For IT & technology teams
Secure by default. Simple to support.
ClubCentric uses the identities your school already manages, enforces access in the database, and runs in any modern browser. There is nothing to install on student devices and no servers for you to maintain.
Identity
Your accounts, your domain
Students and staff sign in with the accounts you already provision. Schools can be limited to their own email domains, so only your people get in.
Google
Microsoft
Apple- Email code
- Domain restriction
- Each school lists its allowed email domains. Sign-ups from other domains are rejected.
- Verified email
- Email sign-ups confirm ownership with a one-time code, stored only as a hash.
- Reviewed schools
- New schools are requested and reviewed before students can join them.
- No shared logins
- Every action is tied to an individual account, never a club password.
Authorization
Least privilege, enforced by Postgres
Permissions aren’t just hidden buttons. Every table is protected by row-level security policies that check the member’s club role and its 35 permissions on every query. Club owners hold every permission; everyone else gets exactly what their role allows.
Runs meetings, forms, announcements, and membership.
30 of 35 permissions
- Meetings
- Allowed: ViewAllowed: CreateAllowed: EditAllowed: DeleteAllowed: ManageAllowed: Take attendanceAllowed: View attendanceAllowed: Manage attendance
- Announcements
- Allowed: ViewAllowed: CreateAllowed: EditAllowed: DeleteAllowed: Manage
- Forms
- Allowed: ViewAllowed: CreateAllowed: EditAllowed: DeleteAllowed: Manage
- Members
- Allowed: ViewAllowed: InviteAllowed: RemoveAllowed: Edit rolesNot allowed: Manage
- Documents
- Allowed: ViewAllowed: CreateAllowed: EditAllowed: Delete
- Nexus
- Allowed: ViewAllowed: EditAllowed: Manage
- Club settings
- Allowed: ViewNot allowed: EditNot allowed: Manage
- Billing
- Not allowed: ViewNot allowed: Manage
Data protection
Sensitive data, handled carefully
We collect what clubs need to run and protect the parts that matter most.
- Hashed student ID cards
- NFC card numbers are salted and hashed on the phone before they are stored.
- Signed file access
- Form uploads are served through signed links that expire after an hour.
- Server-only secrets
- Privileged keys never ship to browsers or phones.
- Managed infrastructure
- Hosted on Vercel and Supabase-managed Postgres, over HTTPS.
Deployment
Nothing to install, nothing to image
ClubCentric runs in the browser on Chromebooks, Windows, and Macs, with a mobile app for students’ phones. Rolling it out is a sign-in link, not a software push.
- Web app
- Any modern browser at app.clubcentric.org.
- Mobile app
- Download from the App Store.
- Accounts
- Google, Microsoft, Apple, or verified school email.
- Hardware
- None. Check-in uses a projector and students’ phones.
FAQ
Frequently asked questions
See how ClubCentric fits your environment
Our team will walk your IT staff through identity, permissions, and data handling.