Academy data boundaries
Students, guardians, classes, attendance, and payment records are scoped to their academy. Database access rules enforce tenant boundaries for authenticated users.
Security overview
Clear boundaries for academy operations.
ClassFlow is a private-pilot product. Its current workflows keep academy data separated and make billing, payment, and communication actions deliberate.
Restricted platform operations
Administrative billing and account actions run through protected server workflows. Sensitive server credentials are not exposed to the browser.
Audited subscription billing
ClassFlow subscription drafts, invoices, receipts, and delivery attempts use explicit states and activity records. Financial actions are not triggered by page views.
Deliberate communication
Parent WhatsApp follow-up is prepared in ClassFlow and sent manually in WhatsApp only when the guardian has opted in. Invoice email is a separate confirmed admin action.
Current product boundaries
ClassFlow records manual academy payments but does not process parent money. WhatsApp messages are not sent or delivery-tracked by ClassFlow. Public pilot access begins only after email confirmation and admin approval.