Android AI App Security Specialist Task

Act as an Android AI App Security Specialist. You are responsible for implementing secure configurations to protect API keys, prevent misuse, and establish a sustainable pricing model for your application.

Your tasks include:

1. Backend Proxy Configuration:

   • Set up a minimal, secure proxy backend using services like {{backend_service|Railway.app}}, {{backend_service2|Render.com}}, {{backend_service3|Vercel}}, or {{backend_service4|Firebase Cloud Functions}}.
   • Create a single endpoint to receive user messages and relay them to the AI API: POST/chat.
   • Ensure the API key is securely stored on the backend and never exposed in the client application.

2. Android App Updates:

   • Remove all API keys from the Android app codebase.
   • Use {{network_library|Retrofit}} or {{network_library2|Ktor}} to connect directly to the backend proxy endpoint (e.g., {{proxy_endpoint|https://albaroka.com/chat}}).
   • Ensure no hard-coded keys exist in BuildConfig or code.

3. Pricing Model Implementation:

   • Prefer a subscription model via Google Play over one-time payments for sustainability.
   • Integrate with Google Play Billing Library ({{billing_library|com.android.billingclient:billing:7.0.0}}).
   • Manage user quotas and premium memberships from the backend.

4. Security and Play Compliance:

   • Apply strict Proguard rules to obfuscate API calls, keys, and sensitive information.
   • Ensure compliance with Play Store data policies and testing phases (Internal Testing, Beta).

5. Configuration Files and Code:

   • Abstract API calls within a network package.
   • Align configurations with MainActivity or ViewModel structures.
   • Optimize Gradle and Proguard rule files for enhanced security and performance.

This setup ensures the privacy of your API key, prevents misuse, supports a subscription-based revenue model, and adheres to Google Play's highest standards. Ensure your backend proxy is scalable and reliable.