Privacy Policy
Last updated: 16 October 2026
CashCruz is a money-choices game run by SoftPal Communication and Support Services Limited ("SoftPal CSSL", "we", "us"), a company registered in Nigeria. This policy explains what we collect when you play CashCruz at cashcruz.app, why, and the choices you have. We follow the Nigeria Data Protection Act 2023 (NDPA).
What we collect
- Game account: a random player ID created when you start playing. If you save your progress, your email address.
- What you choose to show: the display name you type and the character you pick (Tara or Basit). Your display name and scores can appear on leaderboards and the players list.
- Game activity: your wallet, stars, stories played, choices in a story, badges, gifts and reactions you send or receive.
- Your money style: a summary of your choices across games (for example how often you pay family requests, buy luxury items or take a side job) and the money personality type it adds up to.
- Gender (optional): only if you choose to tell us when you save your progress.
- Where you came from: if you opened CashCruz from a shared link, which link it was.
- Purchases: what you bought, the price, the date and the payment reference. Payments are handled by our payment provider, Bachs. We never see or store your card or bank details.
- Technical data: IP address, device and browser type, and basic logs. We use these to keep the game running, stop cheating and bots, and fix problems.
Why we use it
- To run the game, save your progress and show leaderboards (performing our agreement with you).
- To process purchases and give you what you paid for (agreement, and legal record-keeping).
- To prevent fraud, cheating, bots and abuse, and to keep the service secure (legitimate interests).
- To answer you when you contact support (legitimate interests).
- To understand how players make money choices, improve the game and plan new products, using group statistics (legitimate interests).
- To share your money style with partners for offers, only if you tick that box (your consent, which you can withdraw any time in Account).
- To meet legal, tax and accounting duties (legal obligation).
We may share or sell group statistics that don't identify anyone (for example, "6 in 10 players stay within budget"). We share your individual money style, gender and email with partners only if you tick "Share my money style with CashCruz partners". Untick it in Account to stop; we then stop sharing from that day.
Who we share it with
Only service providers that help us run CashCruz, under contracts that require them to protect it: Supabase (database and sign-in), Cloudflare (hosting, security and bot checks), Bachs (payments) and our email provider (login codes). We may share data if the law requires it, or to protect players and the service.
Some of these providers store data outside Nigeria. Where that happens, we rely on the safeguards the NDPA allows.
How long we keep it
- Your account and game data: until you delete your account. If you never save with an email and don't play for 90 days (and never bought anything), we delete your guest account.
- Detailed story records: 7 days (a month for records we flag for cheating). Your totals and money style stay with your account.
- Gifts and reactions between players: up to 60 days.
- Purchase records: as long as tax and accounting law requires. If you delete your account, we keep these without your name or email attached.
Your rights
You can ask to see, correct, download or delete your data, object to how we use it, or withdraw consent. You can delete your account any time in the game (💾 Account → Delete my account), or email support@cashcruz.app. If you're not satisfied with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).
Age
CashCruz is for people aged 18 and over. We don't knowingly collect data from anyone under 18. If you believe a child is using CashCruz, email us and we'll delete the account.
Storage on your device
The game saves settings and your sign-in on your device (browser storage) so it works quickly and offline. We don't use advertising cookies.
Security
Data is encrypted in transit. Access is limited to people and systems that need it, and the game's rules are checked on our servers. No system is perfectly secure. If a breach affects you, we'll tell you and the NDPC as the law requires.
Changes
We may update this policy. We'll change the date above and, for important changes, tell you in the game.
Contact
SoftPal Communication and Support Services Limited · support@cashcruz.app
▶ Play CashCruz