KIV: notifications & access — configurable summary time, auth alternatives

[guangshinhaha]

KIV — Notifications & Access

Items

1. Configurable daily summary send time — currently hardcoded 5:30am cron. Let each school set when the daily summary email goes out. Add summaryTime field to School model. Some schools want 6am, some 7am
2. Unique PIN per teacher (instead of email OTP) — researcher suggested static PINs for faster morning login. Recommendation: No. PINs are static credentials (shared, Post-it'd, never rotated). Goes against OTPaaS architecture. Better alternatives if login friction is the real problem:
   • Extend session duration (currently 7 days — should rarely need re-login)
   • Faster OTP flow (pre-fill email, auto-submit)
   • Biometric/passkey support on mobile (future)
   • Investigate actual friction point before adding weaker auth

Why KIV

Summary time is easy but low priority. PIN auth is a design question that needs more user research on what the actual login friction is.

🤖 Generated with Claude Code