1. Introduction
Kampong Duit ("we", "our", "us") is a family financial education platform that helps parents teach children about money through virtual savings pots, shops, QR payments, reward tasks, and goals. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with Brunei Darussalam's Personal Data Protection Order (PDPO) 2024.
By creating a household account on Kampong Duit, you acknowledge that you have read and understood this policy.
2. Data Controller
3. Data We Collect
We collect only what is necessary to provide the service:
Account Information
- Email address (optional - used only for household recovery)
- Usernames (chosen by the user, not required to be real names)
- 4-digit PINs (stored as bcrypt hashes - never in plaintext)
- Household names and 6-character household codes
Financial Simulation Data
- Transaction amounts, descriptions, types, and timestamps
- Savings goal names, target amounts, and progress
- Cash account names and virtual balances
All financial data is simulated and educational - no real money is involved.
Shop and Payment Data
- Shop names and avatar choices
- Shop item names, descriptions, and prices
- Order records (items purchased, quantities, total amounts, timestamps)
- Payment records (method used, amount, linked cash account)
- QR code payloads (randomly generated per order, contain no personal data)
Reward Task Data
- Task names, descriptions, and icons (set by parents)
- Task type (one-time or weekly), progress counts, and reward amounts
- Task status and completion timestamps
Audit Logs
- Action types (e.g., deposit, withdrawal, shop payment, task verified)
- Usernames associated with actions
- Timestamps of actions
Audit logs do not contain PINs, payment card details, or any other sensitive data. They are used solely for household transparency and security monitoring.
Technical Data
- Session cookies (httpOnly, essential for login functionality)
4. Data We Do NOT Collect
We explicitly do not collect the following:
Kampong Duit processes no real money. All transactions, balances, and payments are virtual and for educational purposes only.
5. Purpose of Processing
- •To provide the family financial education service including savings pots, shops, and reward tasks
- •To authenticate users and maintain session security
- •To process virtual shop orders and QR payments within the household
- •To send account recovery emails (only if an email address is provided)
- •To maintain an audit trail of household actions for transparency and security
- •To maintain platform security and prevent abuse
6. Legal Basis for Processing
Consent
By creating a household account, you consent to the processing of personal data as described in this policy. You may withdraw consent at any time by deleting your household.
Legitimate Interest
Platform security, audit logging, and abuse prevention represent a legitimate interest that requires minimal data processing.
7. Children's Data
Parental Control
Children's accounts are created and managed exclusively by their parent or guardian. We rely on parents to obtain any necessary consent from children and to ensure the platform is used appropriately.
- •We collect minimal data from children: a chosen username and a hashed PIN
- •Children's virtual financial data (pot balances, goals, transactions, shop orders, reward tasks) is simulation data for educational purposes only
- •No real financial data is ever collected from children
- •Parents can view and manage all children's data through the parent dashboard
- •Parents can delete all children's accounts and associated data at any time through the Settings page
- •Deleted children's data is removed permanently from our database
8. Multi-Household Isolation
Kampong Duit is designed with strict data isolation between households. Each household is assigned a unique code. All data access is scoped to a single household at the database query level.
- ✓A user in one household cannot read, write, or access data belonging to any other household
- ✓Household codes are required for login and cannot be guessed from any other household's data
- ✓Shop orders, cash account balances, reward tasks, and audit logs are all household-scoped
- ✓No household data is ever surfaced to users outside that household, including to platform administrators in normal operation
9. Data Sharing
We do not sell, rent, or share personal data with third parties for commercial purposes.
Mailgun (Email Delivery)
If you provide an email address and request account recovery, we share only that email address with Mailgun (our transactional email provider) to deliver the recovery email. Mailgun is the only third-party service provider we use. They process this data in accordance with their own privacy policy. No other data is shared with Mailgun.
No Analytics or Advertising
We do not use any analytics services, advertising networks, or tracking tools. No data is shared with any such parties.
10. Data Security
- ✓PINs are hashed using bcrypt and are never stored in plaintext
- ✓Session cookies are set as httpOnly with SameSite protection
- ✓All data is stored in a PostgreSQL database with access restricted to the application server
- ✓Household data is strictly isolated - cross-household data access is architecturally prevented at the query level
- ✓Security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options) are applied to all responses
- ✓The application runs as a non-root user inside a Docker container
- ✓All connections use encrypted transport (HTTPS in production)
- ✓Audit logs record all significant actions for household transparency and incident review
11. Data Retention
- •Account data is retained for as long as the household is active
- •Audit logs are retained for the lifetime of the household and are deleted when the household is deleted
- •When a parent deletes a child's account, all associated data (pots, goals, transactions, shop data, reward tasks, cash account) is permanently removed
- •Deleting a household removes all associated users, children, transactions, goals, shops, cash accounts, reward tasks, and audit logs
- •We do not retain data backups beyond what is operationally necessary
12. Your Rights Under PDPO 2024
Under Brunei Darussalam's Personal Data Protection Order (PDPO) 2024, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Correction
Request correction of any inaccurate or incomplete personal data.
Right to Deletion
Request deletion of your personal data. You can do this directly via the Settings page.
Right to Withdraw Consent
Withdraw consent to processing at any time by deleting your account.
Right to Lodge a Complaint
Lodge a complaint with the relevant authority under the PDPO if you believe your rights have been violated.
To exercise any of these rights, contact us at: [email protected]
13. Cookies
We use a single essential session cookie for authentication:
kampongduit_session
- Purpose: maintains your logged-in session
- Type: httpOnly, SameSite-protected
- Duration: expires at end of session or on logout
We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party cookies.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or legal obligations. When we make changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.
Effective date: 3 April 2026·Kampong Duit·[email protected]