I've got a few items of supplementary data about my users relating to my e-commerce app, including current balance, total earnings, and other bits and pieces. Because these are not directly related to access control, I have a gut feeling that I should store them in a different table and have a single reference from auth_user to these miscellaneous data.
What are people's thoughts on best practice for this?

