■ Supabase Development · Production-Hardening · Lovable Graduation

    Our default BaaS choice — and the team you call when the prototype meets production load.

    We don't just build on Supabase — we teach it. Live sessions for practising CAs on Lovable + Supabase + Vercel + Cloudflare + Make.com. We train the same audience we sell to.

    ANONYMISED SCHEMA · CA COMPLIANCE CALENDARauth.usersid (uuid)emailrole (admin/team/client)clientsid (uuid)nameowner_id → usersRLS: per ownerteam_assignmentsteam_id → usersclient_id → clientsPK (team_id, client_id)submissionsid (uuid)client_id → clientsdeadline_idstatus, submitted_atdeadlines (seeded)id, code (GSTR-3B, ITR…)due_at (calc per client)frequency
    Ritesh Agarwal, lead architect at Appycodes

    ■ Talk to the lead architect

    Lovable / Bolt / v0 prototype that needs to graduate to production? Bring it directly to Ritesh — no SDR, no qualification call.

    Ritesh Agarwal · Lead Architect, Appycodes · LinkedIn

    ■ What you get

    Six engagement shapes.

    We don't ship demo-grade Supabase. Each engagement below is a definition-of-done that includes the unsexy production work most prototypes skip.

    01

    Production-hardening AI prototypes

    Lovable / Bolt / Cursor / v0 apps moved from 'works on the demo' to 'works under real load.' RLS on every table, indexes on join columns, backups, env separation, audit columns, soft deletes.

    02

    Multi-role auth design

    Admin / Team / Client. Parent / Child (family billing on youth sports). Vendor / Buyer. RLS policies that enforce the model at the database, not in app code that someone will eventually forget.

    03

    Stripe + Supabase + Resend

    Default starter stack. Webhook → service-role-key → database write done correctly. Idempotency, signature verification, dead-letter handling.

    04

    Database design & migration

    When to use Postgres views, when to use Edge Functions, when to reach for triggers, when to skip them and put it in app code. Opinions backed by production scars.

    05

    Supabase + Next.js

    Server actions, SSR auth, cookie-based session handling. The patterns that don't break the moment you turn on caching.

    06

    Supabase + React Native / Expo

    Mobile patterns — offline-first writes, secure storage of auth tokens, realtime channels where the product actually needs them.

    ▼ Prototype-to-Production Checklist

    What ships in a prototype. What ships in production.

    Twelve items, two columns. The middle column is what a typical Lovable / Bolt build has on day one. The right is what we add before it sees real users.

    Item
    Prototype
    Production
    Tables created
    Basic auth working
    Working UI
    RLS policies on every table
    Indexes on join + lookup columns
    Backup strategy + restore tested
    Environment separation (dev/staging/prod)
    Webhook secrets in env, not source
    Error logging + alerting
    Rate limiting on Edge Functions
    Soft deletes where data matters
    Audit columns (created_by, updated_at)

    ■ Evidence

    Three engagements. Each one a different shape of Supabase work.

    Multi-role RLS · production

    CA Compliance Calendar

    Built for an Indian CA firm: a compliance calendar tracking GST, ROC, and Income Tax deadlines across multiple clients and team members. Multi-role auth (Admin / Team / Client) enforced via Supabase Row Level Security policies.

    Email reminders via Resend, WhatsApp via wa.me click-to-send (no paid API). Client portal lets clients mark their own submissions. Designed for assembly in Lovable, with a sequenced build order: database + auth → calendar engine → reminders → client portal. Real RLS work, real production constraints, real-world Indian statutory deadline data seeded.

    -- RLS: clients see only their own submissions
    create policy "clients_own_submissions"
    on submissions for select
    using (auth.uid() = client_id);
    
    -- team members see their assigned clients
    create policy "team_assigned_clients"
    on submissions for select
    using (
      exists (
        select 1 from team_assignments
        where team_assignments.team_id = auth.uid()
          and team_assignments.client_id = submissions.client_id
      )
    );

    Teaching · authority

    Live training for Chartered Accountants

    We ran a live session for practising CAs on AI-assisted app building — stack: Lovable + Supabase + Vercel + Cloudflare + Make.com. Covered creating Supabase tables, connecting from Lovable, setting up Row Level Security (critical for professionals handling client data), user signup/data persistence/retrieval.

    Also covered when Supabase is the right call vs Google Sheets as a 'backend lite.' We train the same audience we sell to. That's an authority signal that costs nothing to add to the page but most agencies can't make.

    # Stack we teach
    - Lovable (UI assembly)
    - Supabase (DB + auth + storage)
    - Vercel (deploy)
    - Cloudflare (DNS, R2, WAF)
    - Make.com (automations)

    Public engineering content

    The Jio-DNS-Supabase blog post

    We have a published blog post explaining why Jio's ISP-level DNS blocks Supabase connections (affecting Lovable users in India specifically), and how to work around it with alternative DNS servers.

    One of our most useful pieces of public engineering content — and it speaks directly to the Lovable user trying to ship a real app from India.

    # workaround
    - Set DNS to 1.1.1.1 / 8.8.8.8
    - Or use a hosts file override
    - Or use Cloudflare WARP
    
    # blog: /blog/fix-lovable-app-jio-internet-supabase-dns/

    Pairs naturally with AI app completion (the Lovable graduation engagement), SaaS web app development, Stripe billing, and internal tools where RLS and multi-role auth carry the access model.

    ■ Good fit if

    • Founders graduating from Lovable / Bolt / v0 / Cursor prototypes to production
    • Apps handling client data where RLS is non-negotiable (accounting, legal, healthcare-adjacent)
    • Multi-role products — admin/team/client, parent/child, vendor/buyer
    • Teams who tried Firebase and want Postgres semantics back

    ■ Probably not a fit

    • Apps that need full backend ownership and don't want a managed BaaS
    • Workloads requiring shared dedicated DB resources for cost reasons at scale (move to self-hosted Postgres)
    • Pure backend services with no auth, storage, or realtime — plain Postgres is fine

    ■ Supabase surface we ship on

    Postgres semantics + the managed parts that matter.

    Database
    Postgres · RLS policies · functions / triggers · views · pg_cron
    Auth
    Supabase Auth · email + OAuth · custom claims · server-side session
    Compute
    Edge Functions · Deno runtime · cron schedules
    Storage
    Supabase Storage · bucket policies · signed URLs
    Realtime
    Supabase Realtime · channels · broadcast · presence
    Frontend
    Next.js · React · React Native / Expo · Lovable graduation

    ■ If the prototype works but won't survive load

    Bring the Lovable URL. We'll have a hardening plan inside a week.

    Talk to a Supabase engineer

    Other services

    We build a lot more than this.

    Explore the rest of what we build.

    SaaS Web App Development

    MVP to production builds, multi-tenant, billing, AI features.

    Learn more

    React Native App Development

    iOS + Android in one codebase. Push, offline, OTA updates.

    Learn more

    Web App to Native Mobile App

    Convert your Lovable / Claude / Bolt web app to React Native or Flutter — backend reused.

    Learn more

    Technical SEO for SaaS

    Prerender, schema, Core Web Vitals — engineering-led SEO.

    Learn more

    Custom WordPress Development

    B2B marketplaces, membership sites, headless WordPress.

    Learn more

    Shopify Development Services

    Custom themes, migration to Shopify, Shopify apps, supplier-feed automation.

    Learn more

    Custom WooCommerce Development

    B2B wholesale, high-SKU catalogues, WooCommerce Subscriptions, Shopify-to-Woo migrations.

    Learn more

    Maintenance & Support

    Post-launch stability, security, monthly improvements.

    Learn more

    AI App Completion

    Take an AI-built prototype to a production-ready product.

    Learn more

    AI Prototype to Native App

    Convert AI-built web prototypes into native mobile apps.

    Learn more

    App Store Launch

    Submit, configure and optimise for App Store + Play Store.

    Learn more

    Tech Stack Migration

    Modernise legacy systems with zero-downtime migrations.

    Learn more

    White Label Development

    Engineering capacity for agencies, under your brand.

    Learn more

    Startup Launch Support

    From idea to live product — design, build, launch, growth.

    Learn more

    API & Integration

    Custom REST/GraphQL APIs and third-party integrations.

    Learn more

    AI SaaS Product Development

    Multi-tenant AI SaaS with subscriptions and admin dashboards.

    Learn more

    B2B Marketplace Development

    Marketplaces with credit, KYC, and trust infrastructure baked in.

    Learn more

    Custom LMS Development

    Customised Moodle deployments and bespoke Moodle mobile apps.

    Learn more

    Membership & WooCommerce Subscriptions

    Subscription recovery, dunning, migrations, combinatorial billing matrices.

    Learn more

    Shopify Migration

    Magento, WordPress, BigCommerce → Shopify. Redirect-engineering first.

    Learn more

    WordPress Security & Malware Removal

    Forensic incident response — Magecart, backdoors, DDoS, GDPR Art. 33.

    Learn more

    Laravel Development & Modernisation

    Four production Laravel platforms. ERPs, contracts, tendering.

    Learn more

    Stripe Billing Engineering

    Webhooks, metering, proration, dunning, multi-currency, reconciliation.

    Learn more

    Cloudflare Edge Engineering

    Workers, R2, WAF, Bulk Redirects. The full surface, not just the orange cloud.

    Learn more

    Internal Tools & Admin Dashboards

    Tender automation, contract operations, compliance calendars, calculators.

    Learn more

    Headless WordPress & WooCommerce

    WP + Next.js with preview, ISR, auth handoff, media pipeline, search.

    Learn more

    Sanity CMS Development

    Schema-first builds, multilingual setups, migrations from WP / Contentful / Strapi.

    Learn more

    Vue.js & Nuxt Development

    Four production Vue platforms. Vue + Laravel as the default pairing.

    Learn more

    WordPress Performance Optimisation

    nginx, PHP-FPM, slow-query analysis, plugin audit. Diagnostic engineering, not plugin installs.

    Learn more

    Custom WordPress Plugin Development

    Surgical plugin work — namespaced, idempotent, version-controlled. Not functions.php.

    Learn more

    Knowledge Base & Community Platforms

    KB + forum + adjacent surfaces. Search, version-aware routing, role-based visibility.

    Learn more

    Event Ticketing Platforms

    Multi-day festivals, white-label venue groups, offline-capable door-staff apps.

    Learn more

    AI Chatbot, RAG & Agent

    Production RAG with chunking, hybrid retrieval, reranking, grounding, eval.

    Learn more

    Workflow Automation

    Make.com, n8n, Zapier, and custom Node workers — chosen by volume.

    Learn more

    Programmatic SEO Engineering

    Calculator- and location-driven SEO surfaces with real data and SSR.

    Learn more