I have a working prototype built in Google AI Studio and I now need to take it from “demo” to a secure, production-ready release on both web and Android. First, I want every credential locked down. Both the API keys and the code itself must be protected: secrets moved to environment variables or Secret Manager, no keys exposed in the client bundle, and the repository cleaned of sensitive commits. A brief security checklist or automated scan that proves the hardening is complete will form part of the hand-off. Next comes a functionality sweep. I’m not sure whether anyone has formally reviewed the code, so plan to step through each user flow, patch breakages, and make sure the app genuinely meets Minimum Viable Product standards. User sign-in must switch to Google Authentication (OAuth 2.0) for a single, consistent login on web and Android. After that, the app needs a persistent data layer. I haven’t selected a database yet, so I’m open to your recommendation—Firestore, Cloud SQL, or another Google-friendly option—provided the app can read and write user data reliably. When those pieces are solid, the web build should be connected to my domain, served over HTTPS, and deployed live on Google Cloud. If a simple CI/CD pipeline (Cloud Build or GitHub Actions) speeds future updates, feel free to include it. Finally, convert or wrap the project so it installs as a native Android app. Produce a signed AAB, supply the keystore, and make sure it passes Google Play’s internal test track. Deliverables • Hardened codebase with secrets externalized • Demonstrably functional MVP after review and fixes • Google sign-in fully integrated • Connected database with working CRUD operations • Live HTTPS site on my domain • Play-ready Android App Bundle + deployment steps Acceptance will be based on successful security checks, an end-to-end test recording, database persistence, live domain access, and the AAB uploading without errors. I’ll add you to the private Git repo as soon as we agree on the plan.