I need a purpose-built Android launcher that locks any tablet running Android 7 or higher into a true kiosk environment for a single, custom business app. The user must never see the home screen, status bar, recent-apps list, or system settings—only the approved application. Core requirements • Device Owner / LockTask-based launcher APK that auto-starts at boot. • Single-app mode only: once the approved package name is set, no other apps or navigation controls are reachable. • PIN-protected exit: the only way to unlock or reach system settings is by entering a security PIN. • Remote PIN updates: a simple, secure web portal (or REST endpoint I can hook into) must let me push a new PIN to any or all enrolled devices in bulk if the local code is forgotten or compromised. Management portal features • Dashboard listing all registered tablets with basic status (online/offline, last check-in, current PIN). • Ability to assign the allowed app package and push configuration changes over the air. • One-click bulk PIN change and remote reboot command. • HTTPS authentication (email/password is fine) and token-based API so I can integrate later with my own tools. Deliverables 1. Launcher APK and source (Java or Kotlin) ready for sideloading. 2. Web portal (Node, Django, or similar) with source and deployment instructions. 3. Setup guide covering Device Owner provisioning (adb, QR, or NFC) and portal installation on a small VPS. 4. Short video or screenshots proving lockdown, remote PIN change, and unlock flow. A functional prototype that demonstrates the full workflow is all I need for the first milestone; we can refine UI polish afterward. Familiarity with Android Enterprise APIs, LockTask mode, and basic web backend development will be essential.