We are using email and password to login into an app but for the first-time use, there's an OTP verification. If correct code is typed-in, the user can use the app.
A verification link is sent to the email but this is not initially required to use the app (the only requirement is that the OTP code is correct).
Of course, we'd like that the email is correct for sending out notifications, promotions, etc. However, we also don't want to lock-out the user out of the app if they never verify their email as we already use the OTP as the verification method.
So since the user may never verify their email address, what are the normal consequences that should happen should this occur? Should we remind them through the app and just continue sending to the email, as per normal? Should we disable some functionalities? Or just let it be?