Privacy Policy

The LION Award platform (“Platform”) is operated by the Youth Empowerment Academy (“YEA”, “we”, “us”) at lion.hkuer.com. We run a one-week residential leadership award for young people. This policy explains how we collect, use, and protect personal information in connection with the Platform.

For questions or requests, contact your coordinator or email us at info@yea.org.hk.

• Account information — name and email address, created by your coordinator on your behalf.
• Daily activity logs — the habits and activities you self-report each day during the week, along with the points earned.
• Spotlight Award submissions — photos you upload (step-count screenshots, plank timer photos, creative images). These are stored in a secure cloud storage bucket.
• Likes — which gallery entries you liked during the voting phase (anonymous to other students; visible to administrators).
• Usage data — standard server logs (IP address, browser type, timestamps) collected automatically by our hosting provider. If analytics is enabled for the Platform, aggregated page-view statistics (such as pages visited and general device/browser type) may also be collected via Google Analytics solely to understand how the Platform is used — not for advertising.

• Running the LION Award: tracking progress, calculating points and tiers, displaying Spotlight Award galleries.
• Administration: allowing coordinators to monitor participation, unlock logs, moderate submissions, and export results at the end of the week.
• We do not use your data for advertising, profiling, or sale to third parties.

• You — your own logs, points, and submissions.
• Other students (limited) — Spotlight gallery entries are visible to all students during viewing and voting. For awards configured as anonymous, submitter names are hidden until the award closes; winner names are shown after close.
• Administrators — full access to all student data for management purposes only.

Data is stored on Supabase (a cloud database and storage platform). All data is transmitted over HTTPS. We use row-level security to ensure each student can only access their own records. Your uploaded images (Spotlight Award submissions) are stored in a publicly accessible storage bucket so peers can view and vote on entries during the week. For anonymous awards, images and text are not linked to your name while viewing or voting is open.

Supabase infrastructure is operated in data centers with industry-standard physical and technical security controls.

The LION Award is designed for young people. Accounts are created by coordinators — students cannot self-register. By taking part in the LION Award, participants (and where applicable, their parents or guardians) consent to the collection and use of data as described in this policy.

We do not knowingly collect more data than necessary to operate the Platform.

Platform data (logs, points, submissions) is retained for up to 12 months after the week ends to allow for certificate generation and review. After that period, personal data is deleted or anonymized.

You may request deletion of your data earlier by contacting your coordinator.

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact your coordinator.

Hong Kong residents: your rights are governed by the Personal Data (Privacy) Ordinance (Cap. 486).

• Supabase — database, authentication, and file storage. See supabase.com/privacy.
• Vercel — hosting and CDN. See vercel.com/legal/privacy-policy.
• Google Analytics — when switched on by operators, helps us see which public pages are used (for example join and login). We configure it without advertising features and with IP anonymization where available. See policies.google.com/privacy. You can also limit analytics cookies via your browser settings or Google's browser tools.

We may update this policy. Material changes will be communicated via the Platform or through your coordinator. Continued use of the Platform after changes constitutes acceptance of the revised policy.