[Feature] Convert managed profiles into full accounts

[ckaotik]

Problem

I've been wondering what happens when e.g. a child grows up and health data is no longer managed by their guardian(s) but by themselves, without possibly losing years of data. Is there already a way to convert managed profiles into regular accounts? This would also affect family members that could be convinced to (finally) interact with HealthLog themselves.

Proposed solution

There could be a flow that is triggered by a date (e.g. birthday when reaching legal age), or manually via a button on the managed profile edit form. In that flow, the user should be informed that the managed profile should be migrated and they then have to create an invite link (for the child).

The child could then be provided an extended onboarding, with a page detailing the previous guardians and how to deal with them. Options could be "remove all access", "retain read-only access" (possibly limited by data type) or "retain full access".

Alternatives considered

No response

Affected surface

Web (PWA)

Additional context

No response

Pre-flight checks

• I confirmed this is not a duplicate of an existing feature request.
• I'm proposing a feature, not asking a usage question (those go to Discussions or the docs).

[MBombeck]

Thanks for writing this up, it's a really sensible idea and it's going on the roadmap.

The good news on the "without losing years of data" part: nothing gets lost. A managed profile is already a complete account in the database, it just doesn't have an email address or a password yet, and that's the only thing stopping it from signing in. So a conversion doesn't move any data. It sets credentials, removes the managed flag and decides what happens to the guardian's access, and your three options map straight onto that last step.

Two things I'd do a bit differently. The credentials should be set by the person taking over the record, through a one-time link they open themselves, otherwise nothing has really changed hands. And I'd skip the automatic trigger on a birthday. The age of majority isn't the same everywhere, and some managed profiles exist for reasons that never end, so a date shouldn't take away a guardian's access on its own. A reminder on that day makes sense; the step itself should stay a deliberate one.

I'll post here once it has a version.