Blockroll, Inc. (“Blockroll”, “we”, “our”, or “us”) is committed to protecting your personal data and ensuring transparency in how we handle your information. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with applicable laws, including the Nigeria Data Protection Regulation (NDPR), the General Data Protection Regulation (GDPR), and other relevant data protection standards.
1. Information We Collect1.0. Information Provided by You
We may collect and process the following personal data you provide:
- Full legal name, email address, and phone number
- Identity documents (e.g., BVN, NIN, passport, utility bills)
- Address details and financial account information
- Social media identifiers when relevant
1.1. Facial Image and Biometric Data (Smile Identity)
For identity verification purposes, we collect selfie images and facial data through our third-party verification provider, Smile Identity.
- This data is processed securely by Smile Identity to confirm the authenticity of user identities and prevent fraudulent activity.
- Facial data is used solely for KYC (Know Your Customer) compliance, fraud detection, and regulatory obligations.
- This information is never sold or shared beyond the identity verification process.
- Facial data is retained only as long as legally required, after which it is deleted in accordance with regulatory standards and Smile Identity’s retention policy.
- Blockroll does not directly store or access the raw facial recognition outputs. All processing occurs via secure channels provided by Smile Identity.
1.2. Biometric Authentication (Device-Based)
Blockroll supports optional biometric login functionality using the native features of your mobile device:
- iOS Devices: Face ID and passcode, via Apple’s TrueDepth API
- Android Devices: Fingerprint scanner and passcode
- Biometric login is processed solely on your device
- Used for app access and account security
- Not collected, stored, or transmitted to Blockroll servers
2. Automatically Collected InformationWe collect technical and usage-related data including:
- IP address, device type, OS version, browser type
- Location data (if permitted)
- In-app behavior and session activity
- Diagnostic logs and crash reports
This information helps us maintain and improve our services.
3. How We Use Your InformationYour information is used for the following purposes:
- Verifying your identity and completing KYC/AML checks
- Processing transactions and currency conversions
- Securing access to your account via biometrics and passcodes
- Personalizing and improving your experience
- Complying with applicable laws and regulations
We do not use your personal data for purposes unrelated to our service without your explicit consent.
4. Data Sharing and DisclosureWe do not sell personal data. We share your data only when necessary, including:
- With identity verification providers (e.g., Smile Identity)
- With regulated financial partners and infrastructure providers
- With third-party processors under strict data protection obligations
- With authorities when legally required
All sharing complies with NDPR, GDPR, and relevant local laws.
5. Data Storage and SecurityWe maintain strict technical and organizational measures to protect your data:
- Encrypted transmission and storage of sensitive information
- Secure biometric authentication at the device level
- Regular audits and vulnerability assessments
- Role-based access controls and secure cloud infrastructure
We do not store biometric identifiers or facial scan data collected via TrueDepth or Smile Identity.
6. Data RetentionWe retain your personal data only for as long as necessary:
- Transaction records: minimum five (5) years
- Account and identity data: until account closure
- Facial data (via Smile Identity): for the duration required by applicable KYC laws
- Marketing preferences: until consent is withdrawn
Upon deletion of your account or withdrawal of consent, data is securely erased unless retention is legally mandated.
7. International TransfersYour data may be transferred to and processed in countries outside your location.
- Transfers are made in compliance with applicable data protection laws
- Adequate safeguards are in place to protect your information
8. Your Rights- Access and receive a copy of your data
- Correct or update your personal information
- Withdraw consent or restrict processing
- Request deletion of your data, subject to retention obligations
- Request data portability where applicable
To exercise any of these rights, contact us at hello@blockroll.app.
9. Children’s PrivacyOur services are intended for users aged 18 and above.
- We do not knowingly collect data from individuals under this age threshold
10. Policy UpdatesThis Privacy Policy may be updated periodically.
- Users will be notified of material changes through appropriate communication channels
- Continued use of our services constitutes acceptance of the updated policy
11. Contact InformationFor inquiries, requests, or complaints related to this Privacy Policy, please contact:
- Email: hello@blockroll.app
- Mailing Address: 8 The Green Ste R, Dover, Delaware, 19901, USA
By using our services, you acknowledge and agree to the practices described in this policy.
Last Updated: April 4, 2025