Ping Link
Consumer Privacy Tech · Voice-over-WhatsApp
Customer Success · Case Study

Built and Launched in Exactly 2 Hours — At a Global Hackathon

Ping Link went from a blank canvas to a live, working product in exactly two hours at the Lovable Solution Partner Hackathon — a privacy-first way to reach anyone by voice from a QR code, with neither side's phone number ever exposed. Built on Lovable, powered by Infobip.

  • Arino Core
  • Built on Lovable
  • Infobip
  • WhatsApp Business Platform
  • Cloudflare WebRTC
  • 2-Hour Build
Watch: from blank canvas to live product, in exactly two hours.
Ping Link built and shipped in 2 hours at the Lovable Solution Partner Hackathon.
01 — Overview

A privacy-first way to be reached by voice, from a QR code

Ping Link lets anyone be reached by voice from a physical QR code — a sticker on a windscreen, a badge, a door, a parcel — without either party's phone number ever being exposed. A visitor scans, the owner gets a WhatsApp notification, and one tap either opens a live call or takes a voicemail that deletes itself.

The entire product was conceived, designed, built and launched inside a single two-hour window at the global Lovable Solution Partner Hackathon. One team, a blank Lovable project, and a live audience watching the clock — with no shortcuts taken on authentication, privacy handling, voice infrastructure or billing.

The constraint is the story. Unlike the slow-burn enterprise rollouts in our other case studies, Ping Link is a demonstration of what Arino One can ship on Lovable and Infobip under real time pressure: a complete, working, production- shaped product in the time most teams spend scoping one.

02 — Challenge

What had to be solved in two hours

01

A two-hour deadline

No second day, no extension — design, build, and ship inside a single hackathon window.

02

A live, global audience

Hosted on Zoom for 200+ Lovable partners worldwide, with the result demoed live at the end.

03

Privacy by construction, not by policy

Letting a stranger call someone without either party's phone number ever being exposed, by design.

04

Real infrastructure, not a mockup

A working WhatsApp OTP login, live voice bridging, and billing — not a clickable prototype.

05

Zero pre-built scaffolding

Starting from a blank Lovable project, with no existing template to lean on.

03 — Solution

A complete product, shipped end to end

WhatsApp OTP Login

Owners verify the number that will receive call notifications via Infobip WhatsApp OTP — no separate password system.

QR-Triggered Call Requests

A visitor scan creates a call request and triggers an Infobip WhatsApp template notification instantly.

Quick Reply Accept/Voicemail

Native WhatsApp Quick Reply buttons let the owner respond in one tap, no app switch required.

Cloudflare WebRTC Voice Bridge

A dedicated Cloudflare Workers + Durable Objects deployment bridges accepted calls peer-to-peer.

Self-Expiring Voicemail

Declined or missed calls record a voicemail that is hard-deleted 24 hours later, with no exceptions.

Usage-Based Billing

Five free calls, then a low per-call rate drawn from Stripe-purchased credit packs.

Admin-Configurable Infobip Credentials

Base URL, API key and webhook secret are encrypted, admin-editable, never hardcoded.

Built Entirely on Lovable

Every layer of the product — owner dashboard, visitor flow, admin panel — shipped from Lovable.

04 — Privacy by Design

Privacy engineered into the flow itself

Every privacy decision was made at build time, inside the same two-hour window: what is never collected, what is never shown, and what deletes itself automatically. Nothing was deferred to a settings page or a policy document.

  • No phone number ever exposed to either party
  • Owner identity verified once via WhatsApp OTP
  • Visitor requires zero account, login, or personal data
  • Voicemail recordings hard-deleted after 24 hours, no exceptions
  • Infobip credentials encrypted at rest, never hardcoded
  • QR codes are revocable and capped per account

Ping Link's privacy model isn't a policy layered on afterward — no phone number is ever readable by the other party at any point in the flow, by construction.

05 — How It Works

From scan to conversation

  1. Owner sets up

    Owner verifies their number via WhatsApp OTP and creates a downloadable QR code for a physical location.

  2. Visitor scans

    A visitor scans the code and lands on a mobile-first page — no login, no data collected.

  3. Owner is notified

    Infobip sends a WhatsApp template naming the QR code, with Accept and Voicemail Quick Reply buttons.

  4. Accept — live call

    Both sides connect over a dedicated Cloudflare WebRTC bridge, patched in seconds.

  5. Decline — voicemail

    The visitor hears the owner's greeting and leaves a message that self-deletes in 24 hours.

06 — By the Numbers

What two hours produced

2 Hours
From blank project to live product
1 Team
Design and engineering, one hackathon window
100%
Built on Lovable
Infobip
Powered messaging & OTP
Cloudflare
Real-time voice infrastructure
Privacy-First
By design, not by policy
07 — Technology Stack

What Ping Link runs on

Ping LinkProduct
LovableBuilt on
InfobipWhatsApp & Messaging
WhatsApp Business PlatformChannel
Cloudflare WorkersReal-time Voice
StripeBilling
08 — Trust & Operations

How Ping Link is built and operated

  • Built on LovablePing Link is developed and deployed on Lovable, with managed builds and release control.
  • Encrypted credentialsInfobip and Stripe credentials are encrypted at rest and never hardcoded in the codebase.
  • Signed, time-limited accessVoice-bridge sessions and voicemail links use short-lived, single-use signed tokens.
  • Idempotent, verified webhooksEvery inbound Infobip and Stripe webhook is signature-verified and safe against retries.
  • 24-hour hard deletionVoicemail recordings are permanently deleted after 24 hours, with no retention exception.
  • Row-level security throughoutEvery database table enforces row-level access policies by default.

This page is maintained by Arino One and describes the controls in place for Ping Link. It is not an independent audit, certification or security attestation.

09 — What This Demonstrates

What two hours actually proves

Ping Link is a new build, not a long-running deployment, so the honest story here is capability and speed rather than scale. What it demonstrates is that a complete, privacy-first consumer product — with a real channel, real voice infrastructure and real billing — can be designed, built and launched inside a single two-hour window on Lovable with Infobip properly integrated.

Every layer was genuinely functional when the clock stopped: OTP login, WhatsApp messaging and quick replies, the real-time voice bridge, voicemail capture with automatic deletion, Stripe billing and the admin tooling behind it. None of it was a mockup, a stubbed screen or a demo path — the product worked end to end for anyone who scanned a code.

The most useful proof is the one you can check yourself. Ping Link is live: scan a code, request a call, and watch the whole flow run without either phone number ever being exposed.

Try it yourself

See what two hours can build

Ping Link is live — scan a code, request a call, and see the full flow yourself. If your team is exploring what's possible on Lovable with Infobip properly integrated, we'd love to talk.