Lovable + Supabase launch checklist for beginners
Prices and facts checked 2026-10-15 on each tool's official site. Plans change often, so confirm before you pay.
If your app stores anything (users, posts, uploads), it probably uses Supabase or Lovable's built-in Cloud backend. Run through this list before you share the link.
Security
- Row Level Security on every table with user data. Without it, anyone with your public key can read the table. Lovable's publish scan checks for RLS mistakes; read its findings.
- Storage buckets private unless the files are meant for everyone. Logos can be public; user uploads should not be.
- Only the anon (public) key in your front end. Never paste the service-role key into your app or chat.
- Turn on email confirmation for sign-ups if you don't want throwaway accounts.
Going live
- Publish, then open the live link in a private window and test sign-up, login and saving data as a brand-new user.
- If you host somewhere other than Lovable, add your
VITE_SUPABASE_URLand key in the host's environment settings and rebuild. - Add your live URL to Supabase Auth → URL configuration so login emails redirect to the right place.
Know your free limits
| Tool | Free | Paid (from) | Best for |
|---|---|---|---|
| Supabase | 50,000 monthly active users, 500 MB database, 1 GB file storage, 5 GB egress | Pro $25/mo (100K MAU, 8 GB disk per project, daily backups) | Database, login and file storage |
| Lovable Cloud | Free plan includes 20 Cloud credits a month | Included grants on Pro $25/mo | Built-in backend if you don't connect Supabase |
Free Supabase projects have no daily backups, so export important data or upgrade before real users depend on it.
After launch
Want to send welcome emails or post new sign-ups to a spreadsheet without code? Make has a free plan with 1,000 credits a month (most actions use 1 credit); Core starts at $9/mo billed yearly.
Some links are referral links; we may earn a commission at no extra cost to you. It never changes our recommendations.