Our own product,
in detail.

We do not have client case studies to show yet, and we would rather say so than pad this page. What we do have is JCovenant, which we built ourselves and which happens to be a harder problem than most client work.

CASE STUDY / FIRST-PARTY PRODUCT

JCovenant

Launching on Google Play on 08 October 2026.

A privacy-first Christian matrimony service for India, built as our own product and now offered as a reference for the way we work.

JCovenant

First-party product

One typed coreWeb and mobile share a single contract package, so a schema change cannot drift between clients.
Human in the loopEvery profile passes a human approver before it is visible in discovery. Approvers can approve or reject and nothing else.
Short-lived linksPhoto URLs are minted per response on a deliberately short lifetime. Nothing durable is ever handed to a client.
Migrations onlyThe schema moves through reviewed, reversible migrations. There is no path that silently recreates tables.

01 / THE PROBLEM

Sensitive data is an
architecture problem.

Matrimony services hold some of the most sensitive personal data a product can ask for: identity documents, family background, income, photographs, and the implicit fact that someone is looking for a partner. Most of them treat that as a growth problem.

JCovenant treats it as an architecture problem instead. Profiles are invisible until a human approver reviews them, verification is layered rather than optional, and a suspended account stops being reachable rather than merely being hidden from the interface.

02 / ENGINEERING

Decisions worth
reading about.

  • Discovery is male-to-female and female-to-male, and it is authorised inside the search query itself. A member who is suspended is refused, and the check is repeated separately when they have no primary profile so the two cases cannot be told apart from the response.
  • Feature flags are enforced on the server. The clients read flags to decide what to render and never to decide what is permitted, which keeps a modified client from unlocking anything.
  • Photos are stored in a private bucket. The API never proxies image bytes; it mints a short-lived presigned URL per response and stores only the object key, so a leaked link expires on its own.
  • Verification codes reach members over WhatsApp or email through one delivery path, with the provider template and language held in configuration so a Meta template can be renamed without a deploy.

03 / FOUNDATIONS

Built on.

One contract package is shared by the API, the web client, and the mobile client, so a change cannot drift between them. We publish the tools and versions in the repository on day one rather than keeping them a private choice.

  • Type-safe across the whole stack
  • One shared contract package
  • Cross-platform mobile
  • Web front end
  • Service API with a relational database
  • Reviewed database migrations
  • Private object storage for sensitive files
  • Server-side authorisation
  • Messaging and email delivery
  • Managed build and release pipeline
  • Layered identity verification

04 / THE REST

What else we are building.

Two of these three are us asking for work.

NEXT

Want the same standard on your product?

Tell us what you are building and we will tell you honestly whether we are a fit.

Start a project