XZum – Messaging and Video Meeting Full App With Firebase Backend

✨ Key Features

• Realtime Chat: 1:1 and group conversations with typing indicators, read receipts, message reactions, and replies/threads.
• Voice & Video Meetings: WebRTC calls, group rooms, screen share (web), mute/hand-raise, and dynamic quality control.
• File & Media Sharing: Photos, videos, voice notes, documents; upload progress and link previews.
• Presence & Status: Online/last-seen, custom status, and “in call” indicators.
• Search & Message Tools: Global search, message pinning, star/saved items, and per-chat media gallery.
• Push Notifications: FCM notifications for new messages, calls, and mentions; background call invites.
• Security & Privacy: Firebase rules, token-based auth, optional end-to-end encryption hooks for messages/calls.
• Moderation: Block/report users, remove messages, invite links, member roles (owner/mod/member).
• Admin Panel: User & room management, feature flags, analytics counters, and broadcast announcements.
• Localization: Multi-language UI, RTL support, and time-zone aware timestamps.
• Extensibility: Webhooks/cloud functions, storage adapters, and theming for white-label apps.

⚙️ Technical Stack

• Frontend (Mobile): Flutter 3.x (Android/iOS) with Provider/Bloc or Riverpod state management.
• Frontend (Web, optional): React 18 (Vite) or Flutter Web for browser-based chat and meetings.
• Backend: Firebase (Authentication, Firestore/Realtime DB, Cloud Storage, Cloud Functions, FCM).
• Calls: WebRTC (via plugin/SDK) with STUN/TURN configuration; dynamic bitrate and device switching.
• Auth: Email/password, phone OTP, and social providers (Google/Apple/Facebook) via Firebase Auth.
• DevOps: Firebase Hosting (web), Google Cloud for functions; CI-friendly build scripts.
• Server Requirements (if using your own TURN): VPS with coturn, ports UDP/TCP open, TLS certificates.

🧩 Installation Guide

1. Firebase Project: Create a Firebase project; enable Auth, Firestore (or Realtime DB), Storage, and Cloud Messaging. Add iOS/Android/Web apps.
2. Security Rules: Set Firestore/Storage rules (read/write by auth, per-room membership). Deploy rules from the provided templates.
3. Config App: Paste google-services.json (Android) and GoogleService-Info.plist (iOS). For web, set Firebase config in .env.
4. Push Setup: Upload APNs keys (iOS VoIP notifications if used), set FCM credentials, and test notifications.
5. Calling (WebRTC): Provide STUN servers; optionally deploy a TURN server (coturn) and add credentials to app config.
6. Build Mobile: Install Flutter SDK → flutter pub get → flutter run (dev) or flutter build apk/ipa.
7. Build Web (optional): npm install → npm run build (or Flutter Web build) → deploy to Firebase Hosting/GCP.
8. Cloud Functions (optional): Deploy functions for moderation, call invites, and housekeeping (firebase deploy --only functions).
9. Branding: Update app name, icons, theme colors, and splash screens; set dynamic links (optional).

📦 Deliverables

• Flutter mobile source (Android/iOS) and optional React/Flutter Web client.
• Firebase Cloud Functions (moderation, notifications, utilities).
• Firestore/Storage rules templates and sample indexes.
• Call engine integration (WebRTC) with configuration examples.
• Admin panel (basic) and localization files.
• Env samples, build scripts, and quick-start documentation.

📱 Supported Platforms

• Android: Android 7.0+ (SDK 24+)
• iOS: iOS 13+ (Xcode build required)
• Web (optional): Chrome, Firefox, Safari, Edge (current versions)
• Admin/Hosting: Firebase Console, Firebase Hosting/GCP (or your own host for TURN)

🧠 Notes

• License: Distributed under the GPL to enable lawful use, study, modification, and redistribution consistent with GPL terms.
• Customization Tips: Keep signaling and call logic modular; inject STUN/TURN via config; enable feature flags for beta features (screen share, reactions).
• Security: Enforce Firebase auth checks in rules; validate file types; rotate API keys; consider E2EE for messages/calls where feasible.
• Privacy & Compliance: Provide Terms/Privacy; configure data retention and user deletion to align with GDPR/CCPA.
• Performance: Use pagination and lazy media loading; thumbnail images; leverage Firestore indexes; configure adaptive bitrate for calls.
• SEO Assurance: Public marketing/landing pages include meta tags and schema hooks; app/private areas remain noindex.

👨‍💻 Original Developer Credit

We acknowledge the original developer and marketplace publisher as the authoritative source for XZum’s concept and roadmap.
For provenance and official updates, please refer to the original listing on
CodeCanyon (or the developer’s site).

🔒 Disclaimer

This is a GPL redistribution intended for learning, testing, and compliant use under the GPL. We are not the original authors and do not claim endorsement or affiliation.
Trademarks belong to their respective owners. Before production, verify third-party SDK licenses (WebRTC plugins, icons), set secure Firebase rules, and conduct security/performance reviews.