Privacy Policy

Last Updated on Date: 10-28-2026

Nexium (the “Nexium”, “We” “Us” or “Our”) is committed to protecting User’s (“You”, “Your” or “User”) privacy and implementing industry-leading security measures. Soul Super Wallet (the “App”) is a decentralized, non-custodial wallet, meaning we do not collect, store, or control users' biometric data, digital assets, or data. This Policy sets out our commitment and explains in detail what information we may gather from your visit to https://soulverse.world/ or avail the Services by downloading the apk file of the App (the "Website" or "Platform") and, why and how your information may be processed when you use our Services. This Privacy Policy (the “Policy”) outlines the limited data interactions within the App, how such data is used, and users’ rights regarding their information.

The terms of this Policy are applicable to you for accessing our Services as detailed in our Terms & Conditions document that can be accessed via the App. The terms that are capitalized and not defined in this Privacy Policy have been defined in the Terms and Conditions.

1. About the App

1.1 Nexium is an innovative decentralised identity ecosystem designed for Users with full control over their digital sovereignty. It is a Self-Sovereign Identity (SSI), allowing Users to authenticate themselves seamlessly across multiple Platforms without repeatedly entering credentials, this eliminated the needs for mnemonic based private keys by leveraging biometric authentication, which ensures greater security, ease of use, and eliminates the risks associated with password-based systems. The Nexium ecosystem is a fully decentralised, open-source, and portable enabling Users to integrate secure and cost effective identity management solutions to their products and Services.

1.2 As a part of the Platform, Nexium provides access to the App, which is a non-custodian wallet, designed to allow You to manage your decentralised digital assets and credentials, which can be accessed through authorised devices running the appropriate iOS or Android operating systems.

1.3 Soul Super Wallet is a blockchain-based decentralised application (DApp), a comprehensive wallet that allows the Users to manage their digital assets, including cryptocurrencies and NFTs, issue and verify credentials, and interact with decentralized networks within the secure environment of Nexium. The wallet would be able to hold both SSI and all crypto assets such as Bitcoin, Ethers, and NFTs. SoulScan, which eliminates the need for typical seed phrases and passwords; and SoulID, which is one-of-a-kind identification, which shall help the Users to govern their own digital identities without relying on centralized authority.

2. Information we collect

2.1 For this purpose of this Policy, “Data” shall mean any information, whether true or not, that relates to an identifiable individual. This includes, but is not limited to:

• 2.1.1 Information that can be used to identify an individual directly or indirectly;
• 2.1.2 Data collected by Nexium, either directly or indirectly, through its Platform;
• 2.1.3 Biometric data that may be used for authentication purposes;
• 2.1.4 Financial data, including blockchain-related transactions;
• 2.1.5 User identities, including SoulID™ and interactions within the Platform; and
• 2.1.6 Any other information that Nexium may have access to in connection with the provision of its Services.

2.2 No Collection, Storage, or Use of Data

Nexium does not collect, use, store, or disclose any Data as defined above. As a non-custodial ecosystem, Nexium is designed to uphold user privacy and digital sovereignty by ensuring that all interactions remain decentralized and under user control. However, certain limited, non-identifiable data may be processed in specific instances to facilitate interactions within the ecosystem. These instances include:

2.2.1 Blockchain Transactions: The Soul Super Wallet enables users to execute transactions on decentralized networks. However, Nexium does not store any transaction details, wallet balances, or any associated user data. All transaction records are stored directly on the blockchain, which is a public and immutable ledger. Users are advised to review the privacy characteristics of the respective blockchain networks they interact with.

2.2.2 Third-Party collaborations: If users choose to interact with third-party services (such as KYC (Know Your Customer), KYB (Know Your Business), fiat on/off-ramping providers, decentralized applications, or external authentication services), those service providers may collect, use, and process data under their own privacy policies. Nexium Soul Super Wallet does not control how these third parties handle user data, and users are encouraged to review the respective privacy policies of such providers before engaging with them.

2.2.3 AI Assistant Interactions: The Extension may provide access to an AI-powered assistant designed to assist Users with wallet-related information, account guidance, credential-related queries, and transaction preparation. When a User submits a text prompt to the AI Assistant, the submitted prompt may be processed solely for the purpose of generating a response to the User’s request. Where voice input functionality is available, voice recordings are processed locally on the User’s device and converted into text prior to transmission. Only the transcribed text is processed by the AI Assistant. Voice recordings are not collected, retained, or stored by Nexium. The AI Assistant is assistive in nature and does not independently initiate, authorize, sign, approve, or broadcast transactions. Any transaction-related action suggested by the AI Assistant requires the User’s explicit review, confirmation, and authorization before execution. Nexium Soul Super Wallet does not retain AI Assistant prompts, responses, voice recordings, or conversation history beyond what is technically necessary to process and deliver the requested response.

2.2.4. Spam Token Detection and Security Monitoring Soul Super Wallet provides security features designed to identify potentially suspicious, fraudulent, or unsolicited digital assets. To support these features, Nexium processes and stores certain wallet-related information through its spam-token detection service.

2.2.5. This information may include the User's public wallet address, SoulID™ (where applicable), an internal user identifier, blockchain network details, token contract addresses, and records associated with wallet-initiated swap or bridge transactions, including expected token amounts, transaction status, and related verification records.

2.2.6 Information relating to manually imported tokens may also be processed and stored. Token security assessments, including token classifications, reputation scores, and associated risk indicators, are maintained separately from individual User and wallet records.

2.2.7 Such processing is limited to supporting token verification, transaction identification, spam detection, and the security functionality of the App.

2.3 Facial Images and Biometric Authentication Data

For the Soul Super Wallet Chrome Extension, wallet import and authentication do not use facial images or biometric authentication. Wallet import is performed by securely scanning a QR code generated by the Chrome Extension using the Soul Super Wallet mobile application. The Chrome Extension does not capture, process, or transmit facial images during wallet import or authentication.

3. Data Processing and Use

Any Data processed within the Nexium ecosystem is strictly limited to ensuring secure, private, and seamless interactions between users and decentralized technologies. Nexium’s role is limited to facilitating such interactions without retaining or processing user-specific Data beyond what is technically necessary for secure authentication and transaction execution.

4. How do we use the Data?

We do not collect, store or process your Data, however, We may disclose or share your information, without notice, for the primary purposes for which it was collected in accordance with this Policy, including, without limitation:

• 4.1. where you have consented to such disclosure or sharing;
• 4.2. where permitted under the applicable British Virgin Islands laws;
• 4.3. where it is necessary to protect and defend the rights or property of Nexium and/or its users;
• 4.4. where it is necessary to act under exigent circumstances to protect the personal safety of other users on the Platform or the App, or the general public visiting the Platform or the App;
• 4.5. in order to enhance Your experience with our App; and
• 4.6. improve the functionality, reliability and efficiency of our Services.

4.7 How Facial Images Are Processed and Protected: Facial images are used solely to generate or match the User’s biometric vector for the purpose of authenticating the User to their own self-custody wallet. They are not used for advertising, analytics, profiling, marketing, or any purpose unrelated to wallet authentication, recovery, deletion, or security.

Facial images are transmitted only over encrypted HTTPS/TLS connections to SoulWallet’s own backend infrastructure. They are not transmitted to advertising networks, analytics providers, data brokers, marketing partners, third-party identity providers, or external facial-recognition services.

Before submitting a facial image, the App may run a liveness check locally in the browser using face-detection models. Raw video frames, intermediate detection data, rejected images, and browser camera streams are not transmitted off the User’s device. Only the confirmed facial image required for the relevant authentication event is transmitted.

Users may revoke camera access at any time through their browser or device settings. Without camera access, certain wallet creation, login, recovery, or deletion features may not function.

Facial images may be collected and used during the following events:

• Wallet creation, to generate the biometric vector that anchors the wallet identity.
• Wallet login or re-authentication, to verify the User’s identity.
• Wallet recovery, to restore wallet access where applicable.
• Wallet deletion, to verify the User before deleting the biometric record.

The image is not retained on the User’s device after capture. It is captured, encoded, transmitted for the applicable authentication operation, and then released from memory.

5. SoulScan & Biometric Authentication

On supported mobile platforms, SoulScan provides biometric authentication for wallet access and recovery. The Soul Super Wallet Chrome Extension does not use biometric authentication. Instead, users securely import their wallet by scanning a QR code using the Soul Super Wallet mobile application and protect the locally imported wallet with a user-created password.

Chrome Extension Authentication: After importing a wallet through the Soul Super Wallet mobile application, users create a local password to encrypt and unlock their wallet within the Chrome Extension. This password is never transmitted to or stored by Nexium or Soul Super Wallet.

6. Third-Party Integrations

Soul Super Wallet enables users to interact with decentralized applications (dApps) and third-party services, including:

• Blockchain Networks for transaction processing.
• Fiat On/Off-Ramp Providers for cryptocurrency purchases and conversions.
• Credential Verification Services for identity-based interactions, including Know Your Customer (KYC) and Know Your Business (KYB) processes.

Soul Super Wallet facilitates interactions with third-party services, including blockchain networks, fiat on/off-ramp providers, and credential verification services. These services operate independently, and their data collection practices are governed by their respective privacy policies. Soul Super Wallet assumes no responsibility for the data handling, processing, or potential misuse of user information by third-party services. Users engaging in identity verification processes acknowledge that third-party providers may be subject to legal obligations requiring the storage and processing of personal data.

AI and Verification Service Providers: Certain AI Assistant functionalities and identity verification processes may be facilitated through trusted third-party service providers. Such providers process information solely for the purpose of delivering the requested functionality, including AI-generated assistance, facial verification, liveness detection, and identity verification services. These service providers are not authorized to use such information for independent purposes, including marketing, profiling, or training artificial intelligence models, except where expressly permitted under their own applicable terms and privacy policies.

Token Verification and Blockchain Security Services

Soul Super Wallet may use third-party token verification, blockchain data, and security intelligence services to assess the authenticity and potential risks associated with digital assets.

Token verification services may receive information such as token contract addresses, blockchain network identifiers, and token symbols to perform security and reputation assessments. These services do not receive User wallet addresses through the spam-token verification process.

Certain blockchain infrastructure providers may also process public wallet addresses and relevant blockchain information to support transaction monitoring and confirmation, including the identification of incoming transfers associated with wallet-initiated transactions.

Information processed by third-party providers is subject to their respective privacy policies and applicable data protection requirements.

7. User Privacy & Data Control

Soul Super Wallet is a non-custodial, decentralized wallet that does not store, manage, or have access to user credentials, biometric data, or digital assets. Users retain full control over their authentication and access settings.

• 7.1. Account Deletion: Users may request to disassociate their SoulID™ from the App. However, since SoulScan authentication is secured through decentralized storage, deletion does not permanently erase all authentication data, and recovery may still be possible through re-authentication.
• 7.2. Wallet Access & Loss Risks: Soul Super Wallet cannot retrieve lost wallets, restore private keys, or credentials in case where the Users loses access to their authentication credentials and has failed to backup recovery method, the Soul Super Wallet and the associated assets may be permanently inaccessible.
• 7.3. No Centralized Data Retention: Soul Super Wallet does not store User credentials or transaction history on its servers, as all the authentications occurs on Users’ devices.
• 7.4 Chrome Extension Password Protection : For the Soul Super Wallet Chrome Extension, the password used to unlock the wallet is created and managed entirely by the user. The password is used solely to encrypt and decrypt wallet data stored locally on the user's device. Soul Super Wallet does not collect, transmit, store, or have access to this password. If the password is forgotten, users must securely import their wallet again using the Soul Super Wallet mobile application and create a new password.
• 7.5. During the registration process, certain user files (including Soul ID™, SoulScan, and SSI Backup Files) are stored using decentralized storage solutions such as IPFS. All files are encrypted, and decryption is possible only through the user’s biometric data (facial recognition). This encrypted storage ensures that, in the event of device loss or theft, the user can securely retrieve and restore their wallet.
• 7.6. AI Assistant Data Handling: Nexium does not store AI Assistant conversation history, prompts, generated responses, voice recordings, or facial images used solely for identity verification and recovery purposes. Any facial images submitted during identity verification, liveness checks, account recovery, or related authentication processes are processed solely for the requested verification activity and are not retained following completion of the verification process. Users acknowledge that AI-generated responses are provided for informational and assistance purposes only. Such responses may be incomplete, inaccurate, or outdated, and Users should independently verify any information, transaction details, credential data, or blockchain-related actions before relying upon or acting on such responses.
• 7.7. Spam Token Preferences and Data Retention Soul Super Wallet allows Users to review assets identified as suspicious or potentially fraudulent and manage their visibility through the App. User preferences, including decisions to trust or dismiss specific tokens, are stored locally on the User's device and are not transmitted to the spam-token detection service.
• 7.8 Certain wallet-related records, transaction-intent information, manually imported token details, and associated verification records are maintained within the spam-token detection service to support its functionality. These records are currently retained without a defined automatic deletion period.
• 7.9 Hiding or dismissing a token affects its visibility within the App and does not remove the asset from the blockchain or alter the User's underlying ownership.

8. Security & Risk Mitigation

Soul Super Wallet is built with decentralized security principles; however, users must take precautions to protect their accounts:

• 8.1. Secure Device Usage: Users should ensure their devices remain protected from unauthorized access.
• 8.2. Transaction Awareness: Blockchain transactions are irreversible, and Soul Super Wallet is not responsible for transaction errors or losses due to unauthorized access.
• 8.3. Local Wallet Encryption: Wallet data stored within the Soul Super Wallet Chrome Extension is encrypted locally using the user-created password. Users are responsible for choosing a strong password and safeguarding it, as Soul Super Wallet cannot recover forgotten passwords.
• 8.4. Data Breach Risks: All and any third party integrations may be subject to data breaches beyond our control. Users are advised to review all third party providers’ security policies before engagement.
• 8.5. Privacy Settings: users are advised to keep an eye on the privacy settings within the App in order to control their data sharing preferences and permissions.

Software Vulnerabilities: Users are encouraged to report security issues promptly to help maintain the App’s and Platform’s integrity, avoiding unexpected software bugs or vulnerabilities which may occur. While the app employs industry-standard security measures, users must exercise diligence in managing their authentication credentials.

9. User Representation and Warranties

The Users acknowledge and accept that:

• 9.1. Users' interaction with any third party services and integration, its data collection and disclosure practices are independent from the Platform and the App. The Platform and the App does not control, access, or assume liability of the Data processed by these third party providers;
• 9.2. Any interactions requiring limited, non-identifiable Data processing are necessary for the proper functioning of the Services and are not retained by the Website, Platform or the App;
• 9.3. Certain third-party service providers engaged through the Platform may process data in jurisdictions outside of the User’s country of residence. Such transfers will be governed by the privacy policies of the respective third-party service providers;
• 9.4. Users are solely responsible for safeguarding their authenticating credentials, that is, passwords, private keys, recovery phrases);
• 9.5. The App or the Platform has no ability to restore the access of the credentials in case of failure of the Users to safeguard their credentials;
• 9.6. The App or the Platform uses cookies and similar technologies to enhance user experience, improve the App’s performance, and conduct analytics. Users can control cookie preferences through their browser settings, however, disabling certain cookies may impact the Website’s functionality.

10. Minor

As provided in our Terms and Conditions, our Services are not intended for anyone who is under the age of 18 (eighteen) years or minor under their respective jurisdictions, or where the Services are been accessed (“Minor”) We do not intend to or knowingly collect any data related to the Minor. If you believe that any kind of data has been collected or provided to us, please contact us at connect@soulverse.us

11. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in features, security measures, or compliance requirements, as indicated by “Last Updated on” date at the beginning of this Policy. Users will be notified of significant updates through in-app notifications or official communication channels. By continuing use of the App, Users acknowledge and accept the updated terms as they apply to the Service.

12. Contact Information

For inquiries regarding this Privacy Policy, users may contact:

connect@soulverse.us