The solution is a Single Page Application running directly in the browser. The app is using Google firebase backend as a service. This means that there are no open APIs instead the Google firebase realtime database is used togheter with Google firebase cloud storage.
Traffic between the browser and Google Firebase is encrypted using TLS 1.2, a strong key exchange (ECDHE_RSA with P-256), and a strong cipher (AES_128_GCM).
Do you have any questions?
We are happy to support you at email@example.com.