We're UpFlyDev. We've been building software for twenty-something years now, for huge household names and for tiny two-person startups. Honestly? It's gotten pretty hard to surprise us.
New product? Old codebase nobody wants to touch? An AI idea you can't quite pin down? Bring it over. We'll find the smartest way to get it done, no drama, no wasted budget.
We move fast, keep things simple, and build stuff that just works.
What we shipped, what broke, and what we learned — from real products. See our apps Hire the team
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, let an attacker run commands with one request, before your application starts. Exploited in the wild since October 21. The fixed versions, the stopgaps that buy time, the log lines that mean trouble, and how we patch and harden PHP sites.
securityengineering Read the postPlanet Rescue, one of the five Solar Puzzles games, is now a YouTube Playable. Open it in the YouTube app or on youtube.com and play all forty missions free, with Mystery Flights and the Space Museum. What changes there: progress saved with YouTube, YouTube’s own pause and sound, and a short ad between missions now and then.
solarpuzzlesrelease Read the postOur circus cannon physics game is on the App Store and Google Play. Act 1 is free, and Big Top Pass opens the rest of the show. How a bot clears every stage before it ships, why the carousel only turns the picture, and one build in three places.
boomreleaseengineering Read the postA fifth building, where a prism splits the light into red and blue and a dark crystal must stay dark. Three free walks a day, and a walk when nothing is left to play. How a prism fits a game of mirrors, and a test that proves a dark crystal is needed.
lumenreleaseengineering Read the postCrystal Hunt, forty pixel pictures built of blocks; Mystery Flights made up on the spot; forty Planet Rescue missions; and a museum where you jump on worlds, fly real spacecraft routes and bend a ray of light around a black hole. How a bot ordered the pictures.
solarpuzzlesreleaseengineering Read the postOur nonogram game about finding living things is on the App Store and Google Play. Africa is free, and one purchase opens the rest of the world. Why no grid is drawn by hand, how each one is proved solvable, and one web build in three places.
expeditionreleaseengineering Read the postYouTube accepted Lumen as a Playable. Open it in the YouTube app or on youtube.com and play free, with nothing to install. What changes there: progress saved with YouTube, YouTube's own pause and sound, and a short ad between levels now and then.
lumenrelease Read the postA game library with Favorites and Continue, Games, Museum and My space tabs that slide, a Space Museum on four shelves, Rate Us, and a grown-up check that asks for a year of birth. How the tabs pan without eating a tap, a swipe we took out, and why the app got lighter.
solarpuzzlesreleaseengineering Read the postThe optics workshop stays free and one purchase, Lumen Unlimited, opens every building above it. Finished buildings now make new puzzles on the spot. How a generated puzzle keeps the rules of a level, and a purchase with no server.
lumenreleaseengineering Read the postWingman+ now warns you days before a rough patch or a good run, and tablets get a real two-column layout. Why iOS keeps only 64 notifications, a plan that remembers its colour, and the build that crashed only for Apple.
cyclewingmanreleaseengineering Read the postThe light tower adds portals and a splitter, the observatory gets lenses, colored glass and shutters, and the game finally ends. How every mirror budget is checked by search, a review sheet that never answers, and a stone that moved a pixel.
lumenreleaseengineering Read the postBarcode Info Premium is one payment with folders, export, scanning in a row, more photos and a quick preview, and notes, filters and two panes on tablets are free for everyone. Why the internet permission came back on Android, what a purchase with no server looks like, and where a paywall should stand.
barcodeinforeleaseengineering Read the postPlanet Portals gets a Your Style page with block frames, colours, thicknesses and surfaces, Cosmic Marbles gets marble materials and ships with two seats, Planet Blocks wears new artwork, and the Portals levels sit on one road. Why a showcase must not be a picker, why the default frame is no frame, and the sample that would not redraw.
solarpuzzlesreleaseengineering Read the postPlanet Trails is free to start, every game plays its first board for you and offers a move when you stall, and Cosmic Marbles opens with a level written marble by marble. Why a rules sheet is where rules go to be skipped, why a list that stops early must not count what is missing, and the 40 ms hiding inside a sound effect.
solarpuzzlesreleaseengineering Read the postLumen is live on the web. Place mirrors, guide a beam into a crystal and explore atmospheric workshops and laboratories. Free to play, with no ads, account or installation.
lumenrelease Read the postA GS1 code is not one number, it is a list of fields. How the app reads them without guessing, why an identifier it does not know has to stop the reading, and why plain text that looks like a label must not be treated as one.
barcodeinforeleaseengineering Read the postEnglish, Russian and Polish, picked up from your phone or pinned in Settings. Why a forecast engine had to stop returning sentences, what a typeface with no Cyrillic in Heavy did to every Russian heading, and the tool we built to read copy as copy.
cyclewingmanreleaseengineering Read the postPlanet Trails joins the collection and the Space Pass arrives — the first thing this app has ever charged for. What we refused to sell, why one date cannot say whether a subscription renews or closes, the parental gate that stopped talking down to the person paying, and the Teacher Approved badge that landed the same week.
solarpuzzlesreleaseengineering Read the postOur offline barcode scanner is out on the App Store and Google Play. The engineering behind it: an honest answer to the country question, a release manifest that drops the internet permission ML Kit drags in, and why the frame a barcode first decodes in is the worst one to keep.
barcodeinforeleaseengineering Read the postEvery mini-game now shares one tank of five hearts, refilling on the device's own clock with no server, no notifications and nothing to buy. Plus the engineering: a timer that needs no timer, why a heart you cannot watch leave reads as a bug, and the second heart that a held-open card was quietly costing.
solarpuzzlesreleaseengineering Read the postPlanet Blocks now teaches new rules as you climb: the Sun moves to a side and then roams, comets arrive as frozen blocks that never fall, and one of them lands in your tray so you choose where the trouble goes. Plus why a queued move is worse than a refused one, and a photo that stretched its own card on both platforms.
solarpuzzlesreleaseengineering Read the postA planner that picks the day for the date, the talk or the big ask; a journal that reads your own notes back to you; and a forecast that tunes itself to one relationship. Plus why the planner spaces its suggestions out on purpose, and where a personalised forecast is allowed to be computed when a watch only ever sees today.
cyclewingmanreleaseengineering Read the postNow live on both stores: a black hole that glows and spins as the marble chain closes in, a mercy brake for small hands, instant meteor burns and audio toggles on the pause screen. Plus a SwiftUI halo that inflated the thing it decorated, version strings that had quietly lied, and one shared version number across two stores.
solarpuzzlesreleaseengineering Read the postOur space puzzle collection for kids is live on the App Store and Google Play. The engineering: a measured 9 fps that killed the cross-platform plan, one Compose Canvas per board, level data that lives in exactly one place, and an app with no networking code at all.
solarpuzzlesreleaseengineering Read the postLog how the day actually went — mood, event tags and a private note on the calendar, and now from your Apple Watch too. Plus the engineering: a journal that deliberately stays out of the forecast, and the first data path from the watch back to the phone.
cyclewingmanreleaseengineering Read the postHome-screen widgets on iPhone and Android, Apple Watch complications, daily heads-ups and Face ID lock — plus the engineering behind them: a forecast cache instead of a third engine port, History-API back gestures inside a WebView, and a couple of WebView performance war stories.
cyclewingmanreleaseengineering Read the postOur first consumer app is live: your partner's cycle as a daily Green/Yellow/Orange/Red forecast. How we built an app with no servers at all — and kept two forecast engines in provable parity with golden fixtures.
cyclewingmanreleaseengineering Read the post