ChaCha20Poly1305 is a great choice on mobile due to lack of AES hardware acceleration. It’s also available natively in Apple’s CryptoKit as well as Google’s BoringSSL. I used it for Photon’s encrypted cloud backup for these reasons.