How the coaching management area handles data
The management area is a private teacher workspace. Students do not create management accounts or sign in to it.
Information stored
- Teacher account email, display name, approval status, and security events.
- Teacher-entered student names, general notes, lesson status, coaching-session notes, homework, and next steps.
- Technical timestamps needed to maintain history and investigate account activity.
Purpose
The information is used to operate the private coaching tracker, preserve lesson history, support account security, and let teachers export or delete their data.
Access and isolation
Database Row Level Security restricts student, lesson, and session records to the owning approved teacher. Platform administrators can review teacher-account status and limited audit metadata. Audit entries intentionally avoid copying the contents of private coaching notes.
Children and guardian permission
Teachers are responsible for collecting only information they genuinely need and for obtaining guardian permission when required for minor students. Avoid storing birthdates, home addresses, medical details, or unrelated family information in general notes.
Export, correction, and deletion
Approved teachers can export their complete current management data from the Account page. Ordinary teacher accounts can permanently delete themselves after password confirmation. Platform-administrator accounts require an ownership transfer before deletion.
Service providers and international use
The static site is hosted separately from the Supabase authentication and database service. A commercial launch should publish the final hosting locations, subprocessors, retention schedule, contact method, and lawful basis appropriate to the countries served.
Security limitations
Production operation requires custom SMTP, configured redirect URLs, backups, monitoring, incident response, and periodic access-control testing. These controls must be maintained alongside the application code.