SafeHaven is an Android app store that is focused on trust, source visibility, and very clear app metadata. Apps can be linked to their source repositories, verified against developer ownership, scanned before release, and rechecked after being made available.
Caution
Android FOSS is under threat. From September 30, 2026, Google will require developer verification for all Android apps on certified devices, including those installed outside of the Play Store. https://keepandroidopen.org/
SafeHaven is an Android app distribution platform built around transparency. Instead of using the 'trust me bro' methology, SafeHaven aims to show where the app comes from, whether the source has been verified, and if it has passed all malware checks.
| Layer | What it does |
|---|---|
| Source linked | Apps can include a public source repository. |
| Verified Source | The developer proves control of the linked repository by adding a .safehaven file in their repo during setup. |
| Unverified listings | Community/imported apps can be listed without claiming developer ownership. |
| APK scanning | Submitted APKs are scanned before being approved. |
| Rechecks | Apps can be rescanned after release to keep metadata fresh. |
- Developers can register and manage their apps. SafeHaven checks submitted APKs through its scan pipeline before they become available in the public catalog.
- Community/imported listings are kept separate from verified developer listings.
Want to suggest an app? Use the App Suggestions discussion.
| Area | What it contains |
|---|---|
| Android client | Store browsing, app pages, install flow, and UI. |
| Store logic | Catalog parsing, categories, app metadata, and listing display. |
| server_code | Backend/store server code for submissions, scanning, storage, and catalog generation. |
Official Android APKs published by ColourSwift are signed with the following certificate:
SHA-256: 9c67f4224888f60e093cf7eab9b194e6d4cd73bb11313638c47b17f0d5f34ec4
You can also verify a downloaded APK with the Android SDK Build Tools command:
apksigner verify --print-certs app-arm64-v8a-release.apk
Make sure Flutter is installed, then run:
flutter pub get
flutter runFor a release APK:
flutter build apk --releaseFor an app bundle:
flutter build appbundle --releaseSafeHaven is still in early development.
Nobody can claim to be perfectly safe. However, SafeHaven leverages commercial security software in the live build to ensure malware doesnt slip through. Along with the work in progress BEP (build evaluation process), to ensure apps riddled with ads and trackers remain off the store.
SafeHaven Store is split in two categories. The client code & Server code
- Client: MIT LICENSE
- Backend/Server: AGPL-3.0 server_code/LICENSE