I have developed an app designed to encourage in-person meetups among groups of friends. It makes it easier to organize outings for people who already know each other. You place a pin on a map and share it with your group. Those who already have the app receive a notification. Those who don't can be invited through a universal link. Even without the app they can see the location, the time and the number of confirmed attendees on the web (the app is required to confirm attendance). I am building it on my own with FlutterFlow, Firebase and local SQLite, in five languages.

This month, besides promoting and improving the app, I've had to spend time defending it: bots used the SMS login to trigger 1,744 code requests in nine days. Only three of them ended in a sign-in. I have since added several defenses, including a daily check that compares codes sent and sign-ins per country. None of this fixes the app's core problem. Open the map before any of your friends use the app and you find it almost empty.

https://www.orbitome.com/?utm_source=hn&utm_medium=community...