Kongla Privacy Policy

This policy covers 港啦 Kongla, our Cantonese-learning app. 換片啦 Diaper Time is a separate app with its own privacy policy — the two collect different things and neither shares data with the other.

The short version

You can use Kongla without giving us anything. If you sign in, we keep your learning progress so it survives a lost phone — and little else. Your data is stored in Hong Kong. We show no ads, run no ad network, and never sell anything about you. We do not ask for your location, your contacts, or your photos.

Who we are

Kongla Group Company Limited, Hong Kong SAR. We are the data user responsible for your personal data under the Personal Data (Privacy) Ordinance (Cap. 486).

Using Kongla without an account

The Survival Phrasebook and the lessons work with no account and no network. As a guest you give us no personal data at all: your progress is written to your own phone and never reaches us. Nothing on this page applies to you until you choose to sign in.

Because that progress exists only on your device, it is not something we can restore. If you delete the app or lose the phone, it is gone. Signing in is what makes progress recoverable.

What we collect, if you sign in

Sign-in is optional and always social — Google, Facebook or Apple. There is no password to create and we never see one.

• A sign-in identifier from your provider — an account id. We do not copy your profile photo, your provider display name, or any extended profile data into our systems.
• Your interface language and learning preferences, so the app speaks to you in the language you chose.
• Your learning progress — which phrases you have practised, how well you know each one, and when each is next due for review.
• Your study sessions and streak — when you studied, how many answers were right, and how many days in a row you have kept going.
• A support code. A short code you can quote when you contact us. It is derived from your sign-in identifier by a one-way keyed hash: it identifies your account to us but cannot be reversed to reveal your social account, and holding it grants nobody any access.
• A list of your devices. Each device generates a random id the first time you use it, and we record when it was first and last seen. This exists only to enforce the two-device limit on paid access. It is not a fingerprint — the same phone used by two accounts produces two unrelated ids and cannot be recognised across them. You can release a device from Settings at any time.
• Your subscription status, if you buy one — which plan and when it expires.
• A friend link, only if you create one. See below.

What we do not collect

No location. No contacts. No photos. No advertising identifier, and no behavioural tracking of any kind. Kongla contains no ad network and no analytics SDK.

Why we collect it

To save your progress and let it follow you to a new phone; to show your learning dashboard and streak; to make a paid subscription work on your devices; and, only if you choose it, to share a short progress summary with a friend.

The friend link

Linking with a friend is optional, requires both people to agree, and either of you can break it at any time. A linked friend sees only a short summary of your overall progress — how many items you have mastered, are learning, or have not started — and your current streak.

They can never see the individual lessons you do, your mistakes, your weak spots, how long you study, or anything else, and they can never change what you study. Learning on Kongla is self-directed: nobody can set you tasks.

When data leaves Hong Kong

Your personal data is stored on servers in Hong Kong. It is not transferred elsewhere, with exactly three exceptions, each of which happens only because you chose the thing that causes it:

• Signing in. Google, Facebook and Apple operate their own login outside Hong Kong. You are electing to use your own identity with them; we do not send them anything we hold about you.
• The AI practice partner. If you use it, your practice messages go to an AI service outside Hong Kong to generate a reply. We send no name, no email, no account id — nothing that identifies you — and we do not keep these conversations.
• Buying a subscription. Apple and Google process the payment, not us. We never see your card. To confirm a purchase is real we check the receipt with Apple or Google, whose systems are outside Hong Kong.

How long we keep it

While your account is in use. You can delete it at any time from Settings. Deletion takes effect immediately — the account becomes inert, nobody can sign in to it, and nobody else can see its data — and your personal data is erased seven days later.

That seven-day gap exists for one reason: to undo a mis-tap. If you delete by accident, contact us within the week and we can stop it. After the seven days it is gone and we cannot recover it, including from backups.

If an account goes unused for 24 months we may delete it on the same path. If you had a paid subscription we keep an anonymous accounting record of the payment — no name, no code, nothing that can be traced back to you — for as long as the accounting basis requires.

Your rights

Under the PDPO you may ask us to access or correct the personal data we hold about you. Write to support@kongla.hk.

The Ordinance does not grant a general right to erasure, but we provide account deletion in Settings regardless, as described above.

Security

Each account's data is isolated at the database level, so one user's records cannot be read by another even in the event of an application bug. Data is encrypted in transit.

Children

Kongla is not directed at children and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change what we collect or why, we will update this page and the date at the top. Material changes will be surfaced in the app rather than left here to be discovered.

Contact us

Kongla Group Company Limited
Hong Kong SAR
support@kongla.hk

You may also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.