Hi and welcome to the Developer Forum!
Bring your own key application are not strictly prohibited, but it is strongly suggested that users do not use their API keys outside of their own private infrastructure, regardless of where it is stored.
Developers should use their own API key and users should pay you for access. End users should not be using API keys, they are for developers.