SCHEDULEFLOWLAB · PERSONAL ACCOUNT CENTER
Account Settings.
Your identity, your control.
Keep your ScheduleFlowLab account recognizable, review sign-in security, update recovery options and control your current session—without exposing your private schedule contents.
Live preview — changes are not saved until you click Save profile.
Name and avatar URL are stored in the profiles table under your user ID.
Email, password credentials and sign-in tokens belong to Supabase Auth. Password contents are never read back by this page.
Your timed schedules and events are stored separately and can be inspected from My Schedules.
An external avatar image host may receive a request when you preview the image.
Profile export covers available account identity metadata only—not passwords, server-held authentication tokens or schedule events. To export timed events, use My Schedules.
COMPLETE ACCOUNT SETUP GUIDE
How to manage your ScheduleFlowLab account
01 · Access your account
Sign in with the same email/password or configured Google provider used across ScheduleFlowLab. Session information is retrieved from your current authenticated account, not entered manually into the page source.
02 · Update your profile safely
Under Profile & Identity, enter a display name and optionally an HTTPS avatar URL. Review the live preview. Select Save profile to write only those two fields to your account-owned profile row.
03 · Change login email
Choose Password & Email, enter the desired new email address and request an update. Depending on project policy, confirmation links must be opened before your account actually switches addresses.
04 · Strengthen the password
Use a unique password or passphrase of 12 or more characters and confirm it. Updating credentials may require recent authentication or a recovery link, depending on the Supabase project configuration.
05 · Set up an authenticator
If enabled, choose Add authenticator app, scan the QR code in an authenticator and enter a current six-digit verification code. An unverified enrollment is not equivalent to a fully enabled factor.
06 · Understand session controls
Local sign-out ends the session in this browser. Global sign-out invalidates refresh tokens where supported, but existing access tokens may have a remaining lifetime. Close the page after signing out on a shared device.
07 · Export only what is available
Profile JSON contains public-facing account identity fields and useful account metadata, not password secrets. The separate My Schedules page can export account-owned timed events.
08 · Preserve the separation of duties
Changes to your account name or avatar should not rewrite event times, tasks, calendar settings or cloud schedule ownership. If a different account signs in, only that account’s authorized profile becomes editable.
WHY THESE CONTROLS MATTER
Professional account security, explained clearly.
A calendar workspace needs predictable boundaries between identity, sign-in security and personal planning data.
Identity preview
Inspect your display name and avatar before saving them. Changes do not silently rewrite your cloud schedule records.
Credential management
Update an authenticated password, initiate account email changes and request password recovery through the authentication provider.
Optional TOTP security
Configure an authenticator code factor through the authentication service where support and account policy permit.
Session awareness
Review provider, verification date and last sign-in information, with explicit sign-out controls.
Profile portability
Download a machine-readable copy of profile information available to this account page.
Authenticated ownership
Updates use the current authenticated account ID. Server-side row-level security remains the final authorization boundary.
Account Settings FAQ
Will changing my display name affect my saved schedules?
No schedule rewrite is requested. This page updates the profile row associated with the user ID, while schedules remain separate records with their own owner IDs.
Why didn't my email change immediately?
Email change requests can remain pending until confirmation. The authentication provider may require a link sent to the current address, the requested address or both. Continue signing in using the address currently confirmed by the provider.
Can I add an authenticator without changing my password?
When the project permits it, yes. A TOTP app supplies an additional factor. It does not replace your sign-in credentials or guarantee that every external service enforces the extra factor.
What should I do if I no longer have my authenticator?
Use a recovery method supported by your account and organization. This page does not provide bypass codes or override server-side MFA security. Avoid enrolling factors without a recovery plan.
Does the profile export include private event details?
No. It includes only available account and profile metadata. Timed event records should be exported separately from My Schedules, while browser-only tasks and notes may require a builder-specific backup.