Private Storage
Family media, vault files, and profile photos are stored in private Supabase buckets scoped by family ID.
Security
Built for private family memories.
Family Legacy is designed around a simple promise: only the right relatives should see the right family data.
Authentication
Email/password authentication, password reset, session persistence, and protected dashboard routes are supported. Social login may be added later.
Tenant Isolation
Every private query is scoped to the selected active family workspace through memberships and RLS.
Family Privacy
Invite pages are intentionally limited and do not expose private tree, gallery, vault, feed, or AI data.
Supabase-backed access control
Family Legacy uses Supabase Auth, Postgres Row Level Security, membership records, and private storage policies. Every private dashboard query is scoped to the selected active family workspace.
Family privacy by default
Invite links show only limited invite-safe information. Vault files are private. Public sharing should be explicit, intentional, and separate from authenticated workspace access.