Generative AI and secure API architecture
Jooya — Persian AI search engine
Challenge
Existing Persian chatbots answer without citing sources, so a user cannot judge whether the answer is right. The second problem was security: an API key cannot ship inside an Android package, because anyone can open the APK and extract it.
Solution
A two-part architecture: a static Next.js client packaged as an Android APK holding no key at all, plus a proxy server that keeps the key, performs the live web search and streams the answer back. Every answer ships with its source list.
Result
The API key never reaches a user's device, and answers always carry their sources — the distinction that separates Jooya from a plain chatbot.





