Nothing in these Terms limits liability that can't be limited under Nigerian law, including liability for fraud or gross negligence on our part.

You can close your auth.ng account at any time from your account settings or by asking us through a support ticket. We may suspend or close an account where we reasonably believe these Terms or the Acceptable Use Policy have been broken, where verification fails or turns out to be fraudulent, or where we're required to by law.

Where practical, we'll tell you why and give you a chance to respond first. Some information may be retained after closure where we have a legal or security reason to keep it, as described in our Privacy Policy.

We may update these Terms as the Service grows, especially during this pre-launch period. If a change is significant, we'll let you know in the product or by email before it takes effect. Continuing to use auth.ng after a change becomes effective means you accept the updated Terms.

These Terms are governed by the laws of the Federal Republic of Nigeria, without regard to its conflict-of-laws rules. Any dispute arising from these Terms or your use of auth.ng will first be raised with us through a support ticket so we can try to resolve it directly. If that doesn't work, the dispute will be subject to the exclusive jurisdiction of the courts of Nigeria.

Questions about these Terms can go to [email protected]. For account or product support, please open a support ticket from your dashboard rather than emailing, it gets you to the right team faster.