Confirm it's you

Some roles can see members' personal information: their sign-in email and contact details, their status history, their dues, or who holds which role. A stolen password alone must not open that. So, before Manage opens, Tounes asks these people for a second check: Confirm it's you.

Who can do it

Tounes asks anyone whose roles can edit members, read their status history, see the dues, give roles or answer privacy requests. With the roles as Tounes sets them up, that is the Tenant Admin, the Director, the Treasurer and the Privacy Officer. What counts is what a role allows, not its name: a role your choir set up with the same access asks too.

The Librarian, Member, Section Leader, Group Leader and Group Member roles are never asked.

How to

Confirm it's you

1. Open Manage. A card says "Your role can see members' personal information. Confirm it's you to open it." Tap Confirm it's you.
2. If this device has a passkey saved, tap Use my passkey and confirm with Face ID, Touch ID or your device PIN.
3. Otherwise, tap Email me a code instead. A 6-digit code goes to your sign-in email and is valid for 10 minutes. Type it and tap Confirm. No email? Tap Send a new code.
4. After a code, Tounes offers Save a passkey, so next time takes one touch. Tap it, or Not now.
5. Manage opens.

How long it lasts

1. Manage stays open while you use it. After 30 minutes without using it, Tounes asks again.
2. This never signs you out. Home, the calendar, the music and the rest of the app never ask.
3. Until you confirm, you use Tounes as a member: only the Manage tools wait.
4. Changing your sign-in email also needs this check first: confirm it's you in Manage, then change the email in your profile.

Lost or replaced phone

1. Choose Email me a code instead: the emailed code always works.
2. To cancel the passkeys saved on the lost phone, ask another Tenant Admin of your choir to open your page in Manage › Choristers and Staff and tap Remove passkeys. Nobody can do it for themselves.
3. Next time, you confirm with an emailed code, then save a new passkey.

On the web and in the apps

The check works the same everywhere. On the web, your browser handles the passkey. A computer without a built-in passkey can still use one on your phone or a security key. In the apps, the passkey uses Face ID, Touch ID, your fingerprint or the phone's lock code. On a device that has no passkey for Tounes yet, use an emailed code, then save one there.