Focused audit + fixes — React Native / Expo Pokémon TCG app

About the project I'm the founder of Bindex, a Pokémon TCG collection app for Android (live on Google Play). Users build digital binders (master set, Pokédex region, or custom), mark owned vs missing cards, search/filter, and sync with Supabase. The app is built with React Native, Expo, and TypeScript, with much of the development done using Cursor. I have no coding experience. The codebase is largely complete. I need an experienced mobile developer for a focused review (not a full rewrite) and, if we agree after the report, targeted fixes on a fixed hour budget. Nice to have: You collect Pokémon TCG, run master sets, or understand variants (reverse holo, promos, etc.) — helps validate collection logic faster. Not required if your Expo + Supabase experience is strong. Subscriptions RevenueCat / Pro subscriptions are NOT live. All users have full access today. Monetization is disabled in code. RevenueCat is integrated for a future launch — do not spend time on billing/checkout unless we agree a separate milestone later. Scope — Phase 1 (required): focused live-app review Review the repo and running app. I will share an Audit Pack (test flows, product notes, test account). Deliver a written report with priorities. Must cover: - Supabase security — authentication and Row Level Security (RLS). Can User A read or change User B's binders/cards? - Stability — top crashes from Sentry and/or Google Play (I will grant read access or paste summaries). - Offline / sync — spot-check marking cards owned offline, reopening the app, basic multi-device if feasible. - Exploratory testing on core flows (binders, ownership, offline/sync) plus any issues from Sentry/Play — I have no reported bug list. Phase 1 deliverables: - Report: Critical / High / Medium / Low - For each Critical and High item: problem, user impact, suggested fix, estimated hours to fix - Dedicated RLS / data isolation section Scope — Phase 2 (optional, same contract or follow-on) Fix only items we agree in writing from your report. If a fix exceeds your estimate, stop and ask before continuing. Tech stack - React Native + Expo (~SDK 54), TypeScript - Supabase (auth, PostgreSQL, sync) - TanStack React Query, Zustand - Pokémon TCG API - Sentry, PostHog - EAS Build for Android production releases What I provide - GitHub read access - Audit Pack (scope, test flows, product notes) - Test account credentials (via secure message) - Sentry access (or crash exports)