Developer Terms of Service

Version 1.0 - September 7, 2026. These terms govern your use of the Login with U services (the "Services"): the OpenID Connect identity provider at accounts.u.cash, the developer portal at developers.u.cash, and the U Balance payment features. By registering a client application you accept these terms on behalf of yourself and the organization you represent.

1. Accounts and eligibility

• You must hold a U Account in good standing to register as a developer. Multi-factor authentication is required before an application can be created.
• You are responsible for the accuracy of your registration information, for safeguarding your client secret, and for all activity under your developer account.
• You must be at least 18 years old or have the legal capacity to form a binding contract in your jurisdiction.

2. The Services and your license

• Subject to these terms, U.CASH grants you a limited, revocable, non-exclusive, non-transferable license to integrate the Services with your application: to authenticate U Account holders via the OAuth 2.0 / OpenID Connect endpoints, to read the claims the user consented to share, and (for payment-enabled applications) to request payment from the user's U Balance as described in Section 6.
• The Services are provided as-is. We may add, change, deprecate, or remove features, endpoints, or claim fields, with reasonable advance notice in the documentation where practicable.
• No service level is guaranteed. The Services carry per-client and per-IP rate limits and may be throttled, suspended for maintenance, or interrupted without liability.

3. Your application

• Register only redirect and post-logout URIs and endpoints on domains you control. Domain verification (DNS TXT) is required for redirect URIs to become active, and we re-verify domains periodically; a domain whose verification record disappears has its URIs deactivated.
• Verify every ID token and Logout Token signature against the published JWKS before trusting it. Never accept unverified tokens.
• Keep your client secret confidential. Rotate it immediately if exposed. You are liable for all use of your credentials.
• Identify your application accurately at consent screens: the registered application name, and honest descriptions on payment requests.

4. Acceptable use

You will not, and will not assist others to:

• misrepresent your application's identity or purpose, or imply U.CASH endorses or operates your application beyond providing the Services;
• collect claims, scrape, profile, or build dossiers about users beyond what they knowingly consented to share with you;
• circumvent consent, rate limits, domain verification, or authentication; probe or attack the Services or other clients; or resell access to the Services;
• use the Services for unlawful activity, or in a way that harms U Account holders or the U.CASH network;
• use the button kit or marks other than as permitted in the brand guidelines.

5. User data and privacy

• Claims (email, email verification status, name, username, profile picture URL, language) are released to you only per user consent, only for the scopes granted, and only at the consented moment. You become an independent controller of the data you receive and must handle it under your own privacy policy, which you should register on your application so it can be shown to users.
• Users may revoke your access at any time. After revocation, outstanding tokens fail immediately; you must delete or anonymize data you no longer have a lawful basis to keep, and stop all collection.
• You must honor sign-out: when a Logout Token is delivered to your endpoint, terminate the user's local session promptly.
• See the Privacy Policy for how the Services themselves process data.

6. Payments from U Balance

• Payment features let a user pay your application from their U Balance. Every payment requires the user's individual confirmation with fresh multi-factor authentication on a U.CASH-hosted screen; you may never move funds without that confirmation, and no consent, token, or grant carries spend authority.
• You are the merchant of record for your goods and services. You must fulfill what the payment description promised, handle refunds and disputes with your users directly, and not use payment descriptions that misrepresent what the user is paying for.
• Debits are final at completion. Reversals, where warranted (for example fraud or error), are handled through U.CASH support and recorded on the same ledger.
• The Services currently charge no per-payment fee to developers. We reserve the right to introduce fees prospectively, with notice in these terms and the documentation; existing pricing protections under other U.CASH agreements are unaffected.
• Insufficient balance always results in a failed payment. Never present a payment as completed until the completion endpoint returns completed.

7. Suspension and termination

• We may suspend or disable an application (and the associated API access) for violation of these terms, for security or abuse concerns, for suspected fraud or phishing, or as required by law, with or without notice where we reasonably deem it necessary.
• You may stop using the Services and delete your applications at any time in the portal.
• Sections that by their nature survive (data obligations, disclaimers, liability limits) survive termination.

8. Disclaimers and liability

• The Services are provided "as is" and "as available" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.
• To the maximum extent permitted by law, U.CASH's aggregate liability arising from or relating to the Services is limited to the greater of one hundred US dollars (USD 100) or the amounts you paid us for the Services in the twelve months preceding the claim. We are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data.
• You will defend and indemnify U.CASH against third-party claims arising from your application, your data handling, or your breach of these terms.

9. Changes

We may update these terms. Material changes will be noted in the documentation; continued use after the effective date constitutes acceptance. If a change is unacceptable, you may terminate by deleting your applications.

10. Governing law and contact

These terms are governed by the laws applicable to U.CASH's place of business, without regard to conflict-of-law rules. Questions and notices: open a ticket through U.CASH support.