Mbwana Ally Let’s talk

Developer & founder / East Africa

Software for
real
operations.

I’m Mbwana. I build software that connects people, permissions and operations.

Explore my work GitHub (opens in a new tab)
Mbwana Ally
From architecture to delivery.Web · APIs · Mobile · Infrastructure
01 / System anatomyExploded view
Move to explore the layers
Selected systems / 2026Identity. Care. Logistics. Travel. Compliance.↓

01 / Selected work

Built around
real operations.

Eleven projects across web platforms, mobile learning, decision-support demos and simulations. Each has a different domain and a clear scope.

Identity / Security01
Trusted device ↘
SafenodeEncrypted
by design.
WebAuthnDevice sessions
Team access RBAC
Device → Identity → Vault
01 / 05Live product

Safenode

Vault security across product surfaces.

A password manager with WebAuthn, device sessions and team permissions, spanning web, mobile, desktop and browser extension clients.

React / ViteFastifyPrismaExpo / Tauri
Inside the architecture
Challenge
Keep identity, recovery and team sharing aligned with vault security.
Architecture
Shared API with separate clients. WebAuthn and device-bound sessions sit alongside team access rules, audit trails and billing webhooks.
Current state
A live product, with a documented migration toward passkey-first access and wrapped vault keys. That migration is an ongoing engineering direction.
Visit Safenode Source code
Care / Coordination02
Realm 01PatientPortal + mobile
Realm 02WorkforceProvider + operations
ConsentReferralsAudit
Separate identities. Shared care workflows.
02 / 05Active build

Mwanamke

Care coordination with explicit trust boundaries.

A bilingual platform for Tanzania and Zanzibar. Patients, providers and operators have distinct roles around consent, records and referrals.

Next.jsExpoFastifyPostgreSQL
Inside the architecture
Challenge
Coordinate sensitive care without collapsing patient and workforce access into a single identity boundary.
Architecture
A TypeScript monorepo with portal, mobile and API applications; shared domain, security and i18n packages; isolated OIDC realms and service-level RBAC.
Engineering
Prisma models, encrypted records, consent ledger, outbox worker, Redis, OpenAPI and Terraform configurations for AWS/Auth0.
Current state
Active product development. Clinical and operational workflows are represented in the code; no production care outcomes are claimed.
Explore repository
Logistics / Operations03
Subsidiary-scoped access
LogisticsWarehouseMachinery

Trips · Stock · Maintenance

Three domains. One operational view.
03 / 05Internal tool

AJS Control System

Operations across teams and subsidiaries.

Fleet trips, permits, warehouse stock and machinery maintenance brought into a shared control system with subsidiary-scoped access.

Next.jsExpressPrismaPostgreSQL
Inside the architecture
Challenge
Give directors cross-business oversight while keeping each team's records appropriately scoped.
Architecture
A Next.js frontend and modular Express/TypeScript API, with JWT authentication, role gates and subsidiary data scope.
Engineering
Driver workflows, bulk imports, alert lifecycles, SMS through Africa's Talking, email digests and cron notifications. Docker Compose and Nginx configurations accompany the application.
Current state
Internal operations codebase. A public production deployment has not been verified.
Explore repository
Travel / CRM04
01Inquiry
02Itinerary
03QuotationVersioned snapshot
From first inquiry to a structured trip.
04 / 05Live website

Mansa Tours & Travel

A public experience. An operational backbone.

A travel website paired with an admin workspace and relational CRM for inquiries, itineraries, suppliers and quotation revisions.

Next.jsPrismaPostgreSQLCloudflare R2
Inside the architecture
Challenge
Connect customer trip planning to the back-office work of sourcing suppliers and maintaining quotations.
Architecture
Separate public and admin applications, company-scoped roles and immutable quotation snapshots. The repository includes legacy Supabase policies and a migration toward Prisma/Auth.js.
Domain model
Inquiries, trips, itinerary days, suppliers, hotels and quotation revisions have explicit relationships.
Current state
The public website is live. The repository also contains the evolving back-office implementation.
Visit Mansa Source code
Finance / Compliance05
M-PesaUSSDWhatsApp
FastAPI / CeleryTransaction engine
Capture→Classify→Adapt
One transaction model. Local tax rules.
05 / 05Product alpha

KodiSmart

Compliance shaped around small-business workflows.

An API and Flutter client for transaction capture, mobile-money integrations and country-specific tax logic in East Africa.

Python / FastAPIFlutterRedisCelery
Inside the architecture
Challenge
Bring transaction capture and compliance into the mobile-money and messaging channels businesses already use.
Architecture
A modular FastAPI service and Flutter client, backed by SQLAlchemy, Alembic, PostgreSQL and background workers.
Engineering
M-Pesa, USSD and WhatsApp integration code, plus jurisdiction-specific adapters for TRA, KRA, URA, ZRA and RRA.
Current state
Product alpha. Adapter code is not a claim of live authority integration, certification or production tax filing.
Explore repository

More work.

Mobile learning, care-network simulation, property systems and personal finance.

Care / Decision supportCompetition demo

BloodMatch AI

A synthetic Zanzibar care-network demo comparing blood availability, facility capability and travel time, with stock forecasting and redistribution scenarios.

Next.jsTypeScriptRechartsCloudflare
Inside the architecture
Architecture
A modular Next.js monolith with pure domain modules for compatibility, referral ranking, forecasting and redistribution. The deployed static demo runs its engines in the browser.
Engineering
Hard-constraint rejection, explainable rankings and recalculation when facility conditions change. Core recommendations use deterministic rules, not an LLM.
Scope
All patient, facility and inventory data is synthetic. This is an operational demonstration, not a clinically validated system or a substitute for clinical judgment.
Open demo Source code
Education / MobileIn development

Safari Shule

An English–Swahili early-learning app with offline activity worlds, counting games, persistent progress and a parent-gated area for iOS and Android.

React NativeExpoTypeScriptAsyncStorage
Inside the architecture
Architecture
A local-first mobile application with separate content, game-engine, storage, audio and parent-area modules. Learning content is bundled; progress stays on the device.
Engineering
Language switching without losing the current round, first-attempt star awards and retry feedback. Learning requires no account, ad SDK or analytics SDK.
Current state
Native app in development, not a verified App Store or Play Store release. Narration and release reviews remain; paid purchases require a separately configured receipt-verification service.
Explore repository
Marine / SimulationConcept demo

Dr. Marine UUV

An interactive simulation of a surface-and-underwater drone system for reef and seaweed-farm monitoring in Zanzibar.

JavaScriptThree.jsHTMLOffline simulation
Inside the architecture
Architecture
A single-file browser demo with Three.js bundled inline and client-generated simulation data. Supporting documents cover the proposed system, ethics and fact-checked domain claims.
Scope
A software simulation and concept, not deployed marine hardware or live environmental monitoring.
Explore repository
Property / DataAPI prototype

Milki API

A Tanzania-focused property-intelligence API with geospatial models for ownership, disputes, risk and valuation, plus metered API access.

Python / FastAPIPostGISSQLAlchemyAlembic
Inside the architecture
Architecture
A PostgreSQL-first service with PostGIS columns, versioned migrations, API-key and JWT access, tier-based quotas, rate limits and protected-endpoint audit logging.
Scope
The repository is named Milk-API. BPRA and e-Ardhi connectors are stubs; sample data does not establish live registry access.
Explore repository
Hospitality / BookingsProduct build

Twiga AGM

A property-management system for Twiga Residence, combining guest bookings, payment flows and an administrative workspace.

Next.jsFirebaseFlutterwaveTurborepo
Inside the architecture
Architecture
A monorepo with separate guest and admin applications, shared types and validation, and Firebase Cloud Functions for booking and payment operations.
Engineering
Firestore-backed reservations, payment initiation, webhook handling and booking confirmation workflows.
Current state
Product codebase; a public production deployment has not been verified.
Explore repository
Finance / Personal toolsApplication prototype

Expenses Tracker

A personal-finance application with expense entry, budgeting screens and income-versus-spending charts with category and time-range breakdowns.

Next.jsTypeScriptPrismaChart.js
Inside the architecture
Architecture
A Next.js application with authentication and expense API routes, Prisma data models and reusable analytics components.
Engineering
Transaction filtering by week, month or year, category aggregation, and bar and doughnut charts.
Current state
Application prototype. No live bank connection or production deployment is claimed.
Explore repository
11 projects · Architecture details drawn from public repositories.All repositories

02 / Expertise

The stack follows
the system.

Depth is based on repeated use across application code, schemas and deployment configuration.

What I work on

  1. 01Product architecture
  2. 02Identity & access
  3. 03Domain data models
  4. 04Third-party integrations
  5. 05Operational software
  6. 06Infrastructure & delivery

TypeScript & application UI

Deep

TypeScript · JavaScript · React · Next.js

Mwanamke, Safenode, AJS and Mansa

Data & access systems

Deep

PostgreSQL · Prisma · OIDC · WebAuthn · RBAC

Consent models, device sessions, subsidiary scope and CRM schemas

APIs & background work

Strong

Python · FastAPI · Fastify · Express · Redis · Celery

Validation, webhooks, outbox processing and scheduled operations

Infrastructure & tooling

Strong

Docker · Terraform · AWS · Cloudflare · Git · CI

Container configuration, migrations, reverse proxies and backups

Mobile & desktop

Applied

Expo / React Native · Dart / Flutter · Capacitor · Tauri

Offline learning in Safari Shule; clients for care, vault access and compliance

Payments & messaging

Applied

Stripe · Paddle · Flutterwave · M-Pesa · Africa’s Talking

Billing handlers, webhook verification and notification workflows
Mbwana Ally
Mbwana AllyDeveloper & founder
On GitHub

03 / Behind the work

The details
are the product.

I build across the interface, API and data layer. My projects often start with the same questions: who can access a record, how work moves between teams, and what happens when an operation fails.

01 Model the actual work.
Start with roles, states and handoffs.
02 Make access explicit.
Enforce permissions in services and data layers.
03 Leave room for change.
Separate product surfaces from shared domain logic.

04 / Start a conversation

Product engineering / Collaboration

What are you
building next?

Tell me about the product,
the people and the problem.

WhatsApp +255 744 294 409Instagram GitHub