Security
Designed for private household data.
HouseFair stores practical household information: tasks, expenses, receipts, issues, and notification preferences. The SaaS architecture is built so each household is isolated from the others.
Authentication
Supabase Auth is the commercial source of truth. PIN switching is not the SaaS security boundary.
Tenant isolation
Household data is scoped by household_id with RLS helper functions and server-side checks.
Billing
Stripe Checkout and Customer Portal handle card details. HouseFair does not store card numbers.
Secrets
Service-role, Stripe secret, webhook, VAPID, and AI keys must live only in server environment variables.