Privacy Policy

Last Updated: September 17th, 2025.

1. Introduction

Celler (“we,” “our,” or “us”) is committed to protecting your privacy.

We are a data controller of your personal data, meaning we determine the purposes and means of the processing when you visit our Website, our application, and/or use our Services.

This Privacy Policy (the “Policy”) provides information to whom it applies, grounds for data processing, data processing description, regulatory requirements and specifics, and other information to transparently and comprehensively inform you about all aspects of privacy, including your limitations and rights.

If this Policy does not meet your needs, we kindly ask you not to use our Service. By continuing to visit our Website it will be considered that you accept this Policy. As a user of our Services, you will be informed about this Policy when registering. If you do not accept it, you will not be able to register and/or use our Services. Should you have any questions please reach out to our legal team at compliance@celler.app or our data privacy officer at privacy@celler.app.

This Privacy Policy may be revised, modified, updated, or supplemented at any time, without prior notice, at our sole discretion. When we make changes to this Privacy Policy, we will notify all users on our Website, and make the amended Privacy Policy available on our Website. By further using our Services it will be considered you accept with the implied changes.

This privacy policy is an integral part of Celler Terms of Service and is of informative nature.

2. What is Personal Data?

Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, and similar, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

As we receive personal identification data, such as ID documents, as well as certain economic data, it is important for you to understand how we treat your data and the purposes for which we process it.

Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Through this Policy, we aim to inform you about how we process the personal data collected through our website and application. This includes details about the personal data we collect, the reasons for collecting it, the legal grounds for the collection, how we use and disclose it, your choices, and your obligations and rights considering privacy matters.

3. Contact Information

If you have questions or concerns about this Privacy Policy or your personal data, please contact us: Celler Support Email: support@celler.app Website: https://www.celler.app

4. Validity and Termination

By confirming “I confirm that I am at least 18 years old and I agree to the User Agreement and accept the Privacy Policy” during the registration process button you confirm you accept to this Policy which is mandatory for using our Services and becoming our customer.

This Policy applies to you either as an individual user or as a legal or authorised representative, or ultimate beneficial owner (and altogether “User”, and/or “You”).

In the scope of solely visiting the Website, our Cooky Policy applies to all Website visitors. Our Cooky Policy includes information on the different types of cookies we are using and your active consent will be required for all non-essential cookies. We use cookies and other tracking technologies to ensure the Website and our application are working smoothly, and for other purposes, for example, to improve or enhance user experience, for marketing or analytical purposes, and similar.

This policy is valid for as long as you use our Services, and ceases to be valid when you stop using our Services.

Since we are subjected to Money Laundry Act, we have certain reporting and data retention obligations even after the termination of the business relationship with you, and some of your rights (e.g. to deletion) may also be limited.

5. Data We Collect

We may collect and process the following personal data:

  • Identification data (full name, date of birth, gender, nationality, government-issued ID, selfie/liveness verification data ).
  • Contact data (email address, phone number, residential address).
  • Financial data (bank account details, transaction history, wallet addresses).
  • Device and usage data (IP address, browser type, operating system, device identifiers, app usage logs, crash reports).
  • Compliance data (KYC verification results, AML checks, sanctions screening).

6. Use of TrueDepth API

  • We use facial recognition technology via the TrueDepth API solely to verify user identity and liveness during onboarding.
  • This Data is securely transmitted to our identity verification provider, SmileID, for the duration of the verification process (up to one hour) and is permanently deleted immediately after the verification process is completed.
  • For more information on SmileID's handling of biometric data, please see their documentation: https://docs.usesmileid.com
  • This data is used for compliance with KYC requirements, processed securely, and never shared.
  • We do not use face data for advertising or profiling.

7. Purposes of Processing

We process your personal data for the following purposes:

  • To provide, operate, and improve our Services.
  • To verify your identity (KYC/AML compliance).
  • To process transactions (deposits, withdrawals, payments).
  • To prevent fraud, financial crime, and unauthorized activity.
  • To comply with legal obligations under applicable laws (e.g. AML/CFT regulations).
  • To provide customer support and communicate with you.

8. Legal Grounds for Processing

We rely on the following legal bases:

  • Your consent (for non-essential processing such as marketing).
  • Performance of a contract (to deliver Services you requested).
  • Compliance with legal obligations (AML/CFT, reporting requirements).
  • Our legitimate interests (fraud prevention, service improvement).

9. Sharing of Personal Data

We do not sell your personal data. We may share it with:

  • Licensed Payout Partners & Service Providers (e.g., Quidax, licensed payment processors) for processing transactions and compliance.
  • Regulatory and law enforcement authorities when required by law.
  • Third-party service providers (e.g., hosting, analytics, identity verification).

10. International Use

Currently, our Services are only available in Nigeria. If you access our app from outside Nigeria, you do so at your own discretion.

11. Data Retention

We retain personal data as long as your account is active or as required by law/regulations (e.g., AML/KYC obligations). When no longer required, we securely delete or anonymize your data.

12. Security of Personal Data

We implement industry-standard security measures, including encryption and access controls, to protect your information. However, no method of transmission or storage is 100% secure.

13. Your Rights

You have the right to:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data (subject to legal obligations).
  • Object to or restrict certain types of processing.
  • Withdraw consent for processing where applicable.

To exercise your rights, contact us at support@celler.app.

14. Children’s Privacy

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect data from children.

15. Updates to this Policy

We may update this Policy from time to time. Updates will be posted on this page with a revised effective date. Continued use of our Services constitutes acceptance of the updated Policy.