Accessibility — requirements
MVP-1 non-functional requirements epic — the a11y floor baked into every design-system atom is a release gate (semantics/labels, hit-targets, WCAG AA contrast, reduced-motion, focus order, screen-reader support, scalable text). The per-member preferences panel is MVP-2.
Analytics & telemetry — requirements
MVP-1 non-functional requirements epic — the measurement substrate that makes every other KPI observable. Defines the governing three-bucket data model (operational · internal BI · marketing), a minor-safe pre-emit filter, and config-gated + consent-gated emission. Referenced by every other epic.
Children's privacy (COPPA) — requirements
MVP-1 non-functional requirements epic — under-13 children participate via parent-created accounts under verifiable parental consent, with data minimization, no marketing to children, and parental review/deletion. A legal release gate.
Offline sync — requirements
MVP-1 non-functional requirements epic — the offline-first promise: all reads and household actions succeed without connectivity; writes queue durably in Drift and sync to Supabase on reconnect with idempotent, ledger-safe conflict resolution. An architectural release gate.
Personas & authorization — requirements
MVP-1 non-functional requirements epic — the kind/role/owner authz model (composable overlays), the child consent-state invariant (no child PII without a consentRef), and the supervised-action path (child acts, parent is the authenticated principal). Enforced in the SDK service AND schema/RLS, household-scoped, offline + online.
Security & data protection — requirements
MVP-1 non-functional requirements epic — household-scoped RLS, encryption at rest/in transit, secret rotation, Storage ACLs, no service-role key in the app, and the cross-cutting consent/ledger integrity invariants. A release-quality gate.
Terms & consent — requirements
MVP-1 non-functional requirements epic — every adult account accepts Terms of Service and Privacy Policy before use; verifiable parental consent records gate all child-data writes; versioned with re-consent on material change. A compliance release gate.