Do the apps need a password?
While you are setting things up, leave this off — every tool opens straight away so the team can test freely. When the event gets close and real contestant data is in, turn it on. Each person then only sees their own team's tools.
Team passwords
Give each team a simple password. Anyone on that team types it once to open their tools. You can change these any time.
First time only: this needs Email/Password sign-in switched on in your database. Show me where (Advanced).
Test access
Pretend to be a team on this device to make sure each person only sees the right tools (for example, that Masjid Reception cannot open the Accommodation Hub).
Advanced — database settings (only if asked)
Turn on Email/Password sign-in once, then come back and save the team passwords above.
Testing rules (open — anyone with the link can read/write). Use only while setting up:
{
"rules": { ".read": true, ".write": true }
}
Secure rules for when passwords are on — locks the contestant database to signed-in staff, while still letting a contestant use their personal response link. Full copy is in firebase-rules.json.