Privacy Policy

Jitume Omoka (“we”, “us”) runs the Dream Big Challenge, a regional video competition for East African youth (Kenya, Uganda, Tanzania, Rwanda, Burundi, South Sudan). This policy explains what personal data we collect from entrants, why we collect it, and how it is protected, in line with the Kenya Data Protection Act, 2019.

• Your name and email address
• Your country of citizenship or residence and city/region
• Your mobile money provider and number (e.g. M-PESA, MTN Mobile Money, Airtel Money), for prize payout purposes only
• The video you submit, your two written answers, and the sectors and skills you select on the entry form
• Basic technical data (IP address, device/browser type) collected automatically when you use the site, for security and abuse prevention

• To verify your entry via a one-time code sent to your email
• To judge and rank entries for the competition
• To pay winners via their registered mobile money account
• To publicly announce and showcase winning entries, with consent given at entry
• To contact you about your entry or the competition

Data is encrypted in transit between your device and our servers (HTTPS). The entries database is hosted with a managed Postgres provider (Supabase) and is only reachable with credentials held by the organizers, not exposed publicly.

The admin entries list is protected by a single shared password restricted to competition organizers. We do not currently use multi-factor authentication or maintain an access log for admin logins.

To prevent duplicate entries, we check whether an entry already exists under the same email address before accepting a new submission, using the email address as stored, not a separate hashing scheme.

When you submit your video, your browser uploads it directly to a private Cloudflare R2 storage bucket, using a time-limited upload link (valid for five minutes) generated specifically for that upload. Once uploaded, the file is stored under a public R2 URL so judges can review it and, for winners, so it can be shared publicly as part of the announcement, this URL does not expire on a fixed schedule.

Entry data is retained for the duration of the competition and for a reasonable period afterward to resolve disputes, process payouts, and meet tax or legal record-keeping obligations. Non-winning entrants may request earlier deletion, see “Your rights” below.

We do not sell personal data. We share the minimum data necessary with the following service providers who help us run the competition, each processing it only on our instructions:

• Resend, for delivering verification emails
• Cloudflare (R2), for storing submitted videos
• Supabase, for hosting the entries database

We do not use an SMS or telephony provider anywhere in this process. We may also share data where required by Kenyan law.

Under the Kenya Data Protection Act, 2019, you have the right to access, correct, or request deletion of your personal data, and to object to certain processing. To exercise these rights, contact us at hello@jitumeomoka.co.ke.

Questions about this policy or how your data is handled can be sent to hello@jitumeomoka.co.ke.