Back
Hackathon · 404 Threat not foundApril 20263 days

fluxChild-protection system against grooming online.

An app that scans, detects and prevents grooming patterns in chats, files and social — with on-device AI, an anonymous fingerprint forum and a minor mode that listens without judging. iOS, Android and backend wired to a single source of truth.

RoleLead iOS · Backend · System design
StackSwiftUI · Flutter · FastAPI · Apple Intelligence
Team6 people · 72 hours

Three surfaces, one ecosystem

Flux for parents, Buddy for kids, GoBuddy for authorities.

Three products sharing infrastructure: they detect, contain and prevent digital threats against childhood. Native iOS, cross-platform Flutter and a web dashboard in production.

Live demo

Buddy reacting on the iPhone notch with its own speech bubbles. Flutter + Native iOS overlay.

4 iPhone mockups showing the main screens of Flux iOS — dashboard, voice, scanner, forum

Flux · iOS for parents

Designed with calm, not with alarms

4 screens, each with a specific purpose: risk-score dashboard, silent voice for the minor, WeProtect scanner and anonymous fingerprint forum. Without overwhelming the parent or exposing the minor.

  • Risk score with 7d baseline
  • Voice inbox, no pressure
  • WeProtect AI on-device
  • Anonymous community
Buddy pixel-art pet leaving the iPhone notch, talking to the user

Buddy · Emotional pet

Lives on the notch. Reacts with you.

A pixel-art pet that strolls over the punch-hole, talks via its own bubbles and reacts to Agent D signals in real time. Tap-to-talk, color sensor, Garfield sprites, multi-caregiver.

  • Notch overlay
  • Flutter + Native iOS
  • Tap-to-talk with Agent D
  • Remote multi-caregiver
GoBuddy web dashboard showing real-time narco-culture monitoring on TikTok

GoBuddy · Web platform

Real-time narco-culture monitoring

Analytics dashboard in production. Live system at 107.170.14.221 monitoring narco-culture content on TikTok and other platforms, protecting the digital integrity of children.

  • Production deploy
  • Live metrics
  • TikTok monitor
  • Legal compliance

Hackathon pitch

The full presentation we delivered to the jury

Produced with Remotion in React. Synced animations, Garfield sprites, TikTok-style transitions. Click play to watch.

Capabilities · Full system

A single platform to detect, contain and prevent.

Each block solves a concrete piece of the protection flow. WeProtect AI orchestrates the intelligence, the forum builds collective immunity, Voice gives the minor a voice without pressure.

System core

WeProtect AI

On-device analysis of chats, files and URLs. Apple Intelligence when available, fallback to local rules or remote backend if the parent enables it. Detects 11 patterns documented with CONAVIM, each with its threshold and action plan.

11patterns P-01 to P-11
0 PIIzero personal data
~120mson-device latency
Collective immunity

Anonymous fingerprint forum

De-personalized patterns that survivors share opt-in after their case is resolved. No names, no handles, no phone numbers. Censorship is regex + real-time NLP.

opt-in · zero PII

Active fingerprints

P-07
  • Bloqueado TikTok · 14

  • Bloqueado Discord · 22

  • Bloqueado Roblox · 9

  • Bloqueado Telegram · 7

Minor mode

flux voice · A voice that listens

App variant with softened tokens, no alarm colors, no uppercase. Silent inbox embedded in Buddy where the minor drops whatever bothers them. No pressure for an immediate reply.

non-alarming tone
DispositivoiPhone 15 · Lucía
Navegadorflux voz · 1.0
UbicaciónMexico · Cuauhtémoc
Close inbox
Anonymous community

Parents looking after each other

Persistent threads where caregivers share strategies, doubts and lessons without revealing identity. Real-time WeProtect moderation redacts identifiable data before showing the message.

live-moderated
Additional layers

Pieces holding up the main pillars — UX, security and compliance.

Bot Coach

Tu código: 764676

Photo

Chat

Doc

Link

URL

PDF

Email

Voice

FAB-style central scanner

Highlighted tab in the bottom bar. Photo, screenshot, file or URL. The main entry to WeProtect, not hidden inside menus.

Score · 24/100

7d
  • Bloqueado Baseline ±18 min

  • Bloqueado Baseline ±12 min

  • Bloqueado Baseline ±25 min

Risk score with baseline

0-100 score with low/medium/high bands, 7d trend and baseline of habitual apps. Compared to personal average, not generic.

NearbyInteraction pairing

Parent and minor link device-to-device via BLE + UWB. No on-screen codes, no intermediary server.

CONAVIM legal compliance

Aligned with the 2026 brief. 089 hotline, FGR/INAI escalation integrated. Zero-PII data with explicit opt-in.

zXZWVLb0mZpHer

Lucía Rodríguez

Magic referral links

Parent shares the case with a professional via a signed link. No-account access, everything logged for audit.

Silent onboarding

6 guided steps the minor completes at their own pace. No pressure, no long forms. The app waits, it doesn't push.

Shared infrastructure

What holds the three pillars together under the surface.

Services

Backend FastAPI

Single endpoint for WeProtect, forum, community and Voice. Local SQLite with deterministic seed, auto-generated OpenAPI. Production roadmap: Django + DRF + Postgres + Celery + Redis.

Android client

Buddy Flutter

Pixel-art Tamagotchi on Android. Minor mode outside the iOS ecosystem, same embedded Voice.

View repository

Hackathon stack

What we shipped in 72 hours.

Calls made with a zero-time budget: SwiftUI over UIKit, FastAPI over Django, Flutter over Kotlin. Each one paid back in iteration speed.

iOS
  • Swift

    Base language

  • SwiftUI

    Declarative UI

  • RealityKit

    Visual UWB pairing

Android
  • GitHub

    Versioning · CI

  • Figma

    Buddy mockups

Backend
  • Python

    FastAPI · SQLModel

  • Vercel

    Deploy preview

  • Tailscale

    Local mesh demo

AI
  • Notion

    Patterns P-01 to P-11

  • GSAP

    Onboarding micro-anims

Closing

Three days, six people, one single mission.

flux was born at the 404 Threat not found hackathon — April 2026, CONAVIM brief on digital violence against children. What we shipped in 72 hours is a first functional version of a platform that keeps growing.

12+iOS screens
18API endpoints
11P patterns
~6.4kLines shipped

“One of the hardest parts of building this was keeping the no-alarm principle — you want to alert the parent without letting the minor feel watched. Institutional calm isn't aesthetic, it's political.”

— Retro notes, day 3