This is my RLS policy but it doesn’t work (when I submit while in a session of that specific email - UID). My form doesn't submit anything relate to auth.uid (hmm I only submit the content). Idk if this is the reason why it doesn't work?

What's your use-case here? Because there's the

service_role

key, which can be used to create a separate supabase client; and that would bypass RLS.

I mean it’s website for tracking my lifestyle (so only I can edit it and edit it on my phone) while still show data on page for my friend

Yeah,

service_role

should only be used on server-side code.

So hmm how do I like make this work

I assume you're on the right track with the

auth.uid()

, but I'm not an RLS expert.