Web App Developer - Next.js - Vercel

About Us
We run outbound systems for a coaching program, currently managing systems for 30 clients. We've built an internal web app clients use as a sales tracker, content analyzer, task hub, and message center for their AI setter. It's live, built in Next.js (App Router) and Supabase, and currently used internally — no self-serve auth yet. We need someone to review the codebase, add self-serve access, tighten security, and polish the rough edges so it's ready to hand to clients directly.

Compensation
If it opens up into ongoing work as the app and client base grow, that's a separate paid engagement at your rate.

Schedule
Outcome-based, not clock-in. You manage your own time, with enough overlap to sync with the founder on priorities and reviews.

Scope

Self-Serve Access

Add account creation, login, and access management via Supabase Auth (or propose a better fit and explain why)

Security

Review and lock down access control and data permissions (RLS policies, route protection, etc.)
Document what you tested, not just "it works"

Performance

Audit for slow queries, unnecessary re-renders, and structural issues
Fix what's reasonable within scope; flag bigger items for a follow-on phase

UI/UX

Clean up rough or unfinished UI so it reads as client-facing, not internal-tool-grade

You're a Fit If

You've shipped complete Next.js + Supabase apps, not just features inside someone else's codebase
You can implement and explain real security practices — auth, RLS, access control
You've audited and optimized an existing app before, not just built new features
You test your own work and can show your reasoning, not just a "done" checkbox
You can scope your own work without being told what to do next — this is a hard requirement, we don't micromanage

To Apply
Two things:

A live app you built — your role in it, and what it does.
In 3–4 sentences: how would you approach adding Supabase Auth to an app that currently has none, and what's the first thing you'd check for security risk?