Guides
The specific bugs that block AI-built apps at launch - what causes them, and exactly how to check for them yourself.
Can your subscribers find the way out? A cancel-path check for launch week →
A pricing page that sends people to account settings that don't exist. A trial that turns into $149 a month with no terms. "Money-back guaranteed" with no window. Six ways the exit breaks on launch-week products, and a 10-minute check.
Stars, user counts and logos: a trust check for your launch page →
A 5.0 badge next to a listing with no reviews. A rating that lives only in the page code. "Trusted by 10,000+" on launch week. Six trust claims buyers check against outside pages, and a 10-minute check for your own site.
Pricing page vs terms: six mismatches I keep finding on launch day →
Unlimited on the plan card and strict limits in the terms. A one-time pass the terms say renews. "Save 35%" that works out to 32%. Six mismatches between pricing pages and legal pages, and a 10-minute check for your own site.
Lovable Deep Scan vs a manual check: what the scan finds and what it can't see →
Lovable's scans read your code and database rules, for free. Here is what they catch well, why they can't see some problems, and seven things only a person with two accounts finds.
Lovable app audit before launch: what a person checks behind the login →
What a pre-launch audit of a Lovable app covers behind the login, what Lovable's free scans already catch and what they can't see, price, turnaround and a sample report.
Lovable app QA testing: a person checks your flows before users do →
Manual QA for Lovable apps: the flows customers use, regressions after the next AI edit, a monthly option for teams that ship often, and what two-minute automated audits can't reach.
Stripe test mode vs live mode: a 15-minute check before your first real payment →
Keys, prices, webhooks, payment links and the customer portal all exist twice in Stripe. Six checks that catch the half-switched setup: the key in your live JavaScript, live price IDs, the live webhook secret, test links, one real purchase, and the 4242 test.
Supabase RLS and the anon key: a 10-minute check without code →
The anon key is public by design, so RLS does all the work. Six checks you can run in the Supabase dashboard and two browser windows: key type, RLS switch, over-broad policies, the two-account test, logged-out requests, storage buckets.
What breaks in Lovable apps: data from 190 live apps →
An outside-in scan of 190 live Lovable-built apps: 94% send no CSP, 79% return 200 for missing pages, 67% have no enforcing DMARC, 3 ship an API key. Method, limits, and a 2-minute self-check for every number.
Lovable password reset email not arriving: 5 reasons and how to check →
Missing SPF/DKIM/DMARC, the shared Supabase dev sender, silent rate limits, a wrong Site URL, or content-level spam filtering - with exact steps to check each one.