S
MLG Africa · SFFG
Privacy Policy
Last updated: 27 July 2026
← Back to HomeSFFG is a personal finance training brand operated by Mo-Mentum Leadership Group Limited ("we", "us"), a company incorporated in Uganda. We build SFFG (Straight Forward Financial Growth), a personal finance app. This policy covers what we collect, why, and what your rights are, under Uganda's Data Protection and Privacy Act, 2019 ("the Act") and its 2021 Regulations.
Mo-Mentum Leadership Group Limited is the developer and data controller for SFFG, as defined under the Act. For any privacy question, complaint, or data request, contact us at:
If we haven't resolved your concern, you can complain directly to the PDPO at pdpo.go.ug.
Turn on "Import from SMS" and the app can read mobile-money transaction details in one or both of these ways:
Either way, only messages that look like a mobile-money transaction get parsed, and you review each one before it's saved (unless you've turned on auto-booking). Anything from a sender we don't recognise is dropped on the spot — not stored, not sent anywhere.
A device token, so our push notification provider can deliver notifications: daily tips, goal and budget reminders, and payment and subscription updates.
We use Google Analytics to understand how people use the app: which screens get opened, how often core actions happen, and general app performance. We send only event names and counts (for example, that a budget was created or a goal was added) — never transaction amounts, categories, descriptions, balances, or other financial values. We've turned off Google Signals and ad personalization, so this data is never used to build an advertising profile or serve you ads.
SFFG can use an AI provider to generate personalised tips and insights — for example, spotting spending trends or budget patterns. We send only aggregated, derived figures (like category totals or budget-vs-actual differences), never individual transaction line items, merchant names, or descriptions. Data sent to our AI provider is used only to generate your tips; it is not used to train their models. You can turn this feature off any time in Settings.
| We process it to… | On what basis |
|---|---|
| Run your account and record transactions/budgets/goals | Necessary to perform our contract with you, since a finance tracker can't work without tracking finances |
| Process a subscription payment | Necessary to complete that transaction |
| Read SMS/notifications for transaction import | Your explicit, revocable consent; the feature stays off until you turn it on |
| Send push notifications | Your consent, revocable any time in Settings |
| Keep some financial records after account closure | A legal obligation, e.g. tax or audit record-keeping |
| Understand app usage (Analytics) | Your consent, revocable any time in Settings |
| Generate AI-powered tips and insights | Your consent, revocable any time in Settings |
We don't run any automated decision-making or profiling that has a legal or similarly significant effect on you. AI-generated tips and insights are suggestions you can accept or ignore — they don't decide anything for you automatically.
Three processors run the app alongside us, and each only gets what it needs to do its job:
| Provider | Purpose | Data involved |
|---|---|---|
| Backend service provider | Database, authentication, backend storage | Account info, financial records |
| Push notification provider | Push notification delivery | Device token |
| Payment processor | Payment processing | Payment/subscription details, encrypted card data |
| Google Analytics | Usage analytics | App interaction events (screens, taps, feature usage) — no financial values |
| AI provider | Generating personalised tips/insights | Aggregated financial figures (category totals, budget-vs-actual) — no individual transactions or descriptions |
We don't otherwise share, rent, or sell your personal information.
Every provider above processes data outside Uganda. The Act allows this where you've consented, or where the destination country's data protections are at least equivalent to the Act's own. Using the app means you consent to that processing, for the purposes this policy describes. We keep records of each processor's safeguards (their own security and compliance certifications) and will share them on request.
We keep your data as long as your account stays active. Request deletion of your account and its data and we will comply — except where the law requires us to hold onto something (financial transaction records for tax or audit purposes, for instance).
Under the Act, you can:
Contact us at the address in §1 to use any of these.
The GDPR (or UK GDPR) can apply to us just because you're in the EU/EEA or UK while using the app, regardless of where Mo-Mentum Leadership Group Limited is based. If that's you, the rights above extend further:
The bases in §3.1 map straight onto GDPR Article 6: contract necessity, consent, legal obligation. We don't rely on "legitimate interests" anywhere in this policy. Everything here is either consented to or required to run the service you signed up for.
Financial data travels over encrypted connections. Card details are encrypted on your device before payment processing ever sees them. Database access is locked down with row-level security, so each user can only reach their own rows.
SFFG isn't built for children under 18, and we don't knowingly collect data from them.
We'll update this policy as needed and reflect any material change in the "Last updated" date above.
For any privacy question, data request, or complaint:
info@mlgafrica.com
Mo-Mentum Leadership Group Limited