I can't help because I don't use Google Play, but it sounds like a nice app, good luck with it! It would be great to see it on F-Droid or Accrescent one day.
post
Signed up, is the app open source?
Not right now, it is closed source. The privacy side is built on end to end encryption instead: household content is encrypted on your device before it syncs, so we technically see nothing even though the code is closed. If you want the details: https://unafamily.app/privacy. Totally understand if open source is a must have for you, and thanks for signing up either way!
Ah yes, the trust me bro security model.
Fair, and honestly that is the right instinct, you should not have to trust me. That is kind of the point of the design: the encryption key is created on your own device and stays in the device keyring. It never touches our server, so there is nothing to trust me with, I could not read your household data even if I wanted to. Details here: https://unafamily.app/privacy
However, noone can inspect the source code and see if encryption is implemented properly, or at all.
Fair, that is the unfortunate truth with closed source. I completely understand where you are coming from, it is honestly the same skepticism that drove me to build Una in the first place. That is why the encryption keys are created and stored on your own device and the sync traffic only carries encrypted content. But I do get you! I will be sure to have you in mind if we open source the Android and iOS versions.
You may want to consider splitting out the back end or the sync/encryption parts into a library that you open source, which would give a bit more trust that you have actually done the right things.
Absolutely, the Android community has been a lot more vocal about this. I actually had it on an old roadmap back when the iOS client was created, but I have not really caught up on it since the feature list was not 'finished' until last month. But hearing that this many people want that transparency, I would gladly bump it and will work on it as soon as the bugs are ironed out and Android is fully out. I admire people who are cautious, I work with security as my day job myself and would act the exact same way.
Done. Looking forward to giving it a shot.
Welcome aboard! The invite mail is on its way to you now. One thing to check: the opt in link needs you to be logged in to Google Play with the same email you signed up with, otherwise the test page shows nothing. If you need to use another mail, one that is signed in on your phone, just give me a shout here or add it on unafamily.app :) Let me know if it works!
Ahh, very sorry. I don't use play services or any apps that rely on it on my phone(I run Graphene). If you ever decide to offer an android app that doesn't depend on it, I'll definitely try it out.
Best of luck on your roll out!
all 16 comments