Privacy Policy

Last updated: 1 July 2026

We take your privacy seriously and are committed to protecting personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, how we use and protect it, and your rights.

1. Introduction

PURPLE NEXUS PTY LTD (ABN 43693813160) ("we", "us", "our") operates KittyCash ("KittyCash" or "the Service"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use the Service, including demo mode and live (cloud-hosted) mode. By using the Service, you acknowledge this policy and, where indicated, consent to the practices described. If you do not agree, do not use the Service.

2. Who we are and our role

For most family account data, we are the entity that collects and holds personal information to provide the Service. Parents and guardians who create accounts are responsible for the information they enter about themselves and their children, for obtaining any necessary consent from other household members, and for supervising kids' use of the Service.

3. Information we collect

3.1 Account and identity information

• Parent email address, display name, and family name;
• Kid display name, username, and family association (live mode);
• Authentication credentials processed through our authentication provider (passwords and passcodes are stored in hashed or otherwise protected form);
• Family codes used for kid login.

3.2 Family activity and educational records

• Simulated balances, transactions, chores, allowances, goals, requests, interest settings, and memos you enter;
• End-of-day balance snapshots and statement-style summaries generated by the Service;
• Preferences such as currency display and timezone.

We do not collect real bank account numbers or card numbers for in-app balances, and we do not process real payments through KittyCash. In-app money figures are educational records only.

3.3 Technical and usage information

• Device type, browser, operating system, and general technical logs needed to operate and secure the Service;
• Approximate usage events and performance data (such as page views or feature use) where analytics are enabled and you have consented where required;
• IP address and timestamps in server or cloud logs for security and troubleshooting.

3.4 Communications

• Messages, feedback, or support requests you send us by email or contact form.

3.5 Demo mode

In demo mode, sample and session data are stored primarily in your browser's local storage on your device and are not uploaded to our cloud systems unless you separately use live mode.

4. How we collect information

We collect information when you register, log in, or add family members; enter or update chores, transactions, and settings; use demo or live features; manage cookie and storage preferences; or contact us. We also collect limited technical information automatically through the Service and the Cloud Services that support live mode.

5. How we use information

We use personal information to:

• provide, operate, maintain, secure, and improve the Service;
• authenticate users and keep each family's data separated;
• calculate and display educational balances, interest-style figures, and statements;
• develop new features, products, and functionality, and conduct internal research and analytics;
• respond to enquiries and provide support;
• monitor, detect, and prevent security incidents, fraud, abuse, and errors;
• comply with legal obligations and enforce our Terms & Conditions;
• produce De-identified or aggregated data and statistics.

Where we use personal information for a secondary purpose, we do so only where that purpose is related to a primary purpose and within your reasonable expectations, where you have consented, or where otherwise permitted by law. By using the Service you consent to the uses described in this policy.

6. De-identified and aggregated data

We may create de-identified, anonymised, or aggregated data from your information and your use of the Service. Once data no longer reasonably identifies an individual, it is not "personal information" under the Privacy Act, and we may use, combine, analyse, disclose, commercialise, and retain it for any lawful purpose and indefinitely, including to operate, develop, train, and improve our products, models, analytics, research, and business. We will not attempt to re-identify such data except as permitted by law.

7. Cookies, local storage, and similar technologies

• Essential storage — demo session state, app mode selection, cached family code, cookie consent choice, and other data necessary for core functionality.
• Optional analytics (live mode) — if you select "Accept all" on our cookie banner and use live mode, pseudonymised usage analytics may be collected through our cloud analytics tools to help us understand and improve the Service. You may select "Essential only" to decline optional analytics where offered.

We do not use third-party advertising cookies in the standard Service. You can clear local storage and cookies through your browser; doing so may log you out, reset demo data, and remove preferences.

8. Disclosure of information

We may disclose personal information to:

• Cloud and service providers — hosting, authentication, database, analytics, email, and infrastructure providers used to operate the Service, under arrangements requiring appropriate handling and authorised use only;
• Professional advisers — lawyers, accountants, auditors, or insurers where reasonably necessary;
• Legal and safety — regulators, courts, or law enforcement where required or authorised by law, or where we reasonably believe disclosure is necessary to protect rights, safety, property, or security;
• Business transfers — a successor or prospective purchaser in connection with a merger, acquisition, financing, restructure, or sale of assets, subject to this policy or equivalent protections.

We do not sell personal information.

9. Overseas disclosure

Cloud Services used for the Service may store or process personal information outside Australia, including in countries that may not provide the same level of protection as Australian law. By using the Service, you acknowledge and consent to such cross-border storage and processing. We take reasonable steps to engage reputable providers, but to the extent permitted by law we are not liable for, and do not guarantee, the laws or practices of every jurisdiction where Cloud Services operate, and APP 8.1 accountability is modified accordingly to the extent the law allows.

10. Security

We take the protection of personal information seriously and use reasonable technical and organisational measures designed to protect it, including access controls, encryption in transit where supported, and separation of family data in live mode. However, no method of transmission or storage over the internet or in the cloud is completely secure. We cannot guarantee absolute security and, to the maximum extent permitted by law, are not liable for unauthorised access, loss, or disclosure caused by factors outside our reasonable control (see our Terms & Conditions). You are responsible for keeping passwords, passcodes, and family codes confidential and for supervising device access in your household.

11. Data breach notification

We maintain procedures to detect, assess, and respond to data security incidents. If an eligible data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) where required under the Notifiable Data Breaches scheme.

12. Retention

We retain personal information for as long as your account is active, as needed to provide the Service, and as required for legal, accounting, security, or operational purposes. When no longer needed, we take reasonable steps to delete or de-identify it, subject to backup retention cycles and legal holds. De-identified and aggregated data may be retained indefinitely. Demo data in local storage persists until you clear it.

13. Access, correction, and complaints

Under the Privacy Act and the APPs, you may request access to or correction of personal information we hold about you, subject to exceptions permitted by law. Contact us first at hello@kittycash.com.au and we will respond within a reasonable time, usually within 30 days. We may require verification of your identity and may charge a reasonable cost for access in limited circumstances permitted by law.

If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au.

14. Children

Kid accounts are created and managed by a parent or legal guardian. We do not knowingly solicit personal information directly from children without parental involvement in account setup. Parents are responsible for deciding what information to enter about their children, for obtaining any consent required, and for explaining the educational nature of the Service. If you believe a child has provided information without parental involvement, contact us and we will take reasonable steps to delete it.

15. Direct communications

We may send you service-related communications (such as security, account, or transactional messages), which you cannot opt out of while you hold an account. Any non-essential or promotional messages will include an unsubscribe option, and we will handle marketing in accordance with the Spam Act 2003 (Cth).

16. Your choices and account deletion

• You may stop using the Service at any time;
• You may choose essential-only storage/analytics where offered;
• You may clear browser storage to remove demo data and preferences;
• You may request access, correction, or deletion of your account and associated personal information by contacting hello@kittycash.com.au, subject to law.

Some choices may limit functionality. We may retain certain information where required by law or for legitimate operational purposes, and may retain De-identified data without limitation.

17. Links to other sites

The Service may link to third-party websites or resources. We are not responsible for their privacy practices. Review their policies before providing personal information.

18. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date will change when we do, and material changes may also be communicated through the Service. Continued use after an update constitutes acceptance of the revised policy.

19. Contact

Privacy enquiries: hello@kittycash.com.au · Contact page · Legal notice

This policy is a template-style document and not legal advice. Obtain advice from a qualified Australian legal practitioner to confirm it fits your circumstances and obligations.