LakBites
A mobile-first app that shows which Filipino street-food vendors are out near you right now, and gives vendors tools to manage their presence.
An illustrative 3D model made for this portfolio. See the screenshots for the real thing.
Screenshots
Overview
LakBites helps people find fishball, taho and isaw carts nearby, while vendors manage their profile, menu, schedule, live status and location. It runs on the web and as an Android app, in English and Filipino. It is a discovery app, not an ordering or delivery service.
Problem
Street-food vendors move around and rarely have an online presence, so finding one nearby comes down to luck.
Solution
A live map of vendors, backed by a dedicated API, with a separate vendor dashboard for going live and updating menus and schedules.
Architecture
The React app talks only to an Express API hosted on Render. The API is the only component that holds the Supabase secret key and it enforces every rule, so the database is never reached directly from a phone or browser.
Stack
Key features
- Live vendor map with moving and parked status
- Vendor dashboard for profile, menu, schedule and location
- English and Filipino language support
- Android app built from the same web code
- End-to-end tests with Playwright
Security notes
- The database refuses the public Supabase API: row-level security is on with no policies, and public roles are revoked
- Sign-in passwords are handled by Supabase Auth, and only a hash of each session token is stored
- The API uses rate limiting, security headers and schema validation on incoming data
- Location is only used while the app is open