By default it uses whatever is in registries.conf for unqualified-search-registries. You can specify in the fully qualified image name if you'd like.

I can't speak to what Docker Inc. is okay with or not.