Roles per app and environment
Grant read, write, update or delete per module, and limit each role to the apps and environments it should touch.
Build, sign, ship and run your mobile apps from one place.
Development variables, signing files, test builds and runtime secrets for your iOS and Android apps, in one platform your whole team shares. Self-hosted or managed by us.
SDKs for Android, iOS, macOS, tvOS and Flutter
Smart GrowDashboard
Apps
Platforms
Users
Roles
Certificate Alerts
Audit Logs
CLI Sessions
Secure Variables
Manage the variables of application Wallet · Environment Production
| Name | Key | Value | Status |
|---|---|---|---|
| API base URL | API_BASE_URL | •••••••••• | Active |
| Payments key | PAYMENTS_PUBLIC_KEY | •••••••••• | Active |
| Maps key | MAPS_API_KEY | •••••••••• | Active |
| Legacy endpoint | LEGACY_API_URL | •••••••••• | Inactive |
Wallet
- Platform
- iOS
- Version
- 2.4.1(118)
- Environment
- QA
Install
Shared from Smart Grow
- Encrypted at rest
- Post-quantum transport
- Only your signed app can read values
- SSO, passkeys & 2FA
- Audit log
Platform
One platform for the whole life of your app.
From the first local build to the app running in production, every step reads from the same place, per app and per environment.
- 01 Build Development Variables
- 02 Sign Secure Files
- 03 Ship App Deployment
- 04 Run Secure Variables · Certificates · Feature Flags
01 · Build
The same configuration on every machine and in CI.
Pull development variables with one CLI command. Every developer and every pipeline gets exactly the values assigned to them, without .env files passed around in chat.
- Development Variables Same config on every machine and in CI.
$npm i -g @smart-dev-agency/smart-grow-secure-cli
$smart-grow login
$smart-grow download_variables
? App › Wallet ? Environment › Development
✓Variables written to .env
02 · Sign
Signing files where your pipeline can reach them.
Keep keystores, .p12 certificates, provisioning profiles and service files encrypted in one place, and download them into CI only when it's time to sign.
- Secure Files Keystores, profiles and service files for your pipeline.
.keystore wallet-release.keystore 4 KB
.p12 ios-distribution.p12 3 KB
.mobileprovision Wallet_AppStore.mobileprovision 12 KB
.json google-services.json 1 KB
$smart-grow download_files_with_token --output ./signing
✓wallet-release.keystore
03 · Ship
Test builds in your team's hands in minutes.
Upload an .ipa, .apk or .aab and share it with a link or a QR code. Builds are grouped by app and environment, and only the groups you choose can install them.
- App Deployment Share test builds with a link or QR code.
Share Release
- App
- Wallet
- Version
- 2.4.1(118)
- Platform
- iOS
- Access
- QA Team
https://smartgrow.your-company.com/releases?release=…
04 · Run
Change what your app reads in production, without a new release.
Your app reads secure variables, pinning certificates and feature flags through the SDK. Update them in the dashboard and apps pick up the change on their next fetch.
- Secure Variables API keys and endpoints out of the binary.
- Certificates Pinning certificates your app reads at runtime.
- Feature Flags Turn features on or off per environment.
// Android · Kotlin
val (variables, certificates) = smartGrow.getAllSecureData()
if (smartGrow.isFeatureEnabled("checkout.new_flow", defaultValue = false)) {
showNewCheckout()
} checkout.new_flow Enabled
wallet.card_scanner Disabled
For teams
Everyone gets what they need, and nothing more.
Roles, access groups and an audit trail across every app and environment.
Audit log
Every change is recorded, with who made it and when.
Sign in the way your team already does
Single sign-on with Google, GitHub, GitLab, Azure or Apple, plus passkeys and two-factor authentication.
CLI sessions you can revoke
See every device signed in to the CLI and revoke one, or all, in a click.
Security
How your data is protected.
No buzzwords. This is what happens, and nothing we can't back up.
-
Encrypted at rest
Secure variables, development variables and files are stored encrypted on the server.
-
Post-quantum transport
Apps talk to the server over an extra post-quantum encrypted channel on top of HTTPS.
-
Only your signed app
Apps authenticate with an API token and their signing fingerprint, so a copied token alone isn't enough.
-
Secure storage on the device
The SDK caches values in the Keychain or the Android Keystore.
- Your signed appSDK · API token + signing fingerprint
- post-quantum channel over HTTPS
- Your Smart Grow serverSelf-hosted or managed
- encrypted at rest
- Your databaseVariables, development variables and files
Deployment
Your infrastructure, or ours.
The same platform either way. Builds always live in your own S3 bucket.
Can Smart Grow read my secrets?
Secure variables, development variables and files are encrypted at rest with keys held by the Smart Grow server — your own server if you self-host — which decrypts them to deliver them to your apps and your team. Access is limited with roles per module, app and environment, and every change is recorded. Read the full answer.
Do my apps need a new release when a value changes?
No. Update a secure variable, certificate or feature flag in the dashboard and your apps pick up the change on their next fetch.
Which platforms do the SDKs support?
Android, iOS, macOS, tvOS and Flutter. Development Variables and Secure Files use a CLI that runs in any terminal or CI runner.
Can I run it on my own infrastructure?
Yes. Self-hosted runs the whole stack on your servers with our Docker images, your database and your own S3 bucket. We can also run a dedicated instance for you.
Stop passing keystores and .env files around.
Bring your apps, builds and secrets into one place your whole team can trust.