Offer still stands! email me (my email is in my profile)

When there’s a will, there’s a way :) I’m not immediately sure re Fitbit Air (that’s nasty if it’s e2e encrypted!), but… maybe it doesn’t pin the server certificate and you can intercept communications?

Seems like you would have fun reversing this! :) reach out!