私隱政策｜AiLAE Tour

This is written in plain language. If any part isn't clear, write to us and we'll explain.

Last updated: 2026年8月31日

01In one sentence

5G nuMultiMedia Limited（AiLAE Tour） operates AiLAE Tour. When you register, take part in activities or upload photos in this app, we receive some information about you. This document explains what we collect, why, who can see it, how long we keep it, and how you can ask us to change or delete it.

We do not sell your data to anyone, nor use it for advertising.

If you are under 18, please have a parent or guardian read and agree to this document before you sign up.

02What we collect

Each item below states what it's for and what happens if you don't provide it.

Email or mobile number (one is required): Used to create your account, sign you in, and send a reset code if you forget your password. Without it you cannot register. We do not use it for marketing.
Password: Stored by Supabase as a one-way hash. Neither we nor our staff can see your original password, and it cannot be recovered.
Display name: Defaults to your email, or a masked phone number (for example +852****5432). You can change it to anything at any time.
Contact details: full name, phone, school, city, notes (optional): Collected only if you fill it in. Used to reach you if you win at an offline event and to confirm who is on a study tour. Leaving it blank doesn't affect earning points, but we won't be able to find you if you win.
The photos you upload: The photo will show your face. It has one purpose: a staff member checks whether both a person and a 5GNU robot appear, and points are awarded if approved. See the next section.
Activity records: Points ledger, check-in dates, referral code and relationships, and photo review outcomes. Used to calculate your balance and prevent duplicate claims.
Data kept on your phone: Sign-in state, which notices you have dismissed, and whether you pressed “update later”. These stay on your own device and are never sent to us. Clearing the app's data removes them.

03About the photos you upload

Photos are the most sensitive thing in this app, so they get their own section.

Photos live in access-restricted storage with no public URL. Reviewers see a time-limited link that stops working once it expires.

What we do with photos: Exactly one thing: a person reviews whether both a human and a 5GNU robot appear, and awards points accordingly.
What we don't do: No facial recognition, no facial-feature database, no identity matching, no model training, and no promotional use without your separate written consent.
Who can see them: You, and the administrators who review them. Other users and teachers cannot see your photos.
If other people are in the photo: Please don't upload photos containing other identifiable people without their knowledge. If others appear, you should obtain their consent first — or their parents' if they are minors.
How to delete them: You can write to support@5gnumultimedia.com at any time to have any or all photos deleted; we handle it and reply within 30 days. Points already awarded are not reclaimed.

04Minors

Study tours include primary and secondary students, which makes this section especially important.

Anyone under 18 must have a parent or guardian read and agree to this policy before using the app. For study tours enrolled through a school, we provide a separate parental consent form, and the trip is arranged only once the school has collected them.

A parent or guardian may exercise all the rights in this policy on a minor's behalf at any time — access, correction and deletion — simply by writing to us and stating the relationship.

05Who can see your data

Access is split into three roles and enforced in the database, not merely hidden in the interface.

You: You can see everything we hold about you.
Teacher: They see the roster and progress for the group they lead, but not students' contact details and not the photos students upload.
Administrators: To review photos and handle offline prizes, they can see all users' registration details, contact details and photos. The number of such staff is limited and access is restricted to what the work requires.
Service providers: The database and file storage are provided by Supabase. They are our data processor, acting only on our instructions and not using the data themselves.
Legal requirements: We may have to disclose data under a court order or lawful request from law enforcement. Where the law allows, we will tell you first.

06Where the data is stored

Data is stored on Supabase servers in Tokyo, Japan (AWS ap-northeast-1). That means your data leaves Hong Kong.

We choose providers with industry-standard security and require protection no lower than the six Data Protection Principles of Hong Kong's Personal Data (Privacy) Ordinance. Transfers are encrypted throughout.

When a study tour runs on the mainland, roster details needed for immigration and the itinerary may have to be provided to the relevant authorities under local law; we explain this separately at enrolment.

07How long we keep it

We keep data only as long as it's needed, not indefinitely.

Account and points records: Kept for as long as the account exists. Points don't expire.
Photos: Kept for 12 months after review, then cleared automatically. You can ask us to delete them sooner at any time.
Contact details: Kept for 12 months after the related event, for prize fulfilment and follow-up queries.
After you delete your account: After we receive your deletion request we remove your account and related data within 30 days, except records the law requires us to keep, such as transaction receipts.

08Your rights

You can write to support@5gnumultimedia.com at any time to exercise the rights below. We reply within 40 days of receipt — the period set by Hong Kong's Personal Data (Privacy) Ordinance.

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate data. You can also change your name and contact details yourself in the app.
Deletion: Ask us to delete photos, contact details or the whole account.
Withdrawing consent: Withdraw consent for a specific use at any time — for example, telling us to stop keeping your photos.
Complaints: If you think we have handled your data improperly, contact us first; you may also complain to the Hong Kong Privacy Commissioner for Personal Data.

To confirm the request really comes from you, we may ask you to write from the email or phone number you registered with, or to answer a few questions about the account.

09How we protect it

Everything is transmitted over HTTPS. The database uses row-level security, so one user cannot read another's data at the database level — it isn't merely hidden in the interface. Photos have no public URL and are reachable only through time-limited signed links. Administrator access is granted only to staff who actually need it.

We take reasonable steps to protect data, but no system can be guaranteed absolutely secure. If a breach affects your data we will notify you as soon as we can and report it to the Privacy Commissioner.

10Policy updates

This policy may be updated as features change. For significant changes we post a notice in the app and update the effective date at the top.

Continuing to use the service means you accept the updated version. If you disagree, you can stop using it and ask us to delete your account.

11Contact us

For any privacy question, access request or deletion request, write to support@5gnumultimedia.com. Please state the email or mobile number you registered with, so we can find your records.

Privacy Policy