# The household app needs no account

The repository's architectural decision, rationale and consequences.

# The household app needs no account

**Status:** accepted · **Date:** 2026-11-06 · **Related:** [ADR-0003](0003-organizations-are-the-tenant.md), [ADR-0015](0015-household-data-lives-on-the-device.md)

**Enforcement:** a mobile test that the root layout opens the app from a local household profile with no session present.

The template guards its mobile root layout on a Better Auth session. Varu's promise is that the kit, plan, vault and crisis mode work without an account and without a server, and crisis mode must open offline in under a second.

## Decision [#decision]

1. **The root layout guards on a local household profile, not on a session.** No profile means onboarding; a profile means the app.
2. **Better Auth stays**, only for family sync, municipality users and list editors. Signing in is an optional step reached from family sync, never a gate.
3. **Household members are people in the household record, not Users.** A Member of a household is not a Better Auth Member of an Organization. See `CONTEXT.md`.
4. **Pro is tied to the store purchase**, not to an account; cancelling in the store leaves the kit on the device.

## Consequences [#consequences]

- Template demos that assume a signed-in user (todos, organizations) leave mobile navigation in T05.
- Support cannot look up a household; there is nothing to look up.
- Family sync needs an account, which is the first place the app asks for an email.