Geoshare Current
Rebuilt a legacy Android app into a privacy-first location-sharing platform — continuous background location with a cross-platform foundation for iOS. I owned the architecture, security design and cross-platform direction.
- End-to-end encryption — X25519 (ECDH) key exchange, HKDF-SHA-512 derivation and ChaCha20-Poly1305 authenticated encryption; the backend never holds cleartext, and the design passed external penetration testing.
- Hardened the client with an encrypted local database (SQLCipher) and enterprise-grade obfuscation (DexGuard).
- Background location draws ~1–2% per 6 hours (down from double digits) — extending runtime from roughly a day to several days.
- Migrated to a single Kotlin Multiplatform + Compose codebase — one implementation per feature, removing iOS/Android divergence.
- Defined the gRPC service contracts end to end with the backend team.













