A mobile app can request a Coinvay checkout through its own backend and open the hosted payment flow. Keep merchant API keys out of the app and grant access only after your backend verifies payment for the saved order.
Do not treat the app as a secret vault
An installed application can be inspected, modified or run on an untrusted device. Embedding a merchant bearer key in React Native code, native resources or a remote configuration file exposes the account to misuse. Instead, let the app send an authenticated product selection to your backend. The server calculates the price, creates the invoice and saves the mapping between customer, product and payment attempt.
Plan the return journey
For example, a companion app selling a business service can open a 30.00 USD invoice in the system browser and provide a return link to the order screen. The return link is a navigation convenience. It must not unlock the service by itself. Wallet-to-browser-to-app handoffs differ across mobile environments, so test manual QR or address instructions, installed wallets and the customer returning before confirmation. Keep a recognizable order reference visible throughout the journey.
Separate payment logic from platform eligibility
After verified settlement, your server updates the customer’s entitlement and the app refreshes it through its normal authenticated API. The React Native source kit is a starting point and needs hosting, credentials, durable storage and deployment. Review the current distribution platform’s rules for the particular goods or services you sell; availability of a web checkout does not establish permission for every in-app purchase category. Test cancellation, unavailable wallets and interrupted sessions before launch.
Practical checklist
- Create invoices through a backend authenticated to your own customer account.
- Use server-owned prices and check entitlements after returning to the app.
- Verify current app-store requirements and test the exact mobile wallet journey you support.
Common questions
Can I use a deep link as evidence of payment?+
No. A deep link can be opened without a successful transfer. The backend must verify the invoice and update access independently.
Does the mobile kit include a hosted production backend?+
No. It provides source for integration. Your team configures, deploys and operates the backend and the application-specific entitlement system.
Sources and further reading
Primary references and Coinvay product documentation. Check the linked pages for current details.
AI-assisted drafting, published by Coinvay. Examples are illustrative. Read our editorial approach.