Reverse engineering the Costa App