Private Storage
Family media, vault files, and profile photos are stored in private Supabase buckets scoped by family ID.
Security
Family Legacy is designed around a simple promise: only the right relatives should see the right family data.
Family media, vault files, and profile photos are stored in private Supabase buckets scoped by family ID.
Email/password authentication, password reset, session persistence, and protected dashboard routes are supported. Social login may be added later.
Every private query is scoped to the selected active family workspace through memberships and RLS.
Invite pages are intentionally limited and do not expose private tree, gallery, vault, feed, or AI data.
Family Legacy uses Supabase Auth, Postgres Row Level Security, membership records, and private storage policies. Every private dashboard query is scoped to the selected active family workspace.
Invite links show only limited invite-safe information. Vault files are private. Public sharing should be explicit, intentional, and separate from authenticated workspace access.