Safety and trust
Privacy
Family learning data is treated as child learning data: scoped access, RLS, no public tables, and no service keys in the browser.
Current privacy posture
Access to the learning app is invite-based. Parent-owned records are protected with Supabase RLS, authenticated grants, and private storage paths for portfolio evidence.