Kongla
Legal
Privacy Policy
Last updated: 19 July 2026
This policy explains how Kongla Group Company Limited ("Kongla Group", "we", "us") collects, uses, and protects personal data when you use our website at kongla.hk and our apps: 港啦 Kongla, 換片啦 Diaper Time, and 做乜好 Outabout.
We are based in the Hong Kong SAR and handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486).
The short version
- We collect as little as we can get away with, and we tell you why.
- We don't sell your personal data. Ever.
- You can browse most of our apps without an account at all.
- You can ask us for your data, or ask us to delete it, at any time.
What we collect
When you don't have an account
You can browse and share in most of our apps as a guest. In that case we hold no account for you. Our servers keep standard technical logs — IP address, device type, app version, and the time of the request — which we use to keep the service running, diagnose faults, and prevent abuse.
When you create an account
Some features need an account. You can sign in using Google, Apple, or Facebook, and we receive your email address and basic profile information from that provider. If you use Apple's Hide My Email, we only ever see the relay address. We then store what the feature requires — for example your saved events, your filter preferences, and your notification settings.
Location
換片啦 Diaper Time and 做乜好 Outabout can use your device location to show what's near you. This is always your choice: the apps ask permission first, work without it, and we do not store a history of where you have been. Denying location simply means searching by district instead.
Photos and ratings you contribute
換片啦 Diaper Time lets you add photos and ratings of facilities. Anything you submit is reviewed by us before it becomes publicly visible. Please don't photograph other people — especially children — and don't include anything that identifies you unless you mean to. Contributed content may remain visible after you delete your account, though we will unlink it from you on request.
Notifications
If you turn on notifications, we store a device push token so we can send them. Notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging. You can turn them off at any time in the app or in your device settings.
Children
Our apps are designed for adults — parents, carers, helpers, and people planning what to do. They are not directed at children, and we do not knowingly collect personal data from children. Some of our listings describe activities for children; that information is about the activity, not about any child. If you believe a child has given us personal data, contact us and we will delete it.
Why we use it
| Purpose | What that means in practice |
|---|---|
| Providing the service | Showing listings, saving your events, syncing your preferences across devices |
| Personalising | Ranking and filtering what we show you based on preferences you have set |
| Communicating | Answering your support emails, and sending notifications you asked for |
| Keeping things working | Diagnosing crashes and faults, preventing abuse and fraud |
| Meeting our obligations | Complying with applicable law and responding to lawful requests |
Advertising
做乜好 Outabout is supported by advertising, served through Google AdMob. AdMob may use device identifiers to select and measure ads. On iOS we will ask for your permission before any tracking through App Tracking Transparency, and if you decline, you will still see ads — they will just be less relevant. You can also reset or limit your advertising identifier in your device settings. Google's handling of this data is governed by Google's privacy policy.
Who we share it with
We do not sell personal data, and we do not share it for anyone else's marketing. We do rely on service providers who process data on our behalf, under contract and only on our instructions:
- Supabase — database, authentication, and backend hosting
- Google (Firebase Cloud Messaging, AdMob) — notifications and advertising
- Apple — push notifications and Sign in with Apple
- Google, Apple, Facebook — sign-in, where you choose to use them
We may also disclose data where the law requires it, or where necessary to protect our rights or someone's safety.
Where your data is held
Our service providers operate data centres outside Hong Kong, so your data may be stored or processed overseas. Where that happens, we take reasonable steps to ensure it receives a comparable level of protection to that required under Hong Kong law.
How long we keep it
We keep personal data only as long as we need it for the purposes above. Account data is kept while your account is open and deleted within 30 days of you closing it. Technical logs are kept for a short period for security and diagnostics. We may retain some information longer where the law requires it.
Security
We use encryption in transit, access controls, and database-level row security so that people can only reach their own data. No system is perfectly secure, but we take this seriously and design for it from the start.
Your rights
Under the Personal Data (Privacy) Ordinance you have the right to ask whether we hold data about you, to request a copy, and to have inaccurate data corrected. You can also ask us to delete your account and the data attached to it, and withdraw consent for notifications or location at any time.
Email support@kongla.hk from your registered address. We may need to verify your identity, and we will respond within 40 days as the Ordinance requires. We do not charge for reasonable requests.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will tell you in the app or by email before they take effect.
Contact us
Kongla Group Company Limited
Hong Kong SAR
support@kongla.hk