diff --git a/clients/wearos/.gitignore b/clients/wearos/.gitignore
index 6788073..5e2bd65 100644
--- a/clients/wearos/.gitignore
+++ b/clients/wearos/.gitignore
@@ -9,3 +9,5 @@
 local.properties
 .watch_serial
 .kotlin/sessions
+profiles.d/*.sh
+!profiles.d/*.sh.example
diff --git a/clients/wearos/profiles.d/example-profile.sh.example b/clients/wearos/profiles.d/example-profile.sh.example
new file mode 100644
index 0000000..2bea907
--- /dev/null
+++ b/clients/wearos/profiles.d/example-profile.sh.example
@@ -0,0 +1,25 @@
+# Watch build profile template. Copy this file to <profile-name>.sh in the
+# same directory (the .sh files are gitignored). The profile name (the file
+# basename without .sh) is what you pass to ./run.sh, e.g.:
+#
+#     ./run.sh watch brummel-dev install
+#
+# Naming convention:
+#   <user>-<server>     e.g. brummel-dev, brummel-minerva, krey-minerva
+#   Profiles whose name ends in "-dev" are treated as development builds
+#   (launcher label "Doctate (Dev)" + red "DEV" badge in the UI). All other
+#   profiles render the production-clean UI.
+
+# Backend URL the watch talks to. Plain HTTP is fine on the LAN.
+SERVER_URL="http://minerva.lan:3000"
+
+# Plaintext api_key matching the slug in the server's users.toml.
+# Generate with: openssl rand -base64 24
+API_KEY="REPLACE_ME_WITH_PLAINTEXT_API_KEY"
+
+# Bash array of ADB serials (one per attached watch this profile may target).
+# Find a watch's serial with: ./run.sh devices
+# Brummel's watch can appear in multiple profiles; Krey's watch only in hers.
+ALLOWED_SERIALS=(
+    "adb-XXXXXXXX-yyyy._adb-tls-connect._tcp"
+)