Service specification
Mobile development
iOS and Android apps — native or cross-platform, chosen for the task rather than out of habit.
§01
Technology choice
| Approach | When it fits | Trade-off |
|---|---|---|
| Swift / Kotlin | Deep hardware use, biometrics, background tasks | Two codebases |
| Flutter / React Native | Shared logic, fast launch on both platforms | Reliance on the native bridge |
| PWA | Simple content, no store required | Limited push and background on iOS |
§02
On-device security
- Secrets live only in Keychain / Android Keystore.
- TLS for every connection; certificate pinning based on risk assessment.
- Minimum permissions: every permission prompt is explained in the UI.
- No personal data in logs or crash reports.
§03
Acceptance tolerances
Cold start ≤ 2 s on a mid-range device
No crashes in critical flows during testing
Tests covering core business logic
§04
Deliverables
- Build in TestFlight / Internal testing
- Source code in your repository
- A 1–3 page threat model
- Build and signing instructions