1.3.1

Fixed

• The universal APK crashed on startup on x86_64 devices and emulators, right after the splash screen. Since 1.2.2 the release build is split per ABI, and the split filter also narrowed the native build to the two arm architectures — but the universal APK still packaged the x86/x86_64 libraries that ship prebuilt inside the AARs. Those directories held libhermes.so and libreactnative.so but no libappmodules.so, so the app installed and then died in TurboModule init. Packaging is now pinned to the architectures the build actually compiles, and the build refuses to finish if an APK ships an ABI without its compiled libraries.

  The per-ABI arm APKs — the ones F-Droid builds and ships — were never affected.

Added

• An x86_64 APK, so the app can be run in an emulator.

Downloads

APK	For
simpleday-1.3.1.apk	universal — works on any device
simpleday-7002-arm64-v8a-release.apk	most phones (64-bit arm)
simpleday-7001-armeabi-v7a-release.apk	older 32-bit arm phones
simpleday-7003-x86_64-release.apk	emulators and x86_64 devices

SimpleDay 1.3.0

Fixed

• A day could end up with two entries: with today's entry already saved, + still opened an empty editor for the same date. Both entry points — the button and the daily reminder — now reopen the existing entry, ready to edit. Tapping a card in the list still opens read-only. Duplicates an older version created are left untouched and stay readable.
• WebDAV sync over plain http:// could not work at all. With targetSdk 36 and no cleartext policy in the manifest, Android blocked the connection before it left the device, and the dialog blamed the URL and credentials. Self-hosted servers on a LAN are reachable again, and the failure now names cleartext as the cause when it is.
• Entries started between midnight and the UTC offset were filed under the previous day. Dates are now taken in the device's timezone.

Security

• WebDAV entries are authenticated with HMAC-SHA256 over the ciphertext (encrypt-then-MAC), with the tag verified before decryption and subkeys derived separately from the stored key. A malicious or compromised server could previously alter stored entries; only PKCS#7 padding stood in the way.
  Existing entries stay readable and are rewritten in the new format the next time you save them. To migrate everything at once, use Upload to Server.
• Corrected the encryption documentation, which claimed "AES-256-CBC with PBKDF2". No KDF was ever involved — the stored key is already 256 random bits. The unused per-entry salt is no longer written.
• Entry contents are encrypted before upload, but WebDAV credentials travel in a Basic auth header. Settings now warns about this when the server URL is http://.

Changed

• Removed 20 launcher-badge permissions (Samsung, HTC, Sony, Huawei, Oppo, Everything and others) pulled in by the ShortcutBadger AAR that expo-notifications depends on. SimpleDay never sets a badge.

Downloads

simpleday-1.3.0.apk is the universal build. The per-ABI splits are smaller — pick arm64-v8a for any recent device.

SimpleDay 1.2.2

Removed three permissions the app never used: SYSTEM_ALERT_WINDOW ("draw over other apps") and read/write access to shared storage. They were merged in by the React Native and expo-file-system manifests — all diary data has always lived in app-private storage.

Also fixed the F-Droid changelog file naming so release notes actually show up on the app page.

Downloads: simpleday-1.2.2.apk works on every device. The per-ABI builds are smaller: arm64-v8a for modern phones, armeabi-v7a for older 32-bit ones.

SimpleDay 1.2.1

Added SPDX license headers (GPL-3.0-only) to all source files. No functional changes.

Prepared for F-Droid inclusion.

SimpleDay 1.2.0

Offline-first daily journal/planner. All data stays on device.

Changes since 1.1.0

• 🔐 App lock with biometrics or device PIN
• 🔐 End-to-end encryption for notes + improved E2EE key storage
• 📦 IzzyOnDroid distribution metadata
• 🔏 Release APK signed with a real release key

APK

simpleday-1.2.0.apk — versionName 1.2.0, versionCode 3, package de.mymiggi.simpleday

Signer SHA-256: b6c52941582247adaecece03a9468d899b04c9f37e6a3c1faad4f3859e143674