Everything to send us
One list of every file and value, and how to send the sensitive ones safely.
Everything from the previous pages in one place. Work down it, and when it's complete we can build.
You don't have to send it all at once — send each piece as you finish it and we'll start on what we can.
How to send the sensitive items
Three files and a couple of passwords are genuine credentials. Anyone holding them can upload apps to your store accounts or sign in to your website.
Please don't send them as plain email attachments. Email is stored, forwarded and backed up in more places than you'd expect, and an attachment from three years ago is still an attachment.
Any one of these is fine:
- A password-protected zip, with the password sent by a different channel — WhatsApp, SMS, or over the phone. Not in the same email.
- A private link — Google Drive, Dropbox or WeTransfer, set to expire and not "anyone with the link".
- A password manager share — 1Password, Bitwarden and similar all do one-time secure links.
If you're not sure, ask and we'll send you a secure upload link.
Once we've confirmed receipt, delete your copy from wherever you shared it. Keep your own backup somewhere safe — several of these can never be downloaded again.
Your website
| Item | Notes |
|---|---|
| Website address | The full https:// one |
| WordPress admin login | Sensitive |
| Both plugins installed and activated | We send them to you |
Apple
| Item | Notes |
|---|---|
| Developer Program approved | |
| We're invited as Admin | |
| API access switched on by the Account Holder | |
| Bundle ID | e.g. com.yourcompany.app |
APNs key (.p8) |
Sensitive · downloads once |
App Store Connect API key (.p8) |
Sensitive · downloads once |
| Key ID, Issuer ID, Team ID | |
| Push Notifications ticked on the App ID |
Google Play
| Item | Notes |
|---|---|
| Play Console account created | |
| We're invited to the console | |
| Package name | Same as your Apple bundle ID |
| Service account JSON | Sensitive · downloads once |
| Whether the 12-tester rule applies | Your dashboard says |
Firebase
| Item | Notes |
|---|---|
| Project created | |
| We're added as Editor | |
| Project ID | e.g. yourcompany-4f2a1 |
Google Cloud
| Item | Notes |
|---|---|
| Maps key — Android | |
| Maps key — iOS | |
| Places key | |
| OAuth client ID — Android | |
| OAuth client ID — iOS | |
| OAuth client ID — Web |
OneSignal
| Item | Notes |
|---|---|
| App created, both platforms configured | |
| App ID |
Facebook — optional
| Item | Notes |
|---|---|
| App ID | |
| Client Token | |
| Display Name | Exactly as entered |
Full details → · skip if you don't want Facebook login
Brand and store listing
| Item | Notes |
|---|---|
| App icon | 1024 × 1024 PNG, square, no transparency |
| Logo files | |
| Primary brand colour | Hex code |
| App name | Up to 30 characters |
| Language and reading direction | |
| Short and full description, keywords | |
| Support URL | |
| Privacy Policy URL | Required by both stores |
The three download-once files
Worth repeating, because these are the only items on this list that can't be replaced by looking them up again:
- Apple APNs key (
.p8) - Apple App Store Connect API key (
.p8) - Google Play service account JSON
If one is lost, it isn't the end — you delete it in the console and create a replacement, then send us the new one. But it's an avoidable half hour.
What happens next
We build both apps, sign them with your credentials, and upload them for testing. You'll get a TestFlight invitation for iPhone and an internal-testing link for Android.
Try it properly — your real listings, your real branding, on your own phone. Tell us what you'd like changed. Testing your app covers how that works and what's worth checking.
When you're happy, we submit to both stores. Apple review typically takes a day or two; Google's very first review of a new account can take longer, though every update after it is quick. There are two forms in your own accounts that only you can complete before we can submit — going live explains them.
The final release is your click, not ours. We'll tell you when it's ready and stand by while you decide.