NutriSync — Current Release & Backlog

This note tracks what is built and testable right now (the current release) and what is still pending (the backlog). It is versioned to match the app: the release number above equals the deployed web build, and moves with each release.

✅ Current release — available for testing now

Web (live)

• Marketing site — full commercial site, bilingual EN/ES, waitlist + newsletter capture that persists real signups.
• Web app (/app.html) — real sign-up / log-in on the live backend; 8-step onboarding (Back on every step, Start over, browser-Back aware); daily mood/energy check-in; Home with phase ring + Cycle Alignment Score; NutriLog, Movement, Progress, Calendar; Edit Period, Edit Health; Settings, Connected apps, Data & Privacy (JSON export + delete account).
• Navigation — native "← Back to site" exit, 44px back controls throughout, and hub back-paths wired to the browser Back button.
• Prototype mode — the full web app on demo data, no account needed (from the marketing "See NutriSync in action" section).
• Gated hub (Team Access, code 123456) — Investor & Builder rooms with sticky navigation; Founder Tools (Waitlist, Translations, Change Log); full documentation.

Mobile (Expo Go / OTA)

• 1:1 with the Figma prototype — Welcome → Auth → onboarding wizard (bold « back on every step, Start over, Android hardware-back handled) → daily "Before we Sync" gate → 5 tabs (Cycle home, NutriLog, Movement, Progress, Calendar) → Edit Period, Edit Health, Notification Center, App & Nutritional Preferences, Connected Devices (behind an OFF feature flag).
• Bilingual EN/ES with an in-app language selector; canonical values stay English.

Backend & admin

• Supabase (EU) — Postgres + Auth + Row-Level Security; the CAS engine writes daily_scores in real time for both surfaces.
• Full account deletion — server-side Edge Function erases data and auth identity.
• Consent / cookie layer on web (privacy-first defaults).
• Admin MIS console — live Total Users + DAU/WAU/MAU (aggregate-only, admin-gated).
• Founders' Waitlist dashboard (Builders hub) — ~140 migrated + live signups; search / filter / per-source counts; add / edit / delete with confirm + undo; CSV export.

How to test

• Web: https://nutrisync-collective.pages.dev (marketing) · /app.html (web app). Hub: footer Team access → code 123456.
• Mobile: open in Expo Go via the tunnel dev server, or install the Android APK (eas build --profile preview --platform android). iOS TestFlight is pending Apple enrollment (below).
• Admin: Builders hub → Waitlist / Admin · MIS — sign in with a founder account (admin-gated).

⬜ Backlog — what's pending

Near-term (no new infrastructure)

• iOS TestFlight — blocked on the paid Apple Developer Program ($99/yr); a free account has no signing team.
• Custom domain (F7) — publish on the branded NutriSync domain (Cloudflare Pages → Custom domains); ~15-min DNS task.
• Branch protection (B1) — no-force-push / required review on both repos; 2-min GitHub toggle.
• Waitlist → onboarding handoff (F5) — auto-pre-fill a waitlisted email into signup (capture + admin management already done).
• Admin console (G) — role tiers, Cloudflare Zero-Trust gating on the admin path; live financial KPIs once billing exists.

Product tracks

• Monetization / subscriptions — billing (e.g. Stripe) → premium gating + real MRR/churn in the console. Highest revenue impact; unblocks live financial KPIs.
• Community — feed, cycle-status sharing, streaks (privacy controls already present in settings).
• Native wearable sync (Epic E) — Apple Health / Health Connect + OAuth providers; foundation + consent UI shipped behind the OFF flag, native adapters need a dev build.

Compliance / governance (Epic D remainder)

• Formal consent service (versioned scopes, audit trail) and onboarding consent records (D1–D3).
• Retention / minimization policy (D6); DPIA / RoPA / DPA paperwork (D7).

Scale-up wave (deferred by design — triggered by B2B contracts)

• Epic A — AWS secure landing zone (Zurich region, KMS, private subnets).
• Epic C — containerized backend (ECS Fargate + Aurora), async workers, caching.
• Epic I — observability, security ops, disaster-recovery drills.

Full detail: see the Platform & Infra Backlog (03) and the Change Log (08) in this hub. This release note is regenerated and re-versioned each release.