We take your privacy seriously. This policy explains what data we collect, why we collect it, and how you can control it.
Your privacy matters to us. DEFCON STATE OF MUSIC ENTERPRISE LIMITED is the Data Controller for all personal data collected through the Strait App platform. We process your data in accordance with Uganda's Data Protection and Privacy Act 2019 and applicable financial regulations.
Data Controller: DEFCON STATE OF MUSIC ENTERPRISE LIMITED
Trading as: Strait App
Address: Mutungo Zone II, Kampala, Uganda
Email: support@straitapp.com
Phone: +256 700 000 000
We operate the Strait App mobile application and website — a conditional payment platform enabling secure escrow-based payments for transport, goods, and services across Uganda.
We collect personal information in the following categories:
| Category | Examples | How Collected |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number or passport | Registration and KYC verification |
| Contact Data | Phone number, email address | Account creation |
| Financial Data | Mobile Money number, bank account details, transaction history, wallet balance | Wallet top-up, withdrawal, and transaction initiation |
| Location Data | GPS coordinates, precise device location | When a location-based payment condition is active (see Section 4) |
| Device Data | Device model, OS version, IP address, device ID | Automatic collection during app use |
| Usage Data | App screens visited, features used, session duration, error logs | Automatic collection via analytics |
| Communications Data | Messages sent to our support team, dispute evidence submitted | Direct communication and dispute filing |
We do not collect sensitive personal data (e.g., health information, ethnicity, religion) unless specifically required and disclosed.
We use your personal data for the following purposes:
Strait App uses device GPS location data as part of its core Transport Money feature. Location data is only accessed when:
We collect location data only during active condition verification — not continuously in the background. The app will request your explicit permission to access location before any location-based feature is used.
Location data collected for a specific transaction is used solely to verify whether the GPS condition was met. It is stored as part of the transaction audit trail and retained according to Section 8 (Data Retention).
You may revoke location permission in your device settings at any time, but doing so will prevent the use of location-based payment features.
All transactions made through Strait App are recorded and form part of your permanent account audit trail. This includes:
Transaction records are the basis of our escrow operations and are essential to the platform's security, auditability, and regulatory compliance. These records cannot be deleted on request, as they form part of our legal financial record-keeping obligations.
We do not sell your personal data to third parties. We may share your data in the following limited circumstances:
We share data with trusted third-party service providers who help us operate the platform, including payment processors (Mobile Money operators, banks), cloud infrastructure providers, and identity verification services. These providers are contractually required to protect your data and use it only for the purposes we specify.
When you initiate or receive a payment, the other party to the transaction will see your display name and relevant transaction details. They will not see your full identity documents, financial account details, or device data.
We may disclose your data to the Bank of Uganda, Uganda Revenue Authority, Financial Intelligence Authority (FIA), or law enforcement agencies where required by law, court order, or to prevent fraud and financial crime.
Evidence submitted by either party during a dispute is shared with our independent dispute review team for the purpose of reaching a fair decision.
In the event of a merger, acquisition, or sale of all or part of the Company, user data may be transferred as part of that transaction. We will notify you in advance of any such transfer.
We implement industry-standard security measures to protect your personal and financial data, including:
Despite these measures, no digital system is entirely secure. You are responsible for keeping your PIN, password, and device secure. If you suspect a breach, contact us immediately at support@straitapp.com.
We retain your personal data for as long as your account is active, and for the following periods after account closure:
| Data Type | Retention Period | Reason |
|---|---|---|
| Transaction records | 7 years after transaction date | Ugandan financial record-keeping law |
| Identity / KYC documents | 5 years after account closure | Anti-Money Laundering Act compliance |
| Dispute records and evidence | 5 years after dispute resolution | Legal and audit purposes |
| Location data (transaction-linked) | Retained with the linked transaction record | Audit trail integrity |
| Support communications | 3 years | Service improvement and legal protection |
| Marketing consent records | Until consent is withdrawn | Legal requirement to evidence consent |
When data is no longer required, it is securely deleted or anonymized.
Under Uganda's Data Protection and Privacy Act 2019, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at support@straitapp.com. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda if you believe your rights have been violated.
The Strait App mobile application does not use browser cookies. Our mobile app uses device-level analytics (e.g., crash reporting, session logging) to improve app stability and performance. This data is collected automatically and is not used to identify you personally.
Our website (straitapp.com) may use essential cookies to maintain session security. We do not use tracking cookies or third-party advertising cookies.
Strait App may contain links to third-party websites, apps, or services (e.g., Google Play Store, Apple App Store). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal data to them.
Strait App is not intended for use by persons under the age of 18. We do not knowingly collect personal data from children. If we discover that a child under 18 has created an account, we will promptly close that account and delete associated data. If you believe a child has registered, please contact us at support@straitapp.com.
Our servers are primarily located in Africa. Where we use cloud services or third-party providers whose infrastructure may be located outside Uganda, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent protections, in line with Uganda's Data Protection and Privacy Act 2019.
We will never transfer your financial or identity data to a country that does not provide an adequate level of data protection without your explicit consent.
We process your personal data on the following legal grounds:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or regulatory requirements. We will notify you of material changes via in-app notification and/or email at least 14 days before the changes take effect.
The current version of this policy is always available at straitapp.com/privacy. The date at the top of this document indicates when it was last updated.
For any privacy-related questions, to exercise your rights, or to report a data concern, please contact our Data Protection Officer:
You also have the right to raise a complaint with the Personal Data Protection Office (PDPO) of Uganda if you are not satisfied with our response.