UNDA

Appearance

Roadmap ​

Where UNDA is, what's next, and what we're not building yet. Updated: 2026-08-09.

Legend ​

  • ✅ Shipped
  • 🚧 In progress
  • 🔜 Next up
  • 📋 Planned
  • ⏸️ Deferred / out of scope for now

Where we are ​

UNDA is a cycle-aware workout tracker for iOS (Android after v1). Local-first by default, opt-in cloud sync (Phase 7), evidence-based phase-aware training recommendations, and privacy-first architecture.

Stack: Flutter (Dart), SQLite via sqflite_sqlcipher (AES-256 at rest), Riverpod, Cloudflare Pages for the OAuth redirect + this docs site.

Progress by phase ​

Phase 0 — Design + prototype scaffold ✅ ​

  • Product brief, UNDA visual system, 5-phase cycle model.
  • Flutter skeleton, phase-prediction engine, recommender, workout library with sport-specific programming (road cycling, bouldering, running).
  • Activity-import layer (ActivityHistoryImporter) + ProfileInferenceService that proposes a personalised profile from imported activities.

Phase 1 — UNDA visual system ✅ ​

  • Dark teal theme, Inter type via google_fonts, outlined-button-first.
  • Today / Calendar / Plan / Insights / Settings screens.
  • CustomPainter waveform driven by per-day phase energy.
  • 3-step onboarding — welcome, age gate, health-consent, cycle length, last period.

Phase 2 — Persistence + Insights ✅ ​

  • Schema v1: profiles, cycle_days, cycles, workout_sessions.
  • Insights tab: symptoms per phase, sessions per phase, average felt score, recent sessions.
  • Full /docs/legal, /docs/privacy, /docs/security, /docs/evidence, /docs/product tree per Legal Rules §21.

Phase 4 — Compliance blockers B1–B4 ✅ ​

  • B1 Delete all my data (§12.1).
  • B2 Provenance tagging on sensitive rows (§9.3).
  • B3 Uncertainty rendering — ovulation window, confidence chip, ± days.
  • B4 Algorithm-version + factor breakdown persisted per session (§9.7, §9.5).

Phase 5 — Compliance blockers B5–B10 ✅ ​

  • B5 Versioned consent architecture (consents table, no bundling).
  • B6 18+ age gate with audit timestamp.
  • B7 Recommender: phase becomes a weight, not a filter (§9.1).
  • B8 Export ZIP — UNDA-export-*.zip with README, profile.json, cycle.csv, sessions.csv, consents.csv, integrations.json (§12.2).
  • B9 Privacy Center — Export / Manage consents / Delete account.
  • B10 SQLCipher AES-256 encryption at rest with key in Keychain / EncryptedSharedPreferences.

All 10 Pre-Beta Gate blockers closed.

Phase 6 — Integrations ✅ ​

  • .ics and .fit exporters — structured workout steps render to spec-compliant Garmin FIT files and RFC 5545 calendar entries.
  • Apple Health / Health Connect — reads menstruation + workouts, writes completed sessions back (opt-in, separate WRITE permission).
  • Strava OAuth — --dart-define client credentials, HTTPS redirect via Cloudflare Pages, tokens in Keychain, activity fetch.
  • Intervals.icu — API-key auth, activity fetch, planned-workouts read for Today's suggestion override.
  • Cross-provider dedup — same ride from Garmin → Strava → Intervals collapses to one row at read time (±5 min startedAt, ±30 s duration, priority: intervals_icu > strava > apple_health).
  • Sync service — 30-min throttle, refresh on app foreground, pull-to- refresh on Insights.
  • In-app workout runner — full-screen countdown per step, up-next preview, pause / prev / skip, felt-score sheet on finish, auto-logs the session. Enabled only for indoor workouts (bodyweight / dumbbells / gym); outdoor endurance shows "Push to Garmin" as the primary action instead.
  • Today's suggestion priority — already-trained today > Intervals-planned for today > UNDA recommender > no match.

In progress / next up ​

🔜 Phase 7 — Supabase sync + accounts ​

  • Cross-device sync for profile / cycle_days / workout_sessions / consents.
  • Sign in with Apple + magic-link email via Supabase Auth.
  • RLS policies keyed on auth.uid() on every user-owned table.
  • Red-team CI test — assert user A can't read user B's rows.
  • Delete-account propagates to remote + verified against backup rotation.
  • Threat model updated for attackers A4 (MITM) and A5 (Supabase incident).

Blockers for starting Phase 7:

  • User creates a Supabase project (EU region, free tier is fine).
  • Signed DPA on file.
  • processors.md entry filled in (Supabase + AWS as subprocessor).

📋 Garmin Connect integration ​

  • Requires Garmin developer partner approval — slow, needs a business entity + a written use case.
  • Once approved: OAuth 2.0 flow similar to Strava, activity fetch, planned- workout push.

📋 Google Health Connect (Android) ​

  • Companion to Apple Health once we ship Android.
  • Same read (menstruation + workouts) + write (completed sessions) pattern.
  • Runtime permissions per category, incremental grants.

📋 Recommender v1.0.0 ​

  • Feed real signals into the recommender: today's subjective energy, recent felt-scores per phase, imported HRV / RHR / sleep from Health.
  • "Recent felt-score in this phase" as a factor so historically-bad phases auto-downshift.
  • Explainability panel: show per-factor contribution history over the last N recommendations so users understand how UNDA is learning.

📋 UX + content ​

  • More workouts in the library (currently 20+, aim for 60+).
  • Rest-day interstitial explaining recovery is training.
  • Copy pass across all screens — soften remaining "peak strength" language per the claims register.
  • Notification scheduling (workout reminder, period countdown).

📋 Testing ​

  • Widget tests for onboarding + delete-all-my-data flows.
  • Golden tests for Today / Calendar / Plan screens.
  • Repository unit tests for schema migrations and dedup.
  • CI (GitHub Actions): analyzer + tests on every push.

Pre-launch gates ​

Pre-Beta Gate (§24) ​

✅ All 10 engineering blockers closed. Still need before beta:

  • Named security officer + real security@ mailbox.
  • Signed DPA with any cloud processor.
  • DPIA completed (Data Protection Impact Assessment) or formal applicability decision documented.
  • Incident-response tabletop exercise run once.

Pre-Public-Launch Gate (§25) ​

Beyond the beta gate:

  • Final Privacy Policy, Terms of Service, Spanish Legal Notice (LSSI).
  • Cookie/tracker consent for the web app.
  • Trademark clearance for "UNDA".
  • App Store privacy declarations completed.
  • Google Play Health Apps declaration completed.
  • MDR medical-device boundary reviewed by counsel.
  • CRA applicability + reporting process reviewed.
  • AI Act assessment if any AI features have shipped.
  • Retention automation active (rolling deletion jobs).
  • End-to-end user export + deletion verified.

What we're deliberately NOT doing ​

  • ⏸️ Fertility / pregnancy tracking — out of scope for v1. Different regulatory posture; would need a separate assessment before any code.
  • ⏸️ AI coach / LLM features — no in-app AI in v1. If added later, needs §11 review (no health data to third-party LLMs without approval).
  • ⏸️ Ads / analytics — no product analytics wired at all today. When we add any, the event allowlist is enforced by review.
  • ⏸️ Social / sharing — no follows, no cycle sharing between users. Not on the roadmap.
  • ⏸️ Wearable direct BLE — we integrate via HealthKit / Health Connect, not directly with device Bluetooth.
  • ⏸️ Under-18 version — UNDA v1 is 18+. A minors' product needs a separate legal, privacy, and safeguarding assessment first.

Non-negotiable engineering rules ​

From /legal/UNDA_LEGAL_ENGINEERING_RULES:

  1. No sensitive health data in generic analytics.
  2. No sensitive health data in generic logs.
  3. No production health data in development.
  4. Explicit provenance on every data point.
  5. Predictions are not facts.
  6. Fitness guidance, not diagnosis.
  7. Every recommendation is versioned.
  8. Data must be deletable.
  9. Data must have a purpose.
  10. Third-party data sharing requires review.
  11. Least privilege.
  12. Consent is versioned.

Every PR touching personal-data handling runs through the §22 checklist.

UNDA is a fitness and training support product. It is not a medical device.

The compliance documentation on this site is our internal engineering standard, not legal advice.