Terms of Service

Version 2026-09-05.2-uae-draft · Prepared under the laws of the United Arab Emirates

Draft. Prepared for review by UAE counsel and not yet in force. Published so that the commitments below can be checked against what the software actually does before they are finalised.

1. Who we are and what this covers

Zanii ID is an identity service operated by Zanii ("Zanii", "we"), a business established in the United Arab Emirates, reachable at info@zanii.agency. These terms govern (a) your use of a Zanii ID account as an individual ("you") and (b) an organization's registration of applications that sign users in through Zanii ID ("Relying Party"). By creating an account, or by registering an organization, you accept these terms. Acceptance given electronically is binding under Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services; we record the version accepted and when.

2. The service

Zanii ID lets a person hold one account and sign in to applications that integrate with it using the OpenID Connect standard. It proves that a person controls an account and, where enabled, a second factor; it is not a government digital identity, not a licensed trust service under Federal Decree-Law No. 46 of 2021, and does not verify legal identity. A verified email address means control of that inbox was demonstrated, nothing more.

3. Your account

You must be at least 18 years old and provide an email address you control.
You are responsible for your password, authenticator, passkeys and recovery codes. We recommend two-step verification; some applications require it.
From your account page you can, at any time and without asking us: change your name, email and password; add or remove passkeys and two-step verification; see and end sessions; see every application you granted access to and revoke it; and delete your account.
If your email address is changed, we notify the previous address with a link that reverses the change and signs out every device.
We may suspend an account used to attack the service or other users, or as required by law, and will tell you why unless the law prevents it.

4. Relying Parties

An organization that registers applications agrees that it:

is the data controller for what it does with the information it receives, and processes that information under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where applicable, the data protection law of the free zone in which it is established;
uses the subject identifier issued to it only for its own users and does not attempt to correlate it with identifiers issued to other organizations;
requests only the scopes it needs and describes its application truthfully on the consent screen;
honours lifecycle events, in particular user.deleted and consent.revoked, by deleting or ceasing to use the affected data without undue delay;
keeps its client secret and webhook secret confidential and rotates them if exposed;
does not present its application as operated by Zanii, and does not use Zanii's name or marks without written permission;
stays within the quotas assigned to it and does not use the service to send unsolicited communications.

Our data processing agreement (available on request and at docs/legal/dpa.md) forms part of these terms for Relying Parties. We may disable an organization that breaches this section; its users keep their accounts.

5. Acceptable use

You may not attempt to access accounts other than your own, probe or overload the service, bypass rate limits or security controls, or use the service for anything unlawful in the United Arab Emirates, including conduct prohibited by Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes. Good-faith security research reported to info@zanii.agency is welcome.

6. Your data

How we handle personal data is set out in the Privacy Policy, which forms part of these terms. In short: we hold the minimum needed to run an identity service, share with an application only what you approved, and never use your data for marketing.

7. Changes to the service and to these terms

We may change the service with reasonable notice to registered organizations. We may change these terms; the version number above changes when we do, and we give at least 30 days' notice by email to account holders and organizations before a change that reduces your rights takes effect. Continued use after the effective date is acceptance; if you do not accept, you may delete your account or your organization.

8. Availability

The service is provided as it stands. Unless a separate written agreement says otherwise, we do not guarantee uninterrupted availability. We publish a health endpoint and keep daily backups.

9. Liability

Nothing in these terms excludes or limits any liability that cannot be excluded or limited under the laws of the United Arab Emirates, including the rights of consumers under Federal Law No. 15 of 2020 on Consumer Protection, as amended, and its Executive Regulations. Subject to that, Zanii's total liability to an organization arising out of the service in any twelve-month period is limited to the fees that organization paid for the service in that period, and Zanii is not liable for indirect or consequential loss. Zanii is not responsible for what a Relying Party does with the data it receives; that is the Relying Party's responsibility as controller.

10. Governing law and disputes

These terms are governed by the federal laws of the United Arab Emirates as applied in the Emirate of Dubai. Any dispute that cannot be settled by discussion within 30 days is subject to the exclusive jurisdiction of the onshore courts of Dubai. Consumers keep any right they have under UAE law to bring a complaint before the competent consumer protection authority.

11. Contact

Zanii · info@zanii.agency. Notices to you go to the email address on your account or organization.