[Xposed Framework Modules] RobbieTechie:
If by one login, you mean one email address for one account, it's already that way with every account. You could use that account on different devices but not at the same time. If you try to use the same account on multiple devices at the same time, their servers detect that and will make one of the apps on a 2nd device close and typically tells you that you are logged in somewhere else.

The xmpp chat portion could still work, but you would only see one side of the convrsation. The xmpp protocol is designed to allow multiple uses at the same time, the grindr app itself though is not.

Tokens(session tokens) only last for one hour on an Android device and a half hour on iPhone devices last I knew. Those tokens contain the features that control the app. A free user token might look something like this

eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9eyJmZWF0dXJlcyI6WyJDcmVhdGVWaWRlb0NhbGwiLCJWaWRlb0NhbGxEYWlseUZyZWUiXSwicHJvZmlsZUlkIjoiMDAwMDAwMDAwIiwicm9sZXMiOltdLCJleHBlcmltZW50cyI6eyJib29zdC1wcmljZS10ZXN0LXVzLWlvcy0yMDIzMDIiOiJ0aWVyLTgifSwiZXhwIjoxNDU2MzYzNTg3LCJmZWF0dXJlRmxhZ3MiOlsiYm9vc3QtYWxnby1yZXdyaXRlLTIwMjMiXX3vv71GOzUzPwoub1t9dUh/KQ==

and if it was decrypted it might look something like this

{"typ":"JWT","alg":"HS256"}{"features":["CreateVideoCall","VideoCallDailyFree"],"profileId":"000000000","roles":[],"experiments":{"boost-price-test-us-ios-202302":"tier-8"},"exp":1456363587,"featureFlags":["boost-algo-rewrite-2023"]}�F;53?

.o[}uH)

There is also a firebase token involved in the login, hence why people trying to use Shizuku on a non rooted phone cannot login. Those tokens typically last around a week but I may be wrong about the timing for those.

If you switch phones or log out and switch accounts you will have different tokens. The tokens are given by the server and control the features and access. In the case of the albums, you could literally close the app, clear the data which would clear the token on the phone and log in the with old account literally one minute later. If it's not paid any longer you won't have access to those albums. Grindr designs all that in that manner to dangle it in front of your face so they can get you to pay for access to your own data/info/etc.

The mod doesn't really spoof anything, it controls the methods within the classes in the app just like the tokens do, This is why things such as getting a block notification in your chat messages is possible. Normally the app would just delete the chat. That feature in the mod detects when you get a "block" type of message from the xmpp server and executes different code, so that you get a message in your chat to let you know, instead of making the message vanish and not know who blocked you. This is why the mod usually has to be updated when grindr puts out a new version of the app as variable names can be changed, added or removed, so those changes have to be dealt with. Sometimes it is extemely simple, sometimes it is more involved.

Grindr generates fake profiles on their servers and has been doing that since about 2018 when Kunlun Gaming bought them. There use to be a badge on the profiles on the grid of new users to show that they are new. They have since removed those badges on the grid and typically only show someone is new if you open that profile which prevents people from knowing they push a ton of new profiles. I can see this because I can see the api traffic, but I also have a desktop interface for Grindr written in javascript so I can watch as they generate profiles and see the profileId account numbers increase as the profiles are created. I've seen as many as 9000 new accounts made per hour and as little as 7000 depending on the load on their servers. I've also had people tell me they don't believe me which is fine, but I've watched it happen right in front of my face. Now that I've rambled enough, I will stop. I hope you both are doing good !!!