Overview
Authentication in High IQ is handled by Clerk and supports Apple Sign-In, Google OAuth, and email/password. This flow documents every authentication state, the signed-out preview experience, and account lifecycle management.Authentication State Machine
Sign-Up Flows
Apple Sign-In
Google OAuth
Email/Password
Signed-Out Preview Experience
Session Management
Account Deletion Flow
Edge Cases
| Scenario | Behavior |
|---|---|
| Apple hides email address | Relay email works normally with Clerk |
| Google account already linked | Silent sign-in, no duplicate account |
| Email already in use (different method) | “Account exists” with correct method shown |
| Network failure during sign-up | Error with retry, no partial account created |
| Email verification link expired | Resend option after 60 seconds |
| Force quit during authentication | Resume at auth screen on next launch |
| Sign out with unsaved data | All data already synced to Convex, safe |
| Delete account then re-signup | Fresh account, no data recovery |
| Multiple devices signed in | Session synced across all via Clerk |
| Token refresh failure | Silent retry, then sign-in prompt if persistent |
Related Flows
Onboarding
What happens after authentication.
User Lifecycle
Authentication as the first lifecycle transition.
Master Journey
Auth in the context of the complete journey.
Gmail Sync
Additional Google permissions for Gmail access.