Vibin — 300ft Spotify Music Radar

About

Vibin turns the room you're standing in into a music feed.Open the app and you see a live radar of everyone within 300 feet and what they're playing on Spotify right now — track, album art, status — placed by real distance and compass direction on a procedurally generated 16-bit map. Tap someone to nudge them. Nobody's location is ever shared: the server returns distance and direction only.This is a finished MVP, not a prototype. Version 1.0.0 uploads to App Store Connect, clears Apple's binary processing, and installs and runs on real devices through TestFlight. Every App Store compliance item is already handled: privacy manifest, permission strings, in-app account deletion, encryption declaration.WHAT YOU'RE ACTUALLY BUYINGThe hard part of this app isn't the screens. It's the edge cases that each cost a build cycle or a rejection to find:- Spotify's now-playing API reports "nothing playing" for audible music if you omit one undocumented parameter. Handled, along with podcasts, paused states and private sessions — six distinct playback states in all.- Expo release builds silently drop environment variables that work fine in development. Fixed, with the reason written down in the code.- iOS location permissions have an ordering bug that only shows up for returning users. Solved.- Apple rejects builds for permission strings you never asked for. This build carries all of them.Every one of those is fixed and explained in the code rather than lost.TECH STACK- Expo SDK 57 / React Native 0.86 / React 19, New Architecture enabled- TypeScript 6 in strict mode — ~4,900 lines, compiles with zero errors- Supabase Postgres with PostGIS for proximity search- Spotify OAuth 2.0 with PKCE — no client secret in the app- Realtime nudges delivered as local notifications; no push provider needed- The entire backend is ONE 400-line SQL file. No server, no Docker, no monthly hosting bill.PRIVACY DESIGN — a real selling point for any campus or venue pilot- Identity is a SHA-256 hash; raw Spotify IDs never leave the device- Coordinates are never sent to any client, only distance and bearing- All tables locked with row-level security; every operation goes through a controlled function- Presence data deletes itself 15 minutes after you go quiet- No analytics, no tracking, no ad SDK, no device tokensWHAT'S INCLUDED- Full source and Git history, nothing obfuscated, no private dependencies- schema.sql — the complete backend, ready to paste into a fresh Supabase project- All assets: app icon, Android adaptive icons, splash, three bundled open-licence fonts- README with architecture and setup from zero- A long plain-language TestFlight deployment guide written for a beginner- 14 days of email support for setupHONEST STATUSNo users, no revenue, no traction. This is a code and IP sale. I built it for a campus pilot and I'm moving on to other projects. Android builds and runs but has never been through a Play Store submission. Apple Music support is the obvious next feature — the playback layer is already abstracted so a second provider slots in without touching the UI.Not transferable: my Apple Developer account, the Spotify app registration and the Supabase project. All are free or quick to recreate, and the setup guide walks the buyer through it.Sold strictly as-is. No post-sale support, setup assistance, consulting or maintenance is included or available. The documentation is thorough and written for someone taking this over cold — that's deliberate, because it's all the handover there is. Please factor that in before making an offer.