Skip to content
Germany · Agentic mobile development

Mobile App Development for Germany, Android and iOS with Agents

In September 2026, Android held 72.37% of mobile operating system share in Germany and iOS 27.63%, according to StatCounter. A team that tests mostly on iPhones is checking the smaller part of its audience. The second surprise is analytics: under § 25 TDDDG, an SDK that stores or reads information on the device needs consent unless that is strictly necessary for a service the user has expressly requested, and the German supervisory authorities decline to treat analytics as generally exempt.

Curiosive is an app studio in Ankara, Türkiye. We ship iOS and Android apps in React Native, built with AI coding agents and signed off by a senior engineer change by change. One TypeScript codebase reaches the App Store and Google Play. Agents do the volume of screens and tests. Engineers own token storage, auth, payments, permission prompts and the privacy declarations each store reviews, because those are the parts that decide whether user data is handled correctly.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

Section 25 of the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG) allows storing or reading information on a user's device only with consent given to GDPR standards, unless it serves solely to transmit a message or is strictly necessary for a digital service the user has expressly requested. The German supervisory authorities' guidance for digital services (OH Digitale Dienste, version 1.2, November 2024) applies this to apps as well as websites. It says that when a consent screen blocks content, rejecting must take no more clicks than consenting, and that a button labelled 'Einstellungen oder Ablehnen' leading to a further layer is not enough. It also declines to treat reach measurement as generally exempt, noting that third-party analytics services on websites and in apps regularly process extensive information about users. So analytics and attribution SDKs start only after consent, with the choice stored and reversible. The same SDK inventory feeds the Google Play Data safety form, which must cover data shared through third-party libraries, and the privacy manifest Apple requires for listed required-reason APIs.

Android share, store rules and Apple's EU terms for apps in Germany

React Native ships both platforms from one codebase, but with that Android majority the test plan should follow the users: Android devices come first in manual and automated checks, with iOS as the second target rather than the default. Store rules land on both sides. Google Play has required new apps and updates to target Android 16 (API level 36) or higher since 31 August 2026. Wherever users can create an account, iOS requires a way to start deletion inside the app, and temporary deactivation does not count; Google Play wants an in-app path plus a web link for deleting the account and its data. Because Germany is an EU member, Apple's EU terms apply: Apple says that from 1 October 2026 iOS apps in the EU can offer alternative payment processing alongside In-App Purchase, at a 20% commission, or 10% for program participants and for subscriptions after their first year. Agents draft the store metadata; an engineer checks every declaration against what the code actually does.

Children, ID checks and health apps in the German market

Germany has not lowered the GDPR age of digital consent. According to the Bundestag's Research Services, young people can consent to the processing of their own data from 16, so an app offered directly to younger users that relies on consent needs it given or authorised by a parent, with reasonable efforts to verify this. Where an app must know who the user is, the German ID card has an online function (Online-Ausweisfunktion): a business connects to an eID server through an identification service, a hosted eID-Service or its own eID server, the last two needing an authorisation certificate (Berechtigungszertifikat) from the Bundesverwaltungsamt, and the free AusweisApp SDK embeds the flow in the app. Health is the other special case. Digital health applications that are CE-marked medical devices can apply to BfArM for listing in the DiGA directory, after which physicians or psychotherapists can prescribe them with reimbursement by statutory health insurance for about 73 million insured people.

How agents and engineers split a React Native app

The repetitive layer goes to agents: screen scaffolds, navigation, list rendering, form validation, test files and a first pass at store listing text. Each task arrives with acceptance criteria and limits set by an engineer, and Claude Code or Cursor checks its own output with the type checker, linter and tests before offering a change. Nothing merges until a senior engineer has read it. The parts that can hurt users stay with people: where tokens live (Keychain on iOS, Keystore on Android), how sessions refresh, receipt and entitlement checks on the server, what happens when the network drops and returns, and the consent gate in front of analytics SDKs. Two React Native apps we shipped for clients in Türkiye show the pattern: TrendinChat (trendin.chat), real-time trending-topic chat rooms built in two weeks, and Coffict (coffict.com), coffee ordering ahead with loyalty rewards. Germany runs one hour behind Ankara in summer time and two in winter, so code reviews and release calls happen during your office day.

Questions

The things people ask before starting.

Do apps in Germany need consent before running analytics SDKs?

Usually yes. Section 25 TDDDG requires consent to store or read information on a device unless that is strictly necessary for a service the user expressly requested, and the German supervisory authorities decline to treat analytics as generally exempt. Start analytics after consent, and where the consent screen blocks content, make rejecting take no more clicks than accepting.

Can users under 16 sign up to our app in Germany without parental consent?

Not where consent is the legal basis. Germany kept the GDPR default of 16, so for an app offered directly to younger users, consent must be given or authorised by a parent and you must make reasonable efforts to verify it. Plan the age check and the parent flow before launch.

Can a health app in Germany be prescribed by doctors and paid for by insurance?

Yes, if it is a CE-marked medical device listed in BfArM's DiGA directory. Physicians or psychotherapists can then prescribe it, reimbursed by statutory health insurance. BfArM must decide within three months of a complete application, and as of 9 September 2026, 196 of 254 applications had sought provisional listing during a trial phase.

How much does mobile app development cost for a startup in Germany?

Work runs as AI-accelerated development, starting from $2,000 per month, with scope agreed in writing. An MVP puts auth, a database and the core flow into production. We fix scope and budget in writing after a discovery call, and you do not sign a long contract to start.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones