Architecture decisions, privacy engineering and the things we got wrong shipping six apps to Google Play. Written by the people who wrote the code.
Treating connectivity as optional changes what you are willing to put in a UI. A short argument for designing the disconnected experience before the connected one.
Building Privacy Lens meant reading a great many manifests. The patterns that emerged say more about incentives than about security.
Six patterns we now apply to every AI feature we ship — drawn from the ones that worked and, more usefully, the ones that did not.
Two of our apps serve religious practice. The usual growth playbook — streaks, badges, push nudges — is actively harmful there. What we did instead.
Why this site is a fully static export, what that rules out, and the workarounds we use for the things a server would normally handle.
Every shipped app is a permanent maintenance obligation. Our approach to keeping a growing portfolio sustainable.
Occasional writing on shipping mobile AI — architecture decisions, privacy engineering and what we got wrong. No cadence promises, no filler.