A mobile-first productivity app that helps you track daily habits, manage tasks and goals, and delivers AI-powered insights into your behaviour patterns on a weekly and monthly basis.
- Overview
- Features
- Tech Stack
- Architecture
- Getting Started
- API Overview
- Authentication Flow
- AI Insights
- Push Notifications
- Screenshots
- Roadmap
- Contributing
- License
Atomic is a cross-platform mobile application built with React Native (Expo) that empowers users to take control of their productivity. Users can create and manage tasks, organise them by category and priority, link them to long-term goals, and mark them complete as part of their daily routine.
What sets Atomic apart is its intelligent feedback engine. Using OpenAI's API, the app analyses your task completion data over rolling weekly and monthly windows and surfaces personalised, natural-language insights about your behaviour — helping you identify patterns, celebrate consistency, and course-correct when habits slip.
- Task Management — Create, edit, delete, and complete tasks with title, description, category, priority, and estimated time
- Goal Tracking — Define long-term goals and link individual tasks to them to track incremental progress
- Category System — Organise tasks by categories (Work, Health, Personal, Grocery, and custom)
- Priority Levels — Assign Low, Medium, or High priority to surface what matters most
- Daily Dashboard — At-a-glance view of today's pending and completed tasks
- Weekly Behaviour Reports — AI-generated summaries of your completion rate, streaks, and patterns over the past 7 days
- Monthly Deep Dives — Broader trend analysis across 30 days, highlighting your most and least productive periods
- Natural Language Feedback — Insights written in a conversational tone via OpenAI, not just raw charts
- Email & Password Auth — Secure signup and login with hashed passwords (bcrypt)
- Google OAuth — One-tap sign-in with Google via OAuth 2.0
- JWT Auth with Refresh Rotation — Short-lived access tokens with secure refresh token rotation and session management
- Forgot / Reset Password — OTP-based password reset delivered via email (Resend)
- Rate Limiting — Per-route rate limiting on all sensitive endpoints
- Push Notifications — Expo push notifications for reminders and daily nudges (iOS & Android)
- Session Management — Device-scoped sessions stored in Redis for fast lookup and invalidation
- Background Jobs — Scheduled tasks using node-cron (e.g. sending weekly insight digests)
- Containerised Deployment — Fully Dockerised backend deployed on Render
| Technology | Purpose |
|---|---|
| React Native | Cross-platform mobile UI framework |
| Expo (SDK 54) | Managed workflow, routing, fonts, splash screen |
| Expo Router | File-based navigation for React Native |
| NativeWind v4 | Tailwind CSS utility classes in React Native |
| Zustand | Lightweight global state management |
| Expo Secure Store | Secure storage for refresh tokens on-device |
| React Native Reanimated | Smooth declarative animations |
| React Native Safe Area Context | Safe area inset handling |
| Expo Google Fonts | Plus Jakarta Sans typeface |
| React Native Toast Message | Non-intrusive in-app notifications |
| Technology | Purpose |
|---|---|
| Node.js + Express.js | REST API server |
| Prisma ORM | Type-safe database access and schema migrations |
| PostgreSQL | Primary relational database |
| ioredis | Redis client for session storage and caching |
| OpenAI API | GPT-powered behavioural insight generation |
| Google Auth Library | Server-side Google OAuth token verification |
| Resend | Transactional email delivery (OTP, digests) |
| node-cron | Scheduled background jobs |
| express-rate-limit | Rate limiting middleware |
| bcrypt | Password hashing |
| jsonwebtoken | JWT generation and verification |
| express-validator | Request body validation |
| Technology | Purpose |
|---|---|
| Docker | Containerisation of the backend service |
| Render | Cloud deployment platform |
| Redis | In-memory store for sessions and rate limit state |
| PostgreSQL | Hosted production database |
┌─────────────────────────────────────────────────────────┐
│ Mobile Client │
│ React Native + Expo Router │
│ │
│ ┌──────────┐ ┌──────────┐ ┌──────────┐ │
│ │ Zustand │ │ Secure │ │ Expo │ │
│ │ Store │ │ Store │ │ Notifs │ │
│ └──────────┘ └──────────┘ └──────────┘ │
└─────────────────────┬───────────────────────────────────┘
│ HTTPS / REST API
┌─────────────────────▼───────────────────────────────────┐
│ Express.js API │
│ │
│ ┌──────────────────────────────────────────────┐ │
│ │ Auth Routes │ Task Routes │ Goal Routes │ │
│ │ Rate Limiter │ Validators │ Middleware │ │
│ └──────────────────────────────────────────────┘ │
│ │
│ ┌─────────────┐ ┌──────────┐ ┌──────────────┐ │
│ │ Prisma ORM │ │ ioredis │ │ OpenAI API │ │
│ └──────┬──────┘ └────┬─────┘ └──────────────┘ │
│ │ │ │
│ ┌──────▼──────┐ ┌────▼─────┐ ┌──────────────┐ │
│ │ PostgreSQL │ │ Redis │ │ node-cron │ │
│ │ (Prisma) │ │ Sessions │ │ Scheduler │ │
│ └─────────────┘ └──────────┘ └──────────────┘ │
│ │
│ ┌──────────────────────────────────────────────┐ │
│ │ Google OAuth │ Resend Emails │ bcrypt │ │
│ └──────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────┘
│
┌───────▼────────┐
│ Docker │
│ Container │
│ (Render.com) │
└────────────────┘
Make sure you have the following installed:
- Node.js v20+
- npm or yarn
- Docker (for running the backend locally)
- Expo CLI (
npm install -g expo-cli) - Expo Go on your mobile device, or an iOS/Android emulator
# Server
PORT=3000
NODE_ENV=development
# Database
DATABASE_URL=postgresql://user:password@localhost:5432/atomic_db
# Redis
REDIS_URL=redis://localhost:6379
# JWT
ACCESS_TOKEN_SECRET=your_access_token_secret
REFRESH_TOKEN_SECRET=your_refresh_token_secret
ACCESS_TOKEN_EXPIRY=15m
REFRESH_TOKEN_EXPIRY=7d
# Google OAuth
GOOGLE_CLIENT_ID=your_google_client_id
# OpenAI
OPENAI_API_KEY=your_openai_api_key
# Resend (Email)
RESEND_API_KEY=your_resend_api_key
FROM_EMAIL=noreply@yourdomain.comEXPO_PUBLIC_API_BASE_URL=http://localhost:3000git clone https://github.com/your-username/atomic.git
cd atomiccd backend
docker compose up --buildThis will spin up:
- The Express.js API server
- A PostgreSQL instance
- A Redis instance
cd backend
npx prisma migrate dev
npx prisma generatecd frontend
npm install
npx expo startScan the QR code with Expo Go, or press i for iOS simulator / a for Android emulator.
All endpoints are prefixed with /api/auth or /api as appropriate. Protected routes require a valid Bearer access token in the Authorization header.
| Method | Endpoint | Auth Required | Description |
|---|---|---|---|
| POST | /signup |
No | Register a new user |
| POST | /login |
No | Log in with email & password |
| POST | /auth/google |
No | Log in or register via Google OAuth |
| POST | /logout |
Yes | Invalidate session and clear tokens |
| GET | /me |
Yes | Get the authenticated user's profile |
| POST | /forgot-password |
No | Send OTP reset code to email |
| POST | /reset-password |
No | Reset password using OTP |
| POST | /refresh |
No (uses refresh token) | Rotate and issue new token pair |
| POST | /register-push-token |
Yes | Save device push notification token |
| Method | Endpoint | Auth Required | Description |
|---|---|---|---|
| GET | / |
Yes | Fetch all tasks for the user |
| POST | / |
Yes | Create a new task |
| PATCH | /:id |
Yes | Update an existing task |
| DELETE | /:id |
Yes | Delete a task |
| PATCH | /:id/complete |
Yes | Mark a task as completed |
| Method | Endpoint | Auth Required | Description |
|---|---|---|---|
| GET | / |
Yes | Fetch all goals for the user |
| POST | / |
Yes | Create a new goal |
| PATCH | /:id |
Yes | Update a goal |
| DELETE | /:id |
Yes | Delete a goal |
| Method | Endpoint | Auth Required | Description |
|---|---|---|---|
| GET | /weekly |
Yes | Get AI-generated weekly insight |
| GET | /monthly |
Yes | Get AI-generated monthly insight |
Atomic uses a dual-token authentication strategy with device-scoped session management backed by Redis.
1. User logs in → server issues:
- Short-lived Access Token (15 min) → stored in Zustand (memory)
- Long-lived Refresh Token (7 days) → stored in Expo SecureStore
2. Each API request attaches the Access Token as a Bearer header.
3. On 401 (token expired):
- Client sends the Refresh Token to /api/auth/refresh
- Server validates the token against the Redis session
- If valid, issues a new Access + Refresh token pair (rotation)
- Old session is invalidated immediately (prevents reuse attacks)
4. On logout:
- Redis session is deleted
- SecureStore is cleared
- Zustand state is reset
5. On app restart:
- hydrateAuth() reads Refresh Token from SecureStore
- Calls /refresh to restore the session silently
The insights engine is powered by OpenAI's GPT models. Here is how it works:
- A
node-cronjob runs on a configurable schedule (e.g. every Sunday evening and on the first of each month) - The job queries the database for each user's task completion data over the relevant window (7 or 30 days)
- Aggregated stats (completion rate, categories worked on, streaks, busiest days) are structured into a prompt
- The prompt is sent to the OpenAI Chat Completions API
- The resulting natural-language insight is saved to the database and surfaced in the app
- Users can also trigger an on-demand insight refresh from within the app
Example insight output:
"This week you completed 14 out of 18 tasks — a strong 78% rate. Your most productive day was Wednesday, where you knocked out 5 tasks. Health tasks saw the most consistency, but your Work category had 3 overdue items by Friday. Try front-loading work tasks earlier in the week to keep that streak going."
Atomic uses Expo's push notification service to send timely reminders and weekly insight digests.
- On login, the device's Expo push token is registered with the backend
- Tokens are stored per-user and per-platform (iOS / Android) in the
push_tokenstable node-cronjobs trigger batch notification sends at scheduled times- Notifications deep-link back into the relevant screen in the app
- Habit streaks and visualised streak calendar
- Weekly insight email digest via Resend
- Onboarding flow with personalisation questions
- Social accountability features (share goals with a friend)
- Widget support for iOS and Android home screen
- Offline mode with background sync
- Dark mode support
Contributions, issues, and feature requests are welcome! Please follow these steps:
- Fork the repository
- Create a feature branch:
git checkout -b feature/your-feature-name - Commit your changes:
git commit -m 'feat: add some feature' - Push to the branch:
git push origin feature/your-feature-name - Open a Pull Request
Please make sure your code follows the existing patterns and that any new API routes are covered by validation middleware.
This project is licensed under the MIT License.
Built with ☕ and a lot of habit-tracking