Privacy Policy - CROMS

Last updated: February 2026

This Privacy Policy describes your privacy rights regarding Hypernova Company Limited's ("we", "us" or "our") collection, use, storage, sharing, and protection of your personal information. It applies to our website, POS devices, and all related sites, applications, services, and tools, regardless of how you access or use them ("Sites"). This Privacy Policy will help you understand how we use your information and what we do with it.

We respect the privacy of our online visitors and registered users ("Users"); as such, we take reasonable steps to protect your information.

1. About Us

Hypernova Company Limited provides payment services enabling people and businesses to make digital payments through its brands Cashi, MyCashi, CashiLite, and CashiMobile. Hypernova Company Limited also provides an online classifieds platform and marketplace through its brand, alsoug.com.

2. Updates, Modifications & Amendments

We may need to update, modify or amend our privacy policy as our technology evolves. We reserve the right to make changes to this privacy policy at any time by giving notice to Users on this page.

We advise that you check this page often, referring to the date of the last modification on the page. If a User objects to any of the changes to the Policy, the User must cease using any Site or terminate any Account (as defined below) in the event an Account has been created.

3. Age Restriction

Our Sites are not directed to children under 18. We do not knowingly collect information from children under 18. If, as a parent or guardian, you become aware that your child or ward child has provided us with any information without your consent, please contact us through details on this Privacy Policy.

4. What Kind of Data Do We Collect? (CROMS App)

The CROMS application collects the following types of data:

  • Personal identification information (name, email, phone number)
  • GPS location data to track your daily routes to visit Cashi partners
  • Device information and usage analytics
  • Transaction and activity records related to partner visits

5. What Do We Use Your Data For? (CROMS App)

Any of your data can be used for one of the following purposes:

  • To know your interests to direct you to what you want easily and conveniently.
  • Improve the quality of services within the site. We need your interest and share your opinion with us to improve the work of the site.
  • Your information also helps us in the practical and ideal response to your request when needed.
  • Your personal and public information taken from you will not be exchanged, sold, transferred or given to any other party or given to other companies without your personal consent.
  • For administrative use (advertising, survey, or any of the features of the site).

6. How Will We Protect Your Data? (CROMS App)

We implement various types of security and privacy measures to keep your personal information safe. We collect your GPS location to track your daily routes to visit Cashi partners.

7. The Information We Collect and How We Use It

We may use your Personal Information to:

  • Provide you with Cashi, CashiMobile, CashiLite, MyCashi, or alsoug.com services (the "Services")
  • Assess your eligibility for new Services
  • Respond to your questions or requests
  • Improve our operations
  • Address inappropriate use of our Sites
  • Prevent, detect, and manage risk against fraud and illegal activities
  • Target advertisements, newsletter, and Service updates
  • Verify the information that you provide with third parties
  • Update our database, improve content and Site layouts
  • Resolve disputes that may arise

8. Safeguarding Information

To ensure your payment card and wallet information is kept safe and secure on our servers, we implement access control measures (physical and virtual), security protocols, policies, and standards, including the use of encryption and firewall technologies in compliance with international standards.

We ensure that our personnel engaged in the processing of Personal Information are informed of the confidential nature of the Personal Information, have received appropriate training on their responsibilities, and have executed written confidentiality agreements.

We take commercially reasonable steps to ensure the reliability of any of our personnel engaged in the processing of Personal Information.

We ensure that our access to Personal Information is limited to those personnel who need to access that information for us to deliver the Site services to the User.

Two Factor Authentication ("2FA") is an additional layer of security we have added to some of your accounts. When 2FA is enabled, you will be required to enter a One Time Password (OTP) when you do specific actions on the Sites. 2FA helps secure your Personal Information and any Payment Method Information you provide.

Merchants, billers (such as telecom companies or the national electricity company), NGOs, UN Agencies, and other Users you buy from, transact with, or receive money or services from via the Sites, have their own privacy policies, and we are not responsible for their actions.

No security measures are 100% effective. We cannot guarantee the complete security of your Personal Information. We shall not be held responsible or liable for unauthorised access, hacking, or other security intrusions.

We do not take any responsibility for any loss of or unauthorised access to any Personal Information as a result of negligence by the User, including through the use of insecure hardware or weak password management.

9. The Personal Information That We Retain

We will retain your Personal Information, Payment Method Information, and cookies for as long as your Account is active or as needed to (1) provide you with our Services, (2) comply with our legal and statutory obligations, or (3) verify your information with a financial institution.

We are obligated to retain certain Payment Method Information and Personal Information you provide to process transactions, ensure settlements, make refunds, identify fraud, and comply with laws and regulatory guidelines applicable to us, our banking providers, and card processors.

Subject to the above, you may request that we delete or remove any Personal Information, Payment Method Information, or cookies held about you. To make such a request, please email privacy@alsoug.com.

10. Terms of Use

This Privacy Policy is incorporated by reference into all Sites' terms and conditions.

11. Disclaimers

WE TRY TO KEEP OUR SITES AVAILABLE AT ALL TIMES, BUG-FREE, FRAUD-FREE, AND SAFE. HOWEVER, YOU USE THEM AT YOUR OWN RISK. OUR SITES AND SERVICES ARE PROVIDED "AS IS" WITHOUT ANY EXPRESS, IMPLIED, AND/OR STATUTORY WARRANTIES (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED OR STATUTORY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR USE OR PURPOSE, TITLE, AND NON-INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS). WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, WE MAKE NO WARRANTY THAT OUR SITES AND SERVICES WILL MEET YOUR REQUIREMENTS OR THAT SITES OR SERVICES WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED BY YOU THROUGH OUR SITES OR FROM HYPERNOVA COMPANY LTD, ITS PARENTS, SUBSIDIARIES, OR OTHER AFFILIATED COMPANIES, OR ITS OR THEIR SUPPLIERS SHALL CREATE ANY WARRANTY.

12. Exclusions

Some jurisdictions do not allow the exclusion of certain warranties or the limitation or exclusion of liability for certain damages. Accordingly, some of the above disclaimers and limitations of liability may not apply to you. To the extent that we may not, as a matter of applicable law, disclaim any implied warranty or limit our liabilities, the scope and duration of such warranty and the extent of our liability shall be the minimum permitted under such applicable law.

13. Applicable Law

This Privacy Policy shall be interpreted and governed by the laws currently in force in the Republic of Sudan.

14. Legal Disputes

We shall make an effort to settle all disputes amicably. Any dispute arising out of this Privacy Policy, which cannot be settled by mutual agreement/negotiation within 1 (one) month, shall be referred to the Khartoum District Court for settlement.

15. Severability

If any portion of this Privacy Policy is held by any court or tribunal to be invalid or unenforceable, either in whole or in part, then that part shall be severed from this Privacy Policy and shall not affect the validity or enforceability of any other part in this Privacy Policy.