Apple Sign-In: verify a real email before saving data
Apple's Hide My Email is great for privacy, but reports and invites need a real address. We now ask for one on first use, with a 6-digit code flow that takes about 30 seconds.
If you sign in with Apple and choose Hide My Email, Apple gives us a relay address that forwards to your real inbox. That works for sign-in, but reports, team invites, and password resets all need a real email we can actually deliver to.
Now, the first time you open the app or dashboard with a relay address, we ask for a real one. Enter it, type the 6-digit code we send, and you're back to where you were. Takes about 30 seconds.
Behind the scenes the API now refuses to write data on a relay session until verification completes, so the rule holds even if the app binary is out of date. Reads still work, so you never lose access to your inventory while you're verifying.