Five working roles — admin, office, employee, subcontractor, and a read-only homeowner — enforced at the database, not just the screen. Admin "kick-out" revokes access and stops GPS instantly.
Flagship build · Field-service software suite
Two products. Both app stores. One secure backend.
For a Long Island remodeling contractor, we designed and built a complete operations stack from scratch — a native crew app for iOS and Android, a live ROI lead-triage web app, and a homeowner portal — all on one hardened backend, with real users. Discovery to store submission, handled end to end.
Native iOS + Android
Live web apps
Secure Supabase backend
The brief
A growing crew, run on texts and paper.
A remodeling contractor was running jobs, schedules, time, materials, and field communication across group texts, spreadsheets, and paper — and had been burned by developers who never shipped. He didn't need a demo. He needed working software his office and crew would actually use on Monday morning.
Nothing in one place
Time, jobs, photos, and messages were scattered across half a dozen tools and paper forms.
Burned before
Prior developers had over-promised and under-delivered. Trust in "we'll build it" was thin.
Had to ship
Not a prototype — real software, in real crews' hands, running against a real backend.
Product 01 · Native mobile
Field Ops — the whole operation in one app.
A native iOS and Android app built from a single Expo / React Native codebase, gated by role so the office, the crew, subcontractors, and the homeowner each see exactly what they should.
Crews clock in and out with geofenced arrival detection; timesheets export to CSV straight into payroll.
A real-time map of clocked-in crew with on-site / off-site checks and automatic "went dark" and "left the job site" alerts — background location only while on the clock, disclosed up front.
Multi-trade jobs with geocoded sites, a materials board grouped by urgency, and scheduling across ranges or non-contiguous days with confirm/decline and double-booking guards.
Professional per-trade work-order PDFs generated from structured spec capture, with an on-device e-signature embedded straight into the document.
Real-time office-to-field messaging with push notifications for assignments, clock events, photos, and location alerts.
A full English ⇆ Spanish toggle across every screen — device-locale default, preference persisted, roughly 490 translated keys.
Color, type, spacing, and components consistent on every screen — a finished product, not a stitched-together prototype.
Built and on TestFlight with push verified on a real device; submitted to the App Store via Apple Unlisted App Distribution and to Google Play — both currently in platform review.
Product 02 · Web app · Live
Lead Triage — rank the work by profit, not ticket size.
A public intake form feeds a transparent ROI-scoring dashboard. The most valuable job isn't the biggest ticket — it's profit per crew-day, payment speed, and low sales drag.
- A visible score breakdown behind every rank — a clear answer to "why did this one rank here?"
- Weights are data, not code — tune one and the whole list re-ranks instantly.
- Completed-job outcomes auto-tune the weights, so the model learns which jobs actually make money.
- Recommends, never auto-rejects — every lead stays on the board, with an auto-acknowledgement email on intake.
Illustrative ranking. Factors and weights are tunable per business.
Product 03 · Web app · Live
Homeowner Portal — a clean window into one job.
The contractor's clients log in to a per-job, read-only view — progress photos and schedule for their job only, plus two-way messaging with the office. Delivered as a web link, no app download, so the crew app stays private.
Scoped to one job
A homeowner sees their photos, schedule, and messages — and nothing else. No other customers, no internal views.
Secured at the database
Row-Level Security enforces the boundary in Postgres, so a client can never see costs, crew, or another customer's job — regardless of the UI.
One secure backend
Security at the database, not just the UI.
Every product above runs on one hardened Supabase backend. Access rules live in the database with Row-Level Security; privileged actions are isolated behind service-role Edge Functions; sensitive columns are locked from client writes; and every sensitive action is written to an audit log.
- Working roles
- 5
- Database migrations
- 28
- Row-Level Security
- Every table
- Automated watchdogs
- Scheduled
Realtime updates, private file storage with signed URLs, transactional email from a verified sending domain, and scheduled watchdog jobs that alert automatically on a condition — three Edge Functions and four push webhooks, all verified end to end.
End to end
We ship the parts most shops skip.
Discovery to launch — including security hardening, App Privacy and Data Safety labels, background-location review packets, and the store-policy edge cases most teams underestimate. We publish under our own developer accounts, so the client never wrestles with Apple, Google, or Supabase. They just get an admin login.
Have something to ship?
Tell us what you're trying to build.
Mobile, web, backend, or all three — send us the problem, not a spec sheet. We'll come back with a scoped plan in 2 business days.