Available for freelance work

I build and ship Flutter apps with real AI backends — end to end.

Solo founder of UpWella, an AI wellness app live on Google Play. I handle the whole stack: mobile app, edge backend, AI integration, and the security & compliance work that gets a subscription product actually approved.

upwella / deploy.log
MAYbuildRebuilt from single-file PWA into a native Flutter Android app
MAY–JUNfixMeal plan dietary logic, TDEE calc, workout crash, checkout overflow
JUNship106/106 feature checklist complete — billing, subscriptions, paywall live
JUNshipPlay Integrity migration, submitted to Google Play
JULsecurityIncident found via GCP alert — AI endpoints had no auth. Rotated all keys, shipped App Check + JWKS verification across 14 endpoints
JULfixGoogle Play targetSdk 36 compliance deadline — patched with zero regressions
JULshipLocalized across 6 languages incl. Hebrew & Arabic RTL
JULliveClosed beta running — 12 testers toward production unlock
01

Case study — UpWella

Flutter · Android Firebase Auth / Firestore / Hosting / App Check Cloudflare Workers Claude (Haiku) Google Play Billing

An AI-powered wellness and weight-loss app for people with significant goals who work out at home. Built solo — product, mobile app, backend, and Play Store submission — from a single-file prototype to a live subscription product.

AI coaching layer

An AI coach persona running on Claude Haiku via a Cloudflare Worker, handling meal planning, smart re-rolling, and food/barcode search.

Subscription product

Google Play Billing with monthly/annual tiers, restore-purchase flow, and premium gates on PDF export, voice coaching, and trend charts.

Six-language localization

Every screen shipped in EN/HE/AR/ES/PT/FR, including a hand-rolled onboarding tutorial built to get right-to-left layout correct.

Habit mechanics

Firestore-backed streaks with a rate-limited "streak safe" grace period, progress photo journaling, and monthly report cards.

Security response

A Google Cloud alert surfaced that the AI backend had shipped with no authentication on its endpoints — open CORS, no token checks.

Treated as a live incident: every credential rotated, then a real fix shipped — Firebase App Check enforced end to end, RS256 JWT verification against Google's JWKS cached in KV, 14 endpoints gated, CORS locked to production origins, and a KV-backed rate limiter keyed by token subject.

02

What I take on

01

Flutter app builds

From idea to a shippable Android (or cross-platform) app — onboarding, core product flows, and a store-ready build.

02

Backend & infra

Firebase architecture, Cloudflare edge functions, auth, and the security hardening most MVPs skip until it's a problem.

03

AI feature integration

LLM-backed coaching, chat, and content features wired into a real product — not a wrapper demo.

03

Stack

Flutter Dart Firebase Firestore Cloudflare Workers Claude API Google Play Billing App Check / JWKS Git