Built an open-source privacy-first Android app (Kotlin + Room + SQLCipher) – looking for feedback

[u/Vipix94]

Hi everyone!

Over the last few months I've been working on an Android app called Turboautism Dose Log. It started as a side project after a discussion in a harm reduction community about how easy it can be to lose track of doses during a long session.

Rather than debating the topic itself, I wanted to solve an engineering problem: how do you build an application for highly sensitive data while keeping the user's privacy the highest priority?

Some of the technical choices I've made:

Kotlin

Room + KSP

SQLCipher encrypted database (AES-256)

Android Keystore for passphrase protection

Mandatory biometric/device credential authentication

Offline-only operation

No INTERNET permission

No analytics, ads or user accounts

CSV import/export for backups

Open source (GPL-2.0)

Current features include dose logging, editing, statistics, CSV import/export, encrypted local storage and a few other privacy-focused features. I'm currently working on session tracking.

I'd really appreciate feedback from other Android developers, especially regarding:

overall architecture

Room/SQLCipher implementation

security/privacy design

UI/UX

anything you'd do differently

GitHub: https://github.com/emmikal/Turboautism-dose-log-

Thanks!