DEV Community: Jackson Wood

X Features Every Great Kiosk Software Development Should Have

Jackson Wood — Tue, 21 Jul 2026 10:55:20 +0000

Kiosk Software Development is the process that builds the application layer, device management system and integrations to turn a touchscreen into a self-service terminal. The hardware is only 20% of the equation. The software, which handles the offline recovery, remote monitor, payment security and thousands of edge cases that real users create, is the other 80%.

This is not a theoretical problem. I spent hours over the remote desktop debugging a frozen terminal screen at 6AM, while the store manager of a client waited in line behind a dead terminal. This one incident, which was traced to a third party payment SDK silently stopping retrying unsuccessful transactions, is why I insist on a watchdog before touching a single UI. The majority of agencies will not tell you this story. I'll tell you, because that's what makes the difference between a good-looking kiosk in a demonstration and one that lasts for six months at a retail store.

What Kiosk Software Does (Beyond Touchscreens)

A kiosk is not just an application in full-screen. A kiosk is a small, distributed system that has a specific task.
Each kiosk application is actually two programs that work together.
Apps that are viewed by users -- this is the app your customers use to order, check-in, scan documents, or even check-in.

The controller/agent is the background process which locks the device in kiosk mode, restarts apps that have crashed, pushes out updates, reports on health and prevents users from re-entering the operating system.
The majority of competitor articles on this subject focus primarily on the first layer -- good UI, branding and multi-language support. They barely mention the second. This is the part of a kiosk that keeps it running unattended without any attention for many months. Most budget quotes fall short on this.

Core Components Every Kiosk Build Needs

1. The Kiosk Mode Application

The Android, Windows or iOS app is locked down to one task. Hardware back buttons, notification shades and OS-level escapes are disabled. It's important to understand that "true" kiosk locking is OS-specific. Android's Lock Task Mode behaves differently than Windows Assigned Access or iOS Guided Access. A generic cross-platform wrapper can leave gaps in the code which a curious user, or a bored teen, will discover within a few days.

2. Remote Device Management (MDM)

It's important to know, without having to send a technician, if Kiosk 47 in a mall that you have never been to is online, if it is running the latest app, or if its printer has run out of paper. It's the most overlooked line in kiosk proposals and is often the first to be cut down for a cheaper price.

3. Payment and Hardware Integration

Each of these devices has its own SDK and certification requirements.

4. Offline Resilience

Wi-Fi drops. Cellular fails. A kiosk which cannot queue a transaction and then sync it later is not production-ready. It's just a demo. I've seen "finished", kiosk software that hadn't been tested when the network cable was pulled mid-transaction. This gap is only revealed on launch day in front of real customers.

5. Analysis and Reporting

This data transforms "we installed 30 Kiosks" into "we now know which 3 locations require a UX improvement."

Why most kiosk vendors fall short (and what to ask instead)

The majority of agency websites list the industries they serve -- retail, healthcare and hospitality, banking, etc. -- in a series of bullets with little depth. You can't tell if a vendor built a hospital kiosk by looking at the bullet points. Ask these questions when you are vetting your partner.

How can you deal with a transaction that is successful on the processor’s end, but not confirmed on the kiosk's? This is the situation that leads to double-charges or refunds.

What is your update rollback procedure if you add a new brick to the fleet?

Can I view uptime/monitoring Dashboards on a live client deployment and not just a mockup version?

How can you test your kiosk software in real-world network disruptions, and not only on stable Wi-Fi at the office?

After launch, who owns the source code of the device management portal -- me or a license agreement I am locked into?
If a vendor cannot answer concretely #2 and #3, it's not just a minor issue.

Build vs. Off-the-Shelf vs. Custom Development

If you're testing an idea with three kiosks in one location, an off-the-shelf platform is a reasonable starting point. If you're deploying across dozens of sites, integrating with an existing EHR, POS, or ERP system, or handling payments and sensitive data, custom kiosk software development stops being a luxury and becomes the only path that won't box you in later.

The Development Process, Step by Step

This sequence is usually followed by a kiosk that will last in the field. Most budget and timeline overruns are caused by skipping these steps.
Discovering and selecting hardware -- Define the actual user journey before choosing a screen or enclosure (checking in ordering paying printing). It is common to make a costly mistake by selecting hardware before the software workflow has been defined.

UX prototyping public touchscreens - Designing for standing, gloved users, sunlight glare and an 8-second attention span -- Very different from designing mobile apps.

Core application development - Build the actual task flow with all payment and hardware failure paths mapped out, not just happy paths.

MDM and Remote Monitoring Setup -- Wiring the dashboard to allow you to see fleet health without having site visits.

Hardware and network stress tests -- Deliberately removing power, pulling out network cables and jamming the printers in mid-run, to see what breaks, before a client does.

Pilot deployment -- First, test in one or two locations with real-time usage data and then roll out the full system.

Fleet rollout, ongoing support and monitoring -- Update management, tracking, and an SLA for support that does not disappear after going live.

Common mistakes I see founders make

It is better to choose hardware before you define the software workflow. The enclosure you choose may not fit the printer that your workflow requires.

Offline mode is viewed as "nice to have." In the real world, networks fail. An untested offline route will result in lost transactions and angry clients on day one.

Underestimating remote management. It is essential to avoid having a technician drive to the physical location of every bug. This can be expensive for a fleet.

Early compliance is not necessary. Retrofitting PCI DSS or HIPAA data handling after development will cost you more than designing it in the first place.

No pilot phase. When you roll out your product to 40 sites before you test it with real users, even small UX issues can become fleet-wide support tickets.

Why experience in this specific domain matters

Kiosk Software is a niche discipline that combines embedded systems, hardware integration and UX with payment security. It's more challenging than app development. If a team has only worked on consumer-oriented mobile apps, they will likely underestimate lockdown needs, offline handling and device fleet management because these problems are not present in typical app projects.

IPH Technologies specializes in building kiosk software which is tested under real-world failure scenarios, and not only on a stable network. Ask the above questions when evaluating a partner for kiosk software. Request a look at the live monitoring dashboard and ensure that the person you select has debugged kiosks in the field rather than just designing them on a PowerPoint slide.

If you are scoping out a kiosk and would like a technical opinion about whether to build or use off-the shelf for your particular use case, contact our team. We'll be happy to help you before you decide on a vendor.

Kotlin Multiplatform in Production: What I Wish Someone Told Me Before We Migrated

Jackson Wood — Mon, 13 Jul 2026 12:03:03 +0000

Three years and a handful of production apps into Kotlin Multiplatform (KMP) at Iph Technologies, and I still see the same question in every "should we adopt KMP" thread: "but does it actually work in production, or is it another cross-platform promise that falls apart at scale?"

Short answer: it works, but not in the way the marketing pages frame it. Let me walk through the actual architecture decisions, the expect/actual gotchas, and the mistakes that cost my team real sprint time.

What You're Actually Sharing

KMP isn't one decision — it's three, and picking the wrong one for your team's maturity is the #1 reason migrations stall.

Logic only, native UI → commonMain has business logic, SwiftUI + Jetpack Compose stay separate
Logic + UI (Compose MP) → commonMain has logic AND UI, rendered natively per platform
One feature module → commonMain has ONE isolated piece (auth, pricing, validation)

If you're migrating an existing native app (not greenfield), start with option 3. I'll explain why below.

Project Structure That Actually Scales

Here's the shared module layout I default to now, after getting it wrong twice:

shared/
├── build.gradle.kts
├── src/
│ ├── commonMain/kotlin/
│ │ ├── data/
│ │ │ ├── model/ # data classes, DTOs
│ │ │ ├── remote/ # Ktor client, API interfaces
│ │ │ └── local/ # SQLDelight queries
│ │ ├── domain/
│ │ │ ├── usecase/ # business rules live here
│ │ │ └── repository/ # interface only
│ │ └── di/ # Koin modules
│ ├── androidMain/kotlin/
│ │ └── platform/ # expect/actual impls
│ └── iosMain/kotlin/
│ └── platform/ # expect/actual impls

The rule I enforce on every review: if a class touches a platform API, it lives in androidMain/iosMain, not commonMain with a bunch of if (isAndroid) branches. That's what expect/actual is for.

expect/actual: The Pattern Everyone Gets Wrong Early

Here's a real example — getting the current timestamp in a way that's testable and platform-correct.

kotlin// commonMain
expect fun currentTimeMillis(): Long

// androidMain
actual fun currentTimeMillis(): Long = System.currentTimeMillis()

// iosMain
actual fun currentTimeMillis(): Long =
(NSDate().timeIntervalSince1970 * 1000).toLong()

Simple, right? The mistake teams make is scaling this pattern to every platform difference instead of asking "does this actually need to be platform-specific, or am I just used to writing it that way?" Things like date formatting, currency rounding, and validation logic are almost always fully shareable — I've seen teams expect/actual code that had zero platform dependency, just because it "felt native" to split it.

A Real Shared Use Case

This is the kind of logic that should never live in two places. Take proration — the exact bug category that quietly wrecks retention when it drifts between platforms:

kotlin// commonMain/domain/usecase/CalculateProrationUseCase.kt
class CalculateProrationUseCase {
operator fun invoke(
planPriceCents: Long,
daysInCycle: Int,
daysRemaining: Int
): Long {
require(daysRemaining in 0..daysInCycle) {
"daysRemaining must be within cycle bounds"
}
val dailyRate = planPriceCents.toDouble() / daysInCycle
return (dailyRate * daysRemaining).toLong()
}
}

Android calls this directly. iOS calls it through the compiled Kotlin framework from Swift:

swiftlet useCase = CalculateProrationUseCase()
let proratedAmount = useCase.invoke(
planPriceCents: 2999,
daysInCycle: 30,
daysRemaining: 12
)

One implementation. One test suite. Zero chance of the two platforms disagreeing on a refund calculation.

Testing: Don't Split This Either

If you write your shared logic in commonMain but test it separately per platform, you've defeated the entire purpose. Use kotlin.test in commonTest so the same suite runs against both targets:

kotlin// commonTest
class CalculateProrationUseCaseTest {
private val useCase = CalculateProrationUseCase()

@Test
fun `full cycle remaining returns full price`() {
    val result = useCase(2999, 30, 30)
    assertEquals(2999, result)
}

@Test
fun `zero days remaining returns zero`() {
    val result = useCase(2999, 30, 0)
    assertEquals(0, result)
}

}

Run ./gradlew allTests and it executes against every registered target. This is the single highest-leverage habit I've adopted — it's caught platform-specific regressions before they ever reached QA.

KMP vs Flutter vs React Native — For Teams With Existing Native Apps

Most comparison posts frame this as greenfield-vs-greenfield. If you already have native apps, the calculus is different:

FactorKMPFlutterReact NativeCan you adopt without a rewrite?Yes — module by moduleNo — new codebaseNo — new codebaseUI renderingNative (or Compose MP)Custom engine (Skia)Native via bridge/JSIRollback cost if it failsLow — revert one moduleHigh — full Dart rewriteHigh — full JS rewriteNative API accessDirect, no wrapperPlatform channelsNative modulesLearning curve for iOS devsKotlin is new, but native tooling staysFull new stack (Dart)Full new stack (JS/TS)

If you're greenfield, this table looks different and Flutter/RN both become more competitive. But for teams with an existing native codebase and a churn problem tied to platform inconsistency specifically, incremental adoption is the deciding factor.

Mistakes That Cost Us Real Time

We shared UI before the team trusted the shared logic layer. We jumped to Compose Multiplatform in month one. Every UI bug got blamed on "the new framework" when the actual issue was our team not yet having conventions for shared state management. Lesson: prove the logic layer first, add shared UI later once the team has reps.

We didn't scope expect/actual boundaries up front. We let commonMain become a dumping ground, then had to retrofit platform boundaries mid-sprint when iOS-specific permission handling broke everything. Define your expect/actual seams during architecture review, not during a bug fix.

We tried to migrate the whole app before validating against our own dependencies. Legacy native SDKs (in our case, a payment processor with no Kotlin bindings) ate two extra sprints we hadn't budgeted. Pilot on a low-risk, high-impact module first — it surfaces integration landmines while the blast radius is small.

Is It Actually Production-Ready?

Yes — KMP is stable across Android, iOS, desktop, web, and server targets, and it's running in production at Netflix, McDonald's, Forbes, Google Workspace, and others. Compose Multiplatform is stable for Android/iOS/desktop; web is still beta, so weigh that if your target includes browser parity.

Where I'd Start If I Were You

Pick the one piece of logic most likely to already be quietly inconsistent between your Android and iOS codebases — proration, validation, auth token refresh — and port just that into a shared module behind your existing native UI. Ship it. Watch whether platform-specific bug reports on that feature drop. Then decide how far to expand.

That's the order of operations that's worked across every KMP migration I've run. Happy to go deeper on Koin/DI setup, SQLDelight for shared local storage, or CI config for multiplatform builds if there's interest — drop a comment.

Building a Car Rental App Like Udrive in the UAE: The Architecture Nobody Talks About

Jackson Wood — Thu, 02 Jul 2026 07:05:13 +0000

I'm a senior developer at IPH Technologies, and over the last few years we've scoped and built several car-sharing / rental platforms for the UAE market. This post is the technical breakdown I wish someone had handed me before the first one — because most "how to build an app like X" content stays at the feature-list level and skips the part that actually breaks in production.

If you're a dev (or a founder working with devs) scoping something like Udrive, this is where I'd start.

The Real System Isn't a Booking App

A car rental app like Udrive is, at its core, three systems stitched together:

A booking/reservation service (the easy part)
A fleet telematics layer (the hard part)
A compliance/KYC pipeline specific to UAE regulation (the part everyone underestimates)

Most teams design for #1 and treat #2 and #3 as integrations to bolt on later. That ordering is backwards, and it's the single biggest source of rework I've seen on these projects.

Core Architecture Components

Keyless Entry / Telematics Layer

This is the system that decides whether a specific user can unlock a specific vehicle at a specific moment — and it needs to work with zero human in the loop.

Vehicle-side: an OBD-II or hardwired telematics unit (Geotab, Cartrack, or a custom kit) exposing lock/unlock, immobilization, and fuel/battery telemetry over a secure channel
Cloud-side: a device gateway service that authenticates commands, queues them when the vehicle is offline, and confirms state changes back to the booking service
App-side: BLE or cellular-triggered unlock, with a fallback PIN flow for connectivity dead zones (parking garages are brutal for this)

The mistake I've seen most often: teams pick a telematics vendor based on price before confirming the vendor's SDK actually supports remote immobilization, not just tracking. Tracking-only kits are common and cheaper, and they will not support a true self-service rental model. Confirm this in the vendor's API docs before writing a line of app code.

KYC and Compliance Pipeline

UAE rental apps need to verify residents via Emirates ID and tourists via international driving permits — often within the same onboarding flow, with different verification paths.

User signs up
→ Document capture (Emirates ID OR passport + IDP)
→ OCR extraction (Emirates ID API / license OCR)
→ Liveness check (selfie match)
→ Manual review queue (only for OCR-confidence failures)
→ Approved → eligible to book

Design this as an async pipeline, not a synchronous blocking call — OCR and liveness checks have variable latency, and blocking your signup flow on a third-party verification API is a reliability risk you don't need.

Billing Engine

Per-minute or per-hour billing sounds simple until you factor in:

Mid-trip pauses (user parks, billing should drop to a lower "parked" rate, not stop)
Salik toll pass-through, reconciled after the trip via RTA data feeds
Fine attribution — a fine issued after drop-off still needs to map back to the correct trip window

I'd model this as an event-sourced ledger per trip rather than a single "total cost" field. You want an immutable log of rate changes, toll events, and fine attributions that you can replay and audit — because you will get billing disputes, and "trust me, the total is right" doesn't hold up.

Cost and Build-Path Comparison

ApproachCost Range (AED)TimelineCode OwnershipNotesWhite-label platform60K–150K4–8 weeksLicensed, not ownedFine for validation, can't add custom telematicsOffshore generic team80K–250K3–6 monthsYes, often undocumentedNo prior RTA/Salik integration experience is commonUAE-based custom build250K–900K+4–9 monthsFull ownershipBuilt for compliance from day oneIn-house team400K+ upfront6–12 monthsFull ownershipBest once past MVP validation

Tech Stack Notes From Our Builds

A few specifics that consistently come up:

Payment: Telr or Network International — both handle AED natively and support 3D Secure, which UAE banks increasingly enforce
Maps/geofencing: Google Maps Platform, with custom geofences for airport, mall, and free-zone pickup points (each has different access rules)
Push infrastructure: needed for trip lifecycle events (start, pause, low-fuel warning, end) — don't rely on polling, the UX gap is noticeable
RTA/Salik data feeds: these aren't always real-time; design your billing reconciliation to tolerate delayed toll/fine data rather than assuming same-day settlement

A Real Failure Mode Worth Planning For

On one project, a founder had a fully built booking app before discovering the OBD kit his team selected only supported tracking, not remote immobilization. The entire vehicle-communication layer had to be rebuilt against a different hardware vendor's API — after the app was already "done."

The fix isn't complicated: validate hardware and vendor API capabilities as the first sprint, not the last integration.

Questions I'd Ask Any Dev Partner on This Kind of Project

Have you integrated with RTA or Salik data feeds before — can you show it?
What telematics hardware have you shipped against, and do you own that integration code?
How do you handle async KYC without blocking the signup flow?
What's the reconciliation strategy for delayed toll/fine data?
Is the billing ledger auditable and replayable, or a single mutable total?

If those questions get vague answers, the team has probably built booking apps before — not fleet-access systems.

We build these systems at IPH Technologies, and I'm happy to go deeper on any piece of this — telematics integration, the KYC pipeline, or the billing ledger design. Drop a comment if you're working through something similar.

Why Most Mobile App Projects in Utah Fail Before a Single Line of Code Ships

Jackson Wood — Wed, 01 Jul 2026 08:01:02 +0000

I've spent enough years in Utah's app development scene — sitting in on scoping calls, inheriting half-finished codebases, and occasionally being the person who has to explain to a founder why their $18K quote is now a $70K invoice — to notice the same failure pattern over and over. It's rarely a coding problem. It's a discovery problem.

If you're a founder, PM, or fellow dev evaluating a build partner, here's what I wish more people understood before the contract gets signed.

Utah's dev talent pool is real, but it doesn't fix bad process

Silicon Slopes — the SLC-to-Provo corridor — genuinely has a strong bench. Companies like Qualtrics, Podium, and Domo have spun off a generation of engineers who now consult, freelance, or run their own shops. Rates tend to run meaningfully below coastal markets, and Mountain Time keeps standups sane for most US teams.

But none of that matters if the team you hire skips the step that actually determines whether your project succeeds: real discovery.

The quote gap that eats budgets

I've watched a founder get quoted a flat number for an app that, once you actually mapped the data model and third-party integrations, needed roughly 4x the engineering hours. Nobody lied. The quote was just built on a short conversation instead of an actual technical review.

This is the single biggest source of blown budgets I see. A real discovery phase should cover:

Problem definition first — who's the user, and what are they doing today instead of your app?
Technical feasibility review — does this need native performance (camera, sensors, offline mode, background location), or is cross-platform genuinely fine?
Wireframes tied to business logic, not just pretty screens
A written, fixed-scope MVP — what ships in v1, and explicitly what doesn't

If a team can't produce a scope document before they produce a price, that's the signal to slow down.

Native vs. React Native vs. Flutter isn't a taste preference

Agency sites love listing all four options like picking one is a coin flip. It's not — it's a tradeoff between performance, cost, and long-term maintenance debt, and it should follow from your roadmap, not this quarter's budget.

ApproachBest forThe tradeoffNative (Swift/Kotlin)Camera, AR, Bluetooth, heavy device performanceTwo codebases, higher upfront costReact NativeContent/marketplace/workflow apps, near-native feelComplex hardware features often still need native modulesFlutterSingle codebase, fast iteration, consistent UISmaller talent pool in some markets, less mature for deep hardware workHybrid/WebViewInternal tools, pre-investment demand validationWeakest UX, rarely App Store-competitive long term

The classic trap: a team picks Flutter because it's cheaper, then eighteen months in discovers the one feature their competitor uses to win deals — precise background location, say — needs native code anyway. That's not a stack mistake, it's a discovery mistake that happened months earlier.

Mistakes I see on repeat

No technical second opinion. Non-technical founders who sign without one often can't spot a scope doc that's missing critical detail — until change orders quietly double the price.
Chasing the lowest bid. A $15K gap between quotes is almost never pure margin. It's usually missing senior hours, QA time, or post-launch support.
No post-launch budget. Launch is the start of the lifecycle, not the finish line. Plan for at least three months of iteration based on real usage data.
Underestimating App Store review. Apple rejects apps for policy reasons that have nothing to do with code quality, and a team that hasn't shipped recently will misjudge this timeline badly.

What to actually ask before signing

If you're evaluating a build partner, don't lead with price. Lead with these:

Can you show me a written scope document, not just a verbal estimate?
Who is actually writing the code — the person I'm talking to, or an offshore subcontractor?
What's the documented process if scope changes mid-project?
What does post-launch support cover, and for how long?
Can I talk to a past client whose app is still live and maintained today?

The takeaway

Good engineering talent is table stakes in a market like Utah's. What separates the teams worth hiring is whether they slow down at the beginning — real discovery, honest stack tradeoffs, a written plan for what happens after launch. Ask for the scoping document before you ask for the price. It tells you more than any portfolio ever will.

Written from experience building and reviewing mobile products at IPH Technologies. Happy to compare notes if you've hit similar walls on your own builds.

When Your API Integration Works in Testing but Dies in Production

Jackson Wood — Tue, 30 Jun 2026 13:05:10 +0000

Let me tell you about a bug that wasn't really a bug.

A team I worked with wired up three payment processors behind a single checkout API. One unified interface, one processPayment() call, clean abstraction. Tests passed. Demo looked great.
Production lasted about a week before it broke.

The actual problem

One processor returned a state the other two didn't have: authorized_not_captured. The shared interface only knew success / failed. So every transaction in that intermediate state either silently failed or got double-charged on retry.

Nobody wrote bad code here. The abstraction was just built on an assumption — "these three APIs are functionally the same" — that held up in testing and fell apart the moment real-world state transitions showed up.

The fix wasn't a patch

The team didn't add a special case. They had to stop normalizing too early — handle each processor's actual state machine individually, and only collapse to a unified outcome at the very last step. More code, less elegant-looking, way more correct.
The questions that should've been asked before any code was written

What's the system of record when two integrated systems disagree on state?

What happens on partial failure — not "API down," but "API returned something we didn't expect"?

Who owns versioning when a third party changes their response shape without warning?

Are we testing failure states, or just the happy path?

If you're building or reviewing an integration right now, that list is more useful than another REST vs GraphQL comparison.

Takeaway

A demo proves the happy path works. Production proves whether you mapped the unhappy ones. Most integration failures I've seen trace back to skipping that mapping step, not to bad implementation.
Curious if others have a similar "worked in staging, exploded in prod" integration story — always good to compare notes on what actually breaks.

Mobile App Development in Qatar: What Nobody Tells You Before You Sign the Contract

Jackson Wood — Mon, 29 Jun 2026 10:16:25 +0000

Since years, I have been developing mobile apps for clients in the GCC. The conversation I have with B2B entrepreneurs in Qatar, especially, goes like this.

"We hired a development shop six months back. It's still not live. They've gone quiet. "And apparently, we don't even own the source code."

Every. Single. The same pattern every time. It's not a bad plan. Budget is not bad. The wrong partner was chosen.

This is a developer perspective, and not a list of vendors or a sales pitch. What matters most when you are evaluating a Qatari-based mobile app development firm?

Qatar's technical differences from the other GCC markets

In most "Gulf Region" app development guides, Qatar, UAE and KSA are treated interchangeably. They're not.

Qatar has a compliance stack which any serious developer needs to know before they write a single line.

PDPPL (Personal Data Privacy Protection Law), governs the collection, storage, and processing of user data. Not only does it affect your privacy policy, but also your database architecture.

QCB Guidelines -- If you are building any fintech app that involves payment flows, then the Qatar Central Bank will have specific requirements.

MOTC data residence rules -- certain types of data are required to be stored within Qatari borders. This directly impacts your cloud infrastructure choices (AWS Bahrain region or a random EU Data Centre your vendor chooses).

Integrations of government APIs -- Metrash2, HUKOOMI and Qatar National Bank APIs. These integrations are not documented in the same manner as a Twilio or Stripe integration. You need to have experience working with them.

You can tell if a vendor is blank when you ask them about these topics.

What I look out for when it comes to technical red flags as a developer

Here's what I look at when evaluating the approach of another team:

1.What is the Arabic RTL support like?

This is not just a cosmetic challenge. It's a real technical one. These features should be built into the architecture of the components from the beginning, and not added at the end. You can ask to see a current Arabic app that they have shipped. Open it. Navigate the site. RTL will be apparent to you immediately.

2.What is their quality assurance process?

A mature team will run QA internally with a test matrix that includes: device fragmentation tests across Android and iOS versions; benchmarking of performance; scanning for security vulnerabilities. You should not accept QA that is being outsourced or, worse yet, QA where the developers are testing their own code.

3.How does the codebase structure for handoff work?

Developers should ask this question often. Inline comments? Readme documentation? Environment variable management? Modular architecture that can be picked up by a new team? I've had codebases that were intentionally obfuscated by vendors. They weren't technically broken but they were impossible to maintain. This is a strategy to lock you in, not an actual delivery.

4.How does the CI/CD Pipeline look?

Automation testing, staging environments and deployment pipelines are not luxuries for a professional engagement. These are the tools that help you detect regressions before your users. A vendor who does not have a CI/CD set-up is one that sends bugs into production on a hope.

The engagement model question nobody asks early enough
Most founders jump to "how much does it cost?" before they've decided what kind of engagement actually fits their situation.
ModelWhen it worksWhen it doesn'tFixed-priceWell-scoped MVP, clear requirementsAny project where requirements will evolveTime & materialsComplex products with changing scopeTeams without strong milestone disciplineDedicated teamLong-term product ownershipShort engagements or tight budgetsHybridMid-complexity with defined phasesWeak internal PM on client side.

The mistake I see most often: a founder chooses fixed-price because it feels "safe" (capped budget), then watches the project collapse when the first scope change triggers a penalty clause they didn't read carefully.

My recommendation for most B2B Qatar projects: hybrid model with phase-gated milestones and clearly documented change request pricing upfront.

The 7 questions I'd ask any vendor before signing
I run every prospective development partner through this checklist. You should too:

Can you show me a live app you've built in my industry, with a client I can call directly?

Who is my named project manager from kick-off to launch — not a team, a person?

Walk me through your change request process. What happens when scope changes?

Is QA in-house?
What's your test coverage standard before a release?

How do you ensure compliance with Qatar's PDPPL in your data architecture?

What's your post-launch SLA? Response time for critical production bugs?

What are the IP ownership terms? Does full source code transfer to us on final payment?

Question 7 is non-negotiable. Get it in the contract, not in an email, not in a verbal agreement on a call. In the contract.

Realistic timeline for a quality B2B mobile app in Qatar
I see vendors promise 8-week turnarounds on complex enterprise apps constantly. Here's what a realistic, well-managed engagement actually looks like:

Discovery & scoping: 2–4 weeks
UI/UX design (Arabic + English): 3–6 weeks
Core development sprint: 6–10 weeks
Extended features sprint: 4–8 weeks
QA & security audit: 2–4 weeks
App Store submission & launch: 1–2 weeks
Post-launch monitoring: ongoing

That's 18–32 weeks for a quality product. Anyone promising less for a full-featured app is either cutting corners or hasn't scoped your project properly.

Final thought

The best development partners I've worked with — and the ones I'd recommend to any Qatar founder — share one trait: they're more interested in understanding your business than in selling you their tech stack.

They'll ask hard questions during discovery. They'll push back on timelines they don't believe in. They'll tell you when a feature should come in version 2, not version 1.

That's the difference between a vendor and a partner.

Jackson Wood is a Senior Software Developer at IPH Technologies, specialising in enterprise mobile app development across the GCC. Got questions about your Qatar app project? Drop them in the comments below.

How to Choose a Custom Mobile App Developer for Android & iOS (A B2B Founder's Guide)

Jackson Wood — Fri, 26 Jun 2026 07:09:23 +0000

I've spoken with dozens of founders who burned six figures on the wrong mobile development approach. Not because their idea was bad — because nobody gave them a straight technical answer before they signed a contract.

This guide fixes that.

The First Decision: Android, iOS, or Both?

Most "go build both" advice is lazy. Here's the engineering reality:

Factor	Android	iOS
Market Share	~71% globally	~28% globally
Dev Program Fee	$25 one-time	$99/year
Review Process	Faster, flexible	Strict, higher bar
User Retention	Lower (region-dependent)	Consistently higher
Primary Language	Kotlin / Java	Swift / Objective-C
Best For	Global reach, emerging markets	Enterprise, North America

Rule of thumb: If your B2B buyers are enterprise decision-makers in North America or Europe, ship iOS first. If you're targeting SMBs in Southeast Asia, LATAM, or Africa, Android first.

Shipping both simultaneously stretches your QA surface, doubles your App Store maintenance burden, and splits your developer's focus. One polished app beats two mediocre ones every time.

Native vs. Cross-Platform: The Technical Trade-off Nobody Explains Clearly

Native (Swift / Kotlin)

Built separately per platform. Direct access to platform APIs — Face ID, Apple Pay, Android Widgets, background services, push notification handling at the OS level.

Choose native when:

You need real-time data sync (WebSockets, live queries)
App relies on hardware: camera pipelines, GPS, biometrics
You're building for enterprise users with high UX expectations
Heavy API traffic is core to the product

Cross-Platform (React Native / Flutter)

Single codebase compiled or bridged to both platforms. React Native uses a JavaScript bridge to native modules. Flutter compiles to native ARM via Dart — generally better performance than RN for animations and graphics.

Choose cross-platform when:

You're shipping an MVP to validate PMF
App is content-driven: dashboards, portals, data display
Feature set is stable and unlikely to need deep native hooks
Budget is a real constraint (expect ~30–40% cost reduction vs. two native builds)

The Trap Founders Fall Into

They pick React Native to save money in sprint 1, hit framework limitations in sprint 8, and spend more on native module bridging than they saved upfront.

Choose your stack based on your 18-month product roadmap — not your current sprint.

The Dev Stack Reference: What to Expect From a Serious Developer

📱 iOS Native
   Language:     Swift 5.x
   UI Framework: SwiftUI / UIKit
   Async:        Combine / async-await
   Dependency:   Swift Package Manager

🤖 Android Native
   Language:     Kotlin
   UI Framework: Jetpack Compose / XML Views
   Async:        Coroutines + Flow
   Dependency:   Gradle

⚛️ Cross-Platform: React Native
   Language:     TypeScript
   Navigation:   React Navigation
   State:        Redux Toolkit / Zustand
   Native Bridge: Expo Modules / bare workflow

🐦 Cross-Platform: Flutter
   Language:     Dart
   State:        Riverpod / Bloc
   Platform:     iOS, Android, Web, Desktop

If a developer can't speak fluently about at least one column here, keep looking.

API Architecture: Where Most B2B Apps Break

B2B apps are integration-heavy by nature — CRMs, ERPs, payment gateways, internal tooling. This is where mobile development gets genuinely complex.

What your developer needs to handle:

RESTful API consumption with proper error handling, retry logic, and auth token refresh (OAuth 2.0 / JWT)
Offline-first architecture — what happens when a field sales rep loses signal mid-demo? Your app needs local caching with conflict resolution on sync.
Push notification pipelines — APNs (Apple) and FCM (Firebase/Google) have different payload structures and delivery guarantees. A developer who conflates them will cost you support tickets.
Background sync — iOS App Refresh and Android WorkManager behave very differently. Background tasks that work on Android often get silently killed on iOS due to battery management policies.

5 Technical Red Flags in a Developer Interview

They can't explain what a retain cycle is (iOS) or a memory leak is (Android). Memory management is day-one knowledge.
Their portfolio only has Expo apps. Expo is a valid starting point, but a developer who has never ejected or built a bare RN workflow hasn't solved real problems.
They quote a fixed price before scoping. Legitimate engineers scope before pricing. A fixed quote before a PRD exists is a guess dressed up as a number.
No mention of testing. Ask about their unit testing approach (XCTest, JUnit, Jest). If they look blank, their codebase is a liability.
They've never handled an App Store rejection. Both stores reject apps. A developer who hasn't navigated a rejection hasn't shipped enough.

App Store Submission: What Developers Often Skip

App Store review isn't just a formality — it's a technical gate that catches real issues.

Apple App Store checklist:

[ ] Privacy manifest files for all third-party SDKs (required since iOS 17)
[ ] App Tracking Transparency prompt if using IDFA
[ ] No use of private APIs (automated scan catches this)
[ ] Screenshots for all required device sizes
[ ] Correct entitlements in the provisioning profile

Google Play checklist:

[ ] Target API level meets current Play policy (usually n-1 of latest Android)
[ ] 64-bit compliance for all native libraries
[ ] Declared permissions match actual usage
[ ] Data safety section completed accurately

Your developer should own this end-to-end — including handling rejections with written responses to reviewers.

Cloud Integration: Extending App Capability Without Rebuilding

For B2B apps, the mobile client is often the thin end of a much heavier backend. Get this architecture right and you can ship features faster without app updates:

Firebase — Auth, Firestore for real-time sync, Cloud Messaging for push, Crashlytics for crash reporting. Best for fast iteration.
AWS Amplify — Better for teams already in the AWS ecosystem. More control over infrastructure.
Custom REST/GraphQL backend — Necessary when you need complex business logic, fine-grained access control, or enterprise SSO (SAML, OIDC).

The key insight: push business logic to the backend. The more logic lives server-side, the faster you can iterate without waiting on app store review cycles (which can take 24 hours to 7 days).

TL;DR

Start with one platform based on your buyer geography
Choose native for performance-critical B2B apps; cross-platform for MVPs
Vet developers on their live shipped apps, API experience, and testing discipline
You must own your IP — get this in the contract before anything else
Push logic server-side to reduce dependency on app store review cycles

Building something and hit a wall deciding between native and cross-platform? Drop your use case in the comments — happy to give a direct take.

mobile #android #ios #webdev #startup

A founder once showed me his "astrology app" idea. Beautiful Figma file. Stripe account ready. Launch date picked. One problem: he had no idea that computing a natal chart isn't a database lookup. It's a multi-step astronomical calculation.

Jackson Wood — Thu, 25 Jun 2026 13:19:47 +0000

Are your enterprise clients churning because your iPad app is just a stretched iPhone screen? What if your app fully leveraged Split View, Apple Pencil, and MDM compatibility — built natively in Swift and SwiftUI — and actually made enterprise clients stay

Jackson Wood — Wed, 24 Jun 2026 11:22:14 +0000