Google Cloud suspended the project in May 2026. The cause was mine: a Gemini API key compiled into every shipped binary with no application restrictions, extractable by anyone who unpacked the APK. I audited all four keys on the project, rotated and restricted them, scrubbed the history, and documented the whole thing for the appeal. Reinstated a week later.

Kenyan shopkeepers sell on credit constantly, so a ledger that only records paid sales is useless to them. Debts and supplier credits are first-class records here, not an afterthought bolted onto a Western point-of-sale model — which changed how stock, revenue, and profit all had to be counted.

The game is only as good as its word list, so the 1,864 words went through a pipeline before shipping: duplicate detection, format normalisation, and an automated pass that scored every clue for quality. Bad clues were cut rather than patched.

Counting the same event across every user means a handful of Firestore documents take every write. I built the monitoring before the traffic arrived — dashboards for function p95 and error rate, alerts on write contention in the hot collections, and automatic cleanup of dead FCM tokens so failed pushes stop counting as failures.

Video calling and an always-available AI companion are both metered per use, which makes an idle user expensive. Sessions tear down aggressively and AI replies are gated behind the subscription, so the cost of a free account stays close to zero.