1
0 Comments

I had 1000+ unread user reports in my live app — here is how I fixed the whole system

DramaHub has been live on the Play Store since March 2026. 7,000+ downloads. 3,000+ daily active users. Built solo. ₹0/month infrastructure cost.

Today I found out I had been ignoring my users for 2 months.

The problem

Both the "Suggest a Drama" and "Report a Problem" screens were Google Forms embedded in a Flutter WebView. Responses went to a Google Sheet I completely forgot existed. No notification. No alert. Nothing.

I had 1000+ drama suggestions and 1000+ problem reports sitting there completely unread.

Users were putting in effort to give me feedback. I was not receiving any of it.

What I built instead

Replaced both screens with native Flutter dark-themed forms. On submit, formatted message goes instantly to my private Telegram group via Telegram Bot API.

Every submission includes:

  • Problem type or drama name
  • Full description
  • Optional contact (Telegram username or email)
  • App version (auto-detected)
  • Country (auto-detected from device locale, never shown to user)

Now I see every submission the moment it happens. On my phone. Full context.

The security issue I found along the way

While setting this up I made a mistake — put the Telegram bot token in a public GitHub repo. GitHub sent me a secret exposure alert within minutes.

How I fixed it:

  1. Revoked the exposed token immediately
  2. Made the GitHub repo private
  3. Added GitHub PAT as encrypted secret in Cloudflare Worker
  4. Worker now authenticates with GitHub on every fetch

App works exactly the same. Users see zero difference. But now fully secure.

The architecture

App → Cloudflare Worker (authenticated) → Private GitHub repo

Bot token and chat ID stored in app_config.json (private repo), fetched through Cloudflare, loaded at runtime. No hardcoding anywhere. Admin can rotate token without any app update.

The real lesson

I was so focused on building new features that I never checked if existing ones were actually working for users.

3,000+ DAU is not a side project. Real people use it every day. They deserve to be heard.

Now they are.

Full technical breakdown here: https://dev.to/waseyjamal/i-ignored-1000-users-for-2-months-here-is-how-i-fixed-my-flutter-apps-feedback-system-51fh

Happy to answer any questions about the Telegram bot setup or Cloudflare Worker authentication.

on May 24, 2026