Privacy Policy

The LION Award platform (“Platform”) is operated by the Youth Empowerment Academy (“YEA”, “we”, “us”) at lion.hkuer.com. We run a one-week residential leadership programme for young people. This policy explains how we collect, use, and protect personal information in connection with the Platform.

For questions or requests, contact your programme coordinator or email us at info@yea.org.hk.

• Account information — name and email address, created by your programme coordinator on your behalf.
• Daily activity logs — the habits and activities you self-report each day during the programme, along with the points earned.
• Spotlight Award submissions — photos you upload (step-count screenshots, plank timer photos, creative images). These are stored in a secure cloud storage bucket.
• Likes — which gallery entries you liked during the voting phase (anonymous to other students; visible to administrators).
• Usage data — standard server logs (IP address, browser type, timestamps) collected automatically by our hosting provider.

• Running the programme: tracking progress, calculating points and tiers, displaying Spotlight Award galleries.
• Administration: allowing coordinators to monitor participation, unlock logs, moderate submissions, and export results at the end of the week.
• We do not use your data for advertising, profiling, or sale to third parties.

• You — your own logs, points, and submissions.
• Other students (limited) — Spotlight gallery images are visible to all students during the voting phase, but no student names are shown while voting is open (anonymous gallery).
• Programme administrators — full access to all student data for programme management purposes only.

Data is stored on Supabase (a cloud database and storage platform). All data is transmitted over HTTPS. We use row-level security to ensure each student can only access their own records. Your uploaded images (Spotlight Award submissions) are stored in a publicly accessible storage bucket so peers can view and vote on entries during the programme. Images are not linked to your name while voting is open.

Supabase infrastructure is operated in data centres with industry-standard physical and technical security controls.

The LION Award programme is designed for young people. Accounts are created by programme coordinators — students cannot self-register. By enrolling in the programme, participants (and where applicable, their parents or guardians) consent to the collection and use of data as described in this policy.

We do not knowingly collect more data than necessary to operate the programme.

Programme data (logs, points, submissions) is retained for up to 12 months after the programme ends to allow for certificate generation and programme review. After that period, personal data is deleted or anonymised.

You may request deletion of your data earlier by contacting your programme coordinator.

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact your programme coordinator.

Hong Kong residents: your rights are governed by the Personal Data (Privacy) Ordinance (Cap. 486).

• Supabase — database, authentication, and file storage. See supabase.com/privacy.
• Vercel — hosting and CDN. See vercel.com/legal/privacy-policy.

We may update this policy. Material changes will be communicated via the Platform or through your programme coordinator. Continued use of the Platform after changes constitutes acceptance of the revised policy.