Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Backend & Infrastructure›Billing & Payments·16 in this wave

Approve: Billing & PaymentsTo do · blocker Apply requireTier middleware to all Pro-only routesTo do Wire UI feature gates with the Gate componentTo do Add billing route testsTo do Confirm pricing-page numbers match Stripe productsTo do Confirm STRIPE_WEBHOOK_SIGNING_SECRET set in prodDone Test Stripe test vs live key separationDone Decide: remove in-app checkout links, or get Apple's external-purchase entitlementTo do Implement the upgrade-path decision on iOS and AndroidTo do Build the Android subscription and billing surfaceTo do Pre-downgrade confirmation modalDone Show current subscription state in /settings/subscriptionDone Build invoice history pageTo do Wire dunning email on invoice.payment_failedDone Annual vs monthly pricing toggleTo do Tighten Stripe replay tolerance from 300s to 60sDone

Wave

Billing & Payments

Depends on Auth and Backend API. Revenue path — the paywall blocker lives here.

TacTile › Launch TacTile › Backend & Infrastructure › Billing & Payments

6/16 done10 open1 open blocker

Selected taskclear

Decide: remove in-app checkout links, or get Apple's external-purchase entitlement

To doOwner · Vivt_a82cd502

Unlocks 2Implement the upgrade-path decision on iOS and Android Approve: Billing & Payments

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Decide: remove in-app checkout links, or get Apple's external-purchase entitlement** · to do

Where it sits: TacTile › Launch TacTile › Backend &amp; Infrastructure › Billing & Payments

## Unlocks 2

- Implement the upgrade-path decision on iOS and Android
- Approve: Billing & Payments

## The brief on file

Viv — build the three-region upgrade path. Matthew's decision 2026-07-28: link out to the web like ChatGPT and others do, never Apple IAP. RESEARCHED 2026-07-28 — the earlier "this will be rejected" assessment was WRONG and is corrected below.

CURRENT RULES, verified by research not memory:

US STOREFRONT — external links are FULLY ALLOWED. Since May 2025, following the Epic v. Apple injunction, Apple's guidelines state there is no prohibition on buttons, external links, or calls to action on the US storefront, and NO entitlement is required. Commission is currently 0% pending district-court approval of a rate; the Ninth Circuit said Apple may charge only what is "genuinely and reasonably necessary" for coordinating linked-out purchases. So the existing isUSStorefront gate (SubscriptionViewModel.swift:266-270, SubscriptionView.swift:170) is CORRECT AND CURRENT. Do not remove it.

EU — allowed under the DMA, but on different terms. Developers may communicate and promote offers to destinations of their choice, with actionable links, no URL limitations, redirects and intermediate landing pages permitted. BUT it carries Apple's EU business terms: an initial acquisition fee, a store services fee, and the Core Technology Commission (5% as of January 2026, replacing the old per-install Core Technology Fee). CRITICAL CONSTRAINT, which TacTile already satisfies: an EU app cannot offer BOTH Apple IAP and external payments — since TacTile has no IAP at all, this is fine.

REST OF WORLD — still restricted under the older rules. The safe path is what the app already does outside the US: a plain web-management link with no purchase call-to-action.

WHAT TO BUILD: the code today branches two ways (US / not-US). It needs THREE — US, EU, and rest-of-world. US and EU both get a real upgrade CTA linking to Stripe checkout; rest-of-world gets an informational "manage your plan on the web" link with no purchase framing. Use StoreKit Storefront.current (already wired) to determine region.

NEEDS MATTHEW BEFORE THE EU BRANCH SHIPS: enabling the EU path means accepting Apple's EU business terms and their fee structure. That is a money decision, not an engineering one. Build US and rest-of-world first; leave the EU branch behind a flag until he confirms.

Also make sure the compare-matrix footnote ("Plan changes are completed on the web") stays — it is exactly the right tone and reads well in all three regions.

Files: apps/ios/TacTileConnect/Features/Settings/{ViewModels/SubscriptionViewModel.swift, Pages/SubscriptionView.swift, Services/BillingService.swift}. Android has parallel Google Play rules — handle separately, do not assume they match.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Billing & Payments

Decide: remove in-app checkout links, or get Apple's external-purchase entitlement