Native Android Companion (v3.5.0)

Android Companion App

The native companion app securely bridges your device SMS to the Mpesa Analyzer cloud. Equipped with CameraX vertical QR pairing, on-device SQLite staging, "Ask My M-Pesa" AI Financial Assistant, and AES-256 encrypted batch uploads, it ensures zero transaction loss with minimal battery overhead.

Link Device via QR Security & Permissions
CameraX QR In-App AI Chat Biometric Auth AES-256 CBC
Zero-Loss Financial Assistant & Sync

Engineered for Android 8.0 through Android 15+ (API 26–36)

End-to-End Pipeline Architecture

Designed to guarantee delivery even during network dropouts and strict OEM background constraints.

1. Scan & Handshake

Use the vertical CameraX scanner to capture the pairing QR code from the WebApp. Instantly establishes mutual token authentication without manual text entry.

2. SMS Interception

A background broadcast receiver listens for incoming SMS. Messages are deduplicated by sender, timestamp, and body hash to ensure idempotency.

3. SQLite Staging

Transactions are committed into an on-device SQLite queue. If the device is offline or roaming, records accumulate safely without data loss.

4. Encrypted Batch Sync

WorkManager compresses and AES-256 encrypts loot batches, sending them to /api/v1/upload when connectivity is established.

Engineered for Modern Android

Built with modern Android Architecture Components, Kotlin, and Jetpack libraries. No obsolete background services or excessive wake locks.

Vertical CameraX Scanner

Integrated barcode analyzer with automatic vertical orientation locking and tap-to-focus for effortless pairing under any lighting.

Adaptive Vector Drawables

Fully revamped asset pipeline using crisp XML vector drawables that scale losslessly to any screen density and automatically inherit system light/dark themes.

WorkManager & Doze Resilience

Complies with Android 10+ battery optimization standards. Synchronizations are batched and scheduled during active network windows, consuming < 2% battery daily.

Companion Capabilities
  • Instant QR Linking — Pair with the WebApp in seconds via CameraX barcode scanning.
  • Offline Staging Queue — SQLite persistence guarantees zero dropped transactions when out of coverage.
  • End-to-End Encryption — Payloads are encrypted with AES-256 CBC using your device token key before transmission.
  • Historical Batch Import — Scan and backfill months of existing SMS on initial setup.
  • Multi-Device Fleet — Link separate personal and business phones into a unified web ledger.
  • Automatic Heartbeats — Reports device sync timestamps, batch counts, and connectivity state to WebApp control center.
Configure Device Now

Developer & Integration Specifications

Precise API contracts and cryptographic standards for power users and auditors.

Batch Upload Endpoint

Android sync workers dispatch batches to the unified REST endpoint:

POST http://34.173.152.56/api/v1/upload
Headers: Authorization: Bearer <TOKEN_HASH>

Payload contains timestamped AES-encrypted message arrays. On success, the server responds with batch receipt metadata and trigger statuses.

Cryptographic Identity

Each mobile instance is bound to the owner account through non-reversible cryptographic secrets:

  • Secret Hashing: WebApp stores only SHA-256 hashes of generated device tokens.
  • Payload Integrity: Upload chunks are validated against message digests before insertion.
  • Instant Revocation: One click in the WebApp immediately invalidates any compromised device token.
\n