Store only the preferences the platform actually uses.

Production profile settings are deliberately limited. Sensitive educational evidence belongs in its own evidence records, not in a general profile form.

Security boundary

Profile

Display and preference fields.

Identity

Email and authentication follow a higher-security workflow.

Access

Roles and student relationships require separate server verification.