u/Tough-Cyber-404

Hi r/FlutterDev!

Wanted to share the initial release of \*\*Pariyojana\*\*, an Android-exclusive productivity and research workspace built entirely with Flutter.

🛠️ Architecture Highlights:

\* \*\*Clean Architecture (Feature-First):\*\* Strict separation into \`data/\`, \`domain/\`, and \`presentation/\` across all 8 modules.

\* \*\*State Management:\*\* Riverpod 2.6 (\`StateNotifierProvider\` & \`Provider\`). Zero business logic inside widgets.

\* \*\*Local Persistence:\*\* Drift + SQLCipher for native encrypted SQLite at rest.

\* \*\*Hardware Integration:\*\* \`flutter\_secure\_storage\` bound to Android KeyStore TEE + \`local\_auth\` biometrics.

\* \*\*Rendering Performance:\*\* Tuned for 120 FPS high-refresh displays using \`RepaintBoundary\` isolation, lightweight frosted glass shaders, and R8 ProGuard resource shrinking (APK size: \~68 MB).

\* \*\*Motion:\*\* Liquid dynamic action button driven by Rive.

Code passes \`flutter analyze\` with 0 warnings.

📦 \*\*GitHub Repository:\*\* https://github.com/Naveen-21-Cyber/Pariyojana-Mobile-App-

📄 \*\*Architectural Constitution:\*\* Check \`TELOS.md\` in the repo for design token invariants.

Would love any feedback on the codebase or architecture from fellow Flutter devs!

Hey everyone,

Cloud-based productivity apps have normalized scanning our private notes and locking access behind recurring paywalls.

To solve this for myself and the privacy community,

I built **Pariyojana** — an open-source, local-first Android workspace engineered with a zero-trust threat model.

### 🛡️ Security & Privacy Architecture:

1. **Zero Cloud Sync:** No accounts, no background tracking, no servers. All data lives strictly in a local SQLite database encrypted with **256-bit SQLCipher AES-CBC (64,000 PBKDF2 iterations)**.

2. **Android KeyStore TEE Hardware Sealed:** The master key is derived inside your device's hardware enclave.

3. **Anti-Forensics RAM Zeroing:** Decrypted API keys and sensitive tokens are actively overwritten with zeroes (`0x00`) in volatile RAM on app background/lock to defeat memory dumps.

4. **DRM FLAG_SECURE:** Blocks screenshot capture and OS task switcher previews.

5. **BYOK (Bring Your Own Key) Direct AI:** AI queries (via OpenRouter/DeepSeek/OpenAI) route directly from your phone to the endpoint via HTTPS. Zero intermediary logging proxy.

It combines an Idea Vault, a 6-stage Kanban board, an academic paper research hub, and a job tracker into one unified offline app.

* **License:** MIT

* **Cost:** 100% Free ($0 Lifetime)

📦 **Source Code & Audit:**

https://github.com/Naveen-21-Cyber/Pariyojana-Mobile-App-

⬇️ **Direct APK Download:**

https://github.com/Naveen-21-Cyber/Pariyojana-Mobile-App-/raw/main/Pariyojana.apk

🌐 **Website:** http://pariyojana.gt.tc/

Feedback and security audits are welcome!