AI Application Enhancement and Security Review

I am currently developing an AI-powered application built with Lovable, React and TypeScript.

A significant part of the application has already been developed, including a working AI chat feature and several interactive features. The application has not yet been launched publicly.

Because the application may process highly sensitive and private user-generated content, I am looking for an experienced developer to review the existing application and support the next development stages.

Important: Supabase has not yet been set up. User accounts and persistent conversation storage are planned as the next step.

Phase 1 – Code, Architecture & Security Review

The first task is to review the existing Lovable application, including:

- Overall code quality and architecture
- Frontend/backend separation
- API security
- API keys, secrets and environment variables
- Existing AI/LLM integration
- Potential security vulnerabilities or data leaks
- Production readiness
- Concrete recommendations for improvements

Deliverables: A clear written report identifying security or technical issues, prioritized recommendations for improvements, an assessment of current AI integration, and a review of Supabase architecture before implementation. At this stage, I do not want major changes to be made without prior approval.

Phase 2 – Supabase & User Accounts

After the initial review, the next stage may include:

- Supabase setup
- User registration and login
- Secure database architecture
- Secure storage of AI conversation histories
- Supabase Row Level Security (RLS)
- Strict isolation of data between users
- Delete individual conversations
- Delete complete conversation history
- Delete user account and associated personal data
- Prepare the architecture for a future Premium subscription

A separate privacy/data protection review covering Swiss data protection law and EU GDPR is also being conducted. The technical implementation should follow those requirements.

Phase 3 – AI/LLM Improvements

Experience with AI/LLM applications is highly desirable, particularly:

- OpenAI / other LLM APIs
- Prompt engineering and prompt architecture
- Conversation memory
- Context management
- Long conversation handling
- Safety guardrails
- LLM evaluation and testing
- Reliability of AI responses
- Cost and performance optimization

The psychological/professional content of the application will be reviewed separately by appropriate specialists.

Required Skills: Experience in several of the following areas is important:

Lovable React / TypeScript Supabase / PostgreSQL Row Level Security (RLS) Authentication and authorization Backend and API security OpenAI / LLM APIs Secure handling of sensitive user data Experience with subscription-based applications is a plus.

What fixed price would you charge for Phase 1 – the initial code, architecture and security review? Further details about the application will be shared privately with the selected developer. Initial budget for Phase 1: approximately €100–250. Further development, Supabase implementation and AI improvements will be discussed and contracted separately after the initial review.