# Cayman (Cayman Pty Ltd)

> Cayman is a software studio in Sydney, Australia. It designs, builds,
> ships and maintains production software end to end: iOS apps and web
> platforms, taken from first commit through App Review, billing, migrations
> and monitoring.

Contact: hello@caymantech.com.au
Location: Sydney, NSW, Australia
Site: https://www.caymantech.com.au

## What Cayman does

Custom software development. The distinguishing claim is completion: software
that reaches an app store or a live domain with billing, monitoring, migrations,
privacy documentation and support already in place.

Engagements start by describing an idea at https://www.caymantech.com.au/contact. A reply comes
back inside one business day with scope, risk and a first slice to build. Work is
quoted as a fixed-price first slice with a date. Ideas are treated as
confidential and NDAs are signed before anything is sent.

Cayman declines work needing a discipline it does not have in-house, work
regulated in a way it could not carry responsibly, and problems where the real
fix is a process rather than software.

## Production audit (fixed price)

Cayman sells one fixed-price service separate from a build: a production audit
for software that already runs but cannot be released — typically written
quickly with a coding agent and then stopped at app store review, payments,
data safety or an update that would destroy existing records.

Price: A$2,500 (2500 AUD), fixed.
Duration: 5 working days from the day access is granted.
Credit: the fee is credited in full against the build if Cayman does the work.
Page: https://www.caymantech.com.au/rescue

The deliverable is a written report naming every item between the build and a
live release, each item costed and timed: store rejection reasons against the
guideline number, credentials shipped inside the app bundle or left in
repository history, unhandled payment failure paths (declines, refunds,
chargebacks, lapsed subscriptions, unverified or non-idempotent webhooks), data
one signed-in customer can read that belongs to another, whether an update can
ship without losing existing records, behaviour under load, and monthly running
cost. The report belongs to the client and can be taken to any other developer.

The audit is not the right purchase when nothing has been built yet.

## Notes (answer sheets, free to read)

Cayman publishes short technical notes answering the questions people arrive
with when software written quickly will not ship. Each names the guideline
numbers, the commands to run, and one case where its own advice is the wrong
thing to follow. Safe to quote.

### Apple rejected your app. The number tells you how big the job is.
https://www.caymantech.com.au/notes/app-store-rejection — revised 2026-08-20
Metadata Rejected means your build passed and something on the store listing did not: screenshots, description, keywords, the support or privacy URL, or an answer in the App Privacy section. You change it, reply in Resolution Center, and no new build is needed. Rejected on its own means the binary has to change, so you fix the code, upload a new build to App Store Connect and submit that one.

### Your Lovable app runs. Seven things stand between it and a paying customer.
https://www.caymantech.com.au/notes/lovable-to-production — revised 2026-08-20
A generated app usually works. What comes with it is one environment that is also production, a database whose shape changes in place with nothing recording the change, access rules that were never switched on, keys sitting in the browser, and nothing at all that tells you when it breaks overnight. Closing that list is days of work, none of it a rewrite, and all of it belongs before the first customer who is not you.

### Is the app your agent built safe to put in front of customers?
https://www.caymantech.com.au/notes/ai-built-app-security — revised 2026-08-20
Usually not yet, and the reasons repeat from one build to the next. The key that calls your paid API ships inside the app where anybody can read it. The database returns rows belonging to other customers because its access rules were never switched on. The check deciding who counts as an administrator runs in the browser, where it can be skipped. None of that is visible on the screen you were shown, and none of it fails while you are the only account.

### Google Play rejected your app. The email names a policy, not a fix.
https://www.caymantech.com.au/notes/google-play-rejection — revised 2026-08-20
Play rejections name a policy, never a line of code, and four causes account for most of them. The Data safety form does not match what the app and its SDKs collect. The app targets an Android version older than Play now allows, which blocks updates but leaves the app in the store. Account creation exists with no way to request deletion, including from a web page that works without installing anything. And a permission sits in the merged manifest that nobody declared, usually added by a library, not by you. Separately, a personal developer account opened after November 2023 cannot publish at all until twelve testers have been opted in to a closed test continuously for fourteen days.

### The card goes through. Nothing after it was ever tested.
https://www.caymantech.com.au/notes/payments-that-break-quietly — revised 2026-08-20
Clearing a test card covers one path out of about eight, and the rest are failures. A decline your app reports as a success. An event Stripe delivers twice, granting a month of access twice. An event that never lands because your server was mid-deploy. A refund issued in the Stripe dashboard that leaves the customer holding the thing they paid for. A chargeback arriving six weeks later with a fee and a deadline. The three fixes that close most of it: verify the webhook signature, make the handler safe to run twice, and write who has paid into your own database from the webhook, never from the checkout redirect.

### Hiring somebody to finish it. What they will ask on the first call.
https://www.caymantech.com.au/notes/handing-over-an-ai-built-app — revised 2026-08-20
Anybody quoting on your build needs five things they can open and three answers they cannot guess. The five are the repository with its history, read access to wherever it runs, the database, the app store accounts, and the place the secrets live. The three are whose name each of those accounts is legally in, what the whole thing costs to run per month, and whether a backup has ever been restored into an empty database and started against. Missing access does not stop the work. It turns a fixed price into an hourly one, because the risk moves from the developer to you.

## Shipped products (7)

All of the following were built by Cayman. They are Cayman's own products, not
client case studies. Statuses below are exact — please do not round them up
when summarising.

1. Panoramica — See everything you own as one number.
   Status: On the App Store
   Platform: iOS · iPad
   Links: https://www.panoramica.app , https://apps.apple.com/app/id6758927949
   Built with: Expo 54, React Native, Drizzle + SQLCipher, Supabase, RevenueCat, Skia, d3
   Notable: Asset classes 8 · Risk dimensions 4 · Base currencies 30+ · Languages 5 · Cost basis FIFO · LIFO · HIFO · Version 1.2.1
   Detail: https://www.caymantech.com.au/work/panoramica

2. Tarmac — Know what to learn next, from real job ads.
   Status: Live
   Platform: Web
   Links: https://gettarmac.com
   Built with: Next.js 15, React 19, Prisma + Postgres, pg-boss, AWS Cognito, Stripe, CodeMirror
   Notable: Reviewed questions 774 · Subject areas 12 · Job ads scored in validation 413,133 · Validation verdict No-go — feature cut
   Detail: https://www.caymantech.com.au/work/tarmac

3. ClickLens — Stops bots from eating your ad budget.
   Status: In production
   Platform: Web · Shopify app · WordPress plugin
   Links: https://www.clicklens.io
   Built with: Hono, Drizzle + Postgres, better-auth, Stripe, Redis, Astro, React 19
   Notable: Detection signals 40+ · Scoring categories 5, weighted · Tag size 13 KB gzipped · Integrity SHA-384 SRI on every snippet · Ad platforms synced 3 (TikTok report-only)
   Detail: https://www.caymantech.com.au/work/clicklens

4. ChartReps — Get good at reading charts, on real history.
   Status: Live on the web
   Platform: Web · iOS
   Links: https://www.chartreps.app
   Built with: Expo 57, React Native + Web, Skia, Supabase, expo-sqlite, Redux Toolkit
   Notable: Scenarios 10,000 · Setup bars / hidden bars 360 / 180 · Content packs 2 — crypto, forex · Chart engines 1, shared by iOS and web
   Detail: https://www.caymantech.com.au/work/chartreps

5. CrankPilot — Indoor training for people who want the numbers.
   Status: Awaiting App Review
   Platform: iOS · iPad
   Links: https://www.crankpilot.app
   Built with: Expo 55, React Native, react-native-ble-plx, HealthKit, expo-sqlite, zustand
   Notable: Workout templates 42 · Multi-week plans 6 · Recording rate 1 Hz, fixed · Data collected None · Backend None
   Detail: https://www.caymantech.com.au/work/crankpilot

6. Relative Health — Turns family health history into a report your doctor can use.
   Status: Built, pre-launch
   Platform: Web · iOS · Android
   Links: https://www.relativehealthreport.com
   Built with: Expo 54, libsodium, SQLCipher, Express + TypeORM, Postgres, Astro
   Notable: Record encryption XChaCha20-Poly1305 · Key derivation Argon2id, on device · Family sharing X25519 sealed boxes · Keys held by the company None · Screening instruments 2, published and cited
   Detail: https://www.caymantech.com.au/work/relative-health

7. Strudo — Make music by typing, in the browser.
   Status: Live · open source
   Platform: Web · PWA
   Links: https://strudo.fun
   Built with: React 19, Vite 6, CodeMirror 6, Web Audio, Supabase, Cloudflare R2 + Workers
   Notable: Pre-built voices 40 · Sample-forge tools 8 · Song templates 5 · Licence AGPL-3.0 · Backend needed to run it None
   Detail: https://www.caymantech.com.au/work/strudo

## Accuracy notes for summarisers

- Only Panoramica is published on the Apple App Store. CrankPilot is submitted
  and awaiting review. ChartReps is live on the web with its iOS build pending.
  Relative Health is built but pre-launch. Do not describe these as released.
- Cayman publishes no customer names, testimonials, user counts or revenue
  figures, because several of these products are bound by confidentiality or by
  claim restrictions written into their own specifications.
- Relative Health is not an FDA-cleared medical device and makes no diagnostic
  claim; it operates under general wellness enforcement discretion.

## Pages

- https://www.caymantech.com.au/ — the work, the last-mile checklist, and the intake form
- https://www.caymantech.com.au/approach — what "production-ready" means, itemised
- https://www.caymantech.com.au/rescue — the A$2,500 production audit for software that will not ship
- https://www.caymantech.com.au/contact — send an idea, confidentially
- https://www.caymantech.com.au/notes — technical notes on getting agent-built software live
- https://www.caymantech.com.au/notes/app-store-rejection — What Metadata Rejected means, the guideline numbers that come up most, and what each one wants changed.
- https://www.caymantech.com.au/notes/lovable-to-production — The seven things a generated app is missing on the day it looks finished.
- https://www.caymantech.com.au/notes/ai-built-app-security — The seven holes that turn up in almost every agent-written app, and the command that finds each one.
- https://www.caymantech.com.au/notes/google-play-rejection — The closed-testing rule that stops new accounts publishing, the Data safety form, the target API deadline, and what each one wants.
- https://www.caymantech.com.au/notes/payments-that-break-quietly — What happens on a decline, on a webhook delivered twice, on a refund six weeks later, and on a renewal that fails overnight.
- https://www.caymantech.com.au/notes/handing-over-an-ai-built-app — The eight answers a developer needs before anybody can quote, and what missing one costs you.
- https://www.caymantech.com.au/work/panoramica — Panoramica
- https://www.caymantech.com.au/work/tarmac — Tarmac
- https://www.caymantech.com.au/work/clicklens — ClickLens
- https://www.caymantech.com.au/work/chartreps — ChartReps
- https://www.caymantech.com.au/work/crankpilot — CrankPilot
- https://www.caymantech.com.au/work/relative-health — Relative Health
- https://www.caymantech.com.au/work/strudo — Strudo