Arkireitti
A family task board — for kids without accounts
Problem
A child can’t own an email address or a password — yet a shared family task board still needs authentication and security. How do you give a kid access to their own board without weakening the database’s protection?
Solution
Auth for users who can’t have accounts
Kids sign in with a 5-character code drawn from an alphabet with confusable characters removed (no 0/O/1/I). RLS stays strict: child paths go through security definer RPCs that validate ownership server-side on every call.
A realtime board
A kid ticks a task on the tablet — the parent’s phone updates instantly via Supabase Realtime. Optimistic mutations with rollback keep the UI immediate.
Zero-config onboarding
Database triggers do the provisioning: signup creates the family, codes generate automatically, and a new child gets 10 age-appropriate default routines in one transaction. A second parent joins with a 6-character family code.
Gallery
