diff --git a/README.md b/README.md
index e9f0f9d..eae13ff 100644
--- a/README.md
+++ b/README.md
@@ -2,8 +2,13 @@
 
 flask app for plurals to publicly share member lists
 
+logged in users are presumed to all be admins with distinction only between being logged in and not
+
 # assorted todo
 
+- privacy settings in database to keep selected members private to logged-in users 
+- privacy settings for groups? 
+- privacy settings for blog posts
 - add delete button to blog posts on main feed
 - show blog posts in edit member section with a delete button
 - page theme edit inside the user (below user theme?)