Back to browse
Google rejected my privacy app for "low engagement"

Google rejected my privacy app for "low engagement"

by safestream·Feb 17, 2026·1 point·0 comments

AI Analysis

●●SolidBold BetWizardryNiche Gem
The Take

Routing all activity through a WebRTC data channel with NSD pairing so the parent device is the only database is a smart, not-obvious counter to the usual cloud-heavy parental-control model. The stack reads like someone who actually built this: ECDH handshakes, AES-256-GCM payloads, TURN fallback and minimal Firebase signaling. That said, 'custom implementation' of AES plus the app's reliance on Accessibility/Usage permissions are serious trust points — open-source crypto and an external audit are must-haves before you hand over sensitive data.

Category
Target Audience

Privacy-conscious parents and tech-savvy testers (parents or developers familiar with NAT traversal)

Post Description

Hi HN, I’m an indie dev who is tired of "safety" apps that are actually just glorified spyware. Most parental control services demand you upload your child’s entire digital life (location, history, usage) to their cloud servers. I refuse to accept that safety requires sacrificing privacy to Big Tech.

So I built Emberkin.

It is a Serverless, P2P monitoring tool.

No Cloud Database: The parent's device is the only storage.

No Middleman: Data travels directly from Child to Parent via an encrypted tunnel.

My servers see nothing: I only facilitate the handshake.

The Problem (Why I'm posting): I just finished the mandatory "20 testers for 14 days" on Google Play. Google rejected my production access. Their reason? "Insufficient user engagement." Apparently, a privacy app that runs silently in the background doesn't trigger their "engagement metrics" enough. They want me to restart the 14-day sentence.

I need to prove to Google that real humans are using this, not bots.

The Tech Stack (For the curious):

Architecture: Native Android (Kotlin + Jetpack Compose).

Connectivity: WebRTC Data Channels over NSD (local) and TURN (remote).

Crypto: Custom AES-256-GCM implementation.

Permissions: Accessibility Services (strictly for on-device analysis, no data leaves the tunnel).

The Ask: I’m looking for tech-savvy parents or developers to install the beta and actually use it.

- Pair two devices .

- Send some data through the P2P tunnel.

- Help me generate enough "engagement events" to get this approved.

If you believe children's data belongs in the family, not on a corporate server, please help me out.

Beta Link & Architecture breakdown: https://www.emberkin.app/en/architecture

I’ll be in the comments answering questions about the nightmare of NAT traversal and Android permissions.

Similar Projects

FinanceMid

Knox–Full Stack L1 Post-Quantum Privacy Crypto (Built with My 11yo)

Post-quantum privacy blockchain built from scratch, but Monero already does ring signatures well.

Big BrainBold Bet
KnoxProtocol
103mo ago
SecurityPass

Google's Epstein Files

This isn't a product — it's a first-person exposé posted as an X article. The page is just Twitter's native article layout (header image, body copy, engagement metrics): readable but entirely static and without a repo, demo, or technical artifact to evaluate. Interesting as a personal account, but there's nothing here that qualifies as a Show HN project worth technical critique.

Rabbit HoleBold Bet
wanderinglight
233mo ago
Open Source●●Solid

KGBaby – A WebRTC based audio baby monitor I built on pat leave

The project nails a practical niche: zero-latency P2P audio via WebRTC with PeerJS signaling so your stream never routes through a cloud service. The clever (if hacky) hidden 1x1 base64 looping video to keep Mobile Safari's microphone alive shows someone dug into platform quirks — useful and real-world, but also a reminder this is an MVP with battery and backgrounding tradeoffs.

Niche GemWizardry
legodud3
303mo ago