your space, your rules

one-time setup: in your supabase project's sql editor, run the table + security policy below (creates a private space only you can read or write to).

create table if not exists kv_store (
  user_id uuid references auth.users(id) on delete cascade not null,
  key text not null,
  value jsonb not null,
  updated_at timestamptz not null default now(),
  primary key (user_id, key)
);

alter table kv_store enable row level security;

create policy "users manage their own data"
  on kv_store for all
  using (auth.uid() = user_id)
  with check (auth.uid() = user_id);

use the exact same email + password on your phone to link it to this same data.

connecting google grants life hq calendar access and read-only gmail access (to show unread mail on your studio board) — one sign-in, both scopes. it connects directly from your browser — life hq never sees or stores your password. you'll need a free google oauth client id first (one-time, ~5 minutes):

1. open console.cloud.google.com and create a project (or use an existing one)
2. enable the google calendar api and the gmail api for that project
3. configure the oauth consent screen (external, add yourself as a test user)
4. create an oauth client id → application type "web application"
5. add this page's address under authorized javascript origins (no trailing slash)
6. paste the client id below