A managed back end in a box — Postgres database, auth, storage, and edge functions — with a generous free tier, so vibe-coded apps get real infrastructure.
Pick this whenYou're graduating an app out of a vibe-coding platform's walled garden and want real Postgres you control — vs Lovable Cloud's zero-setup lock-in or Convex.
What makes it different
Row-level security (RLS) — table-level protection the course treats as non-negotiable
Real Postgres underneath — nothing proprietary to migrate off later
Edge functions keep API keys server-side, out of your front end
What it does
Hosts your database with row-level security (RLS) per table
Handles signup/login (email validation, OAuth) without you writing auth
Runs server-side edge functions so API keys stay off the front end
Migrates via SQL you paste into its editor (or CLI when working locally)
What it does not do
Common wrong expectationsDoesn't protect data unless RLS is actually enabled — real Lovable apps have leaked tables
Doesn't wire smoothly into Lovable anymore — Lovable pushes its own Cloud instead (BC2's live pivot)
Doesn't replace deployment — the app still needs hosting (Vercel etc.)
Where it sits in a stack
The back end for anything you graduate out of a vibe-coding platform: local dev with Claude Code + Supabase + Vercel is the course's 'serious' stack.
ShelfBackend, hosting & code
Our status · not-usingThe KB is static-file by design; no multi-user backend needed.
For your projectsIf the course site ever grows accounts/notes sync, this is the default choice; RLS discipline from BC2 applies to any future client build.
| Session | Coverage | Moment | What happened |
|---|
| Basecamp 2: Vibe Coding | demonstrated | 1:16:52 | Org/project creation, password, automatic RLS, project URL + publishable/service-role keys, SQL editor migration run creating profiles/projects/tasks tables — then abandoned for Lovable Cloud when wiring fought back |
| Session 19: Content Strategy Pipeline — the YouTube Growth Stack, Built by an Agent Team of Chats | demonstrated | | Database layer via MCP server; its jobs chat reported done first |
| Building a Mobile App with AI: React Native and Expo with Codex, One Screen at a Time, Clerk Login with Supabase Progress, and a Mascot That Makes It a Product | demonstrated | 0:17 | Backend; Clerk added as third-party auth |
| Day 2: ACR and DRA Thinking Frameworks, Connectors and Scheduled Tasks, the Image-to-Video Ad Pipeline, MoSCoW + 5 Whys, and Building LearnVault Back-End-First in Lovable | demonstrated | | Schema, RLS, auth |
| Vibe Coding for Non-Coders: Pain Point to MoSCoW to Stack, 'Use AI to Build AI' with Grok, and an Audio Note-Taker Built Live on Lovable + Supabase + OpenAI | demonstrated | | Table, bucket, edge-function secret |
| Community Session 1: Causa Claims — a Non-Coder's Five-Agent Construction-Claims Pipeline, the Gate as the Product, and What RAG Really Costs | explained | | Backend + pgvector store, ~$10/project |
| Office Hours III: Backing Up Claude Chats with Obsidian, Bridging Chat and Cowork, What Fable Is For, and the Context-Rot Problem | explained | | Portable database; lower lock-in risk |
| Founder Stack Ep03 with Shai Krishna: Why Wrappers Make AI Slop - CLAUDE.md as the Brain and DESIGN.md as the Art Direction, Founder-Led UGC with AI Avatars, Trial Reels, and Email Journeys | explained | 0:21:00 | 50k MAU free; 25 USD for 100k |
| Office Hours II: When to Pay for Vercel, Scraping Public Data for Paul's Gold-Pressure App, Audits as a Sales Hook, and Why Distribution Beats Building | mentioned | | The 'exposure' win for a marketing client |
| Office Hours V: Paul's Compliance Scanner Meets Firecrawl, Painkillers vs Vitamins, What a Real Second Brain Costs, and Why Selling Got Harder | mentioned | | Paul's backend / edge proxy |
| Office Hours XI: rolecompass.ai's Launch, Redesigning a Client Site Without Losing Its SEO, the Hermes Harness Tour, and Turning a Workflow into a Skill | mentioned | | rolecompass.ai backend |
| Session 4: How to Build Micro Prototypes | mentioned | 1:58:11 | The database you'd configure locally when a complex app leaves Lovable Cloud — deferred to the build phase |
| Session 10: Building on Cursor & connect with AI workflows | mentioned | 1:11:06 | The beginner-friendly database alternative (also handles auth) |
| Session 12: Claude Code — Design & Building Agents (App-First: a Game, a GTM Board, and a Live Deploy) | mentioned | 2:36:16 | Named (with MongoDB) as the database path deferred to a future technical session |
| Session 14: Claude Code — Advanced Workflows | mentioned | 0:21:30 | Listed among platforms whose CLIs plug into Claude Code |
| Session 16: GitHub 101 — Fundamentals & Essentials | mentioned | 0:24:10 | In the multi-cloud example (database piece); also surfaced in Sayed's escape-room variant (Supabase auth on the membership door, 2:24:38) |
| Session 18: Nano Banana + Veo 3.1 Multi-Shot Video — UGC Genie, an AI-UGC Product Built Live | mentioned | | Named (with MongoDB) as the missing persistence layer — reload currently loses state |
| Session 24: Building a Marketing OS — Sector-Agnostic Command Center on an Open-Source Stack | mentioned | | Spotted configured in a cohort member's parallel build ('that's crazy that Supabase is also set up') |
| Session 30: C3 Town Hall — Four Cohort Products Under the Knife, Outcome Selling, and the Rest of the Programme | mentioned | | PERI's backend. |
| Build Your 2026 Marketing and Distribution Engine: the GTM Loop, Painful-Reachable Markets, the Evidence Ladder, the Six-Part Offer, Create vs Capture Demand, Channel Mapping, and Three Playbooks | mentioned | 1:37 | |
| Adding Beautiful Animations to Your App: Splash and Onboarding, State-Driven Micro-Interactions, an AI Layer That Never Blocks, PostHog Funnels and Feature Flags, and the Road to the Stores | mentioned | 0:12 | Progress storage; security of data |
| Bonus + Demo Day: Self-Hosting n8n with Docker (Cloud vs Local Decision, the n8n_data Volume, Credentials, ngrok) and How the Hackathon Was Judged | mentioned | | Via Supabase node or Postgres node; TripTally backend |
| Day 10: Principles for Building Agents — Three Levels of AI, the 7-Question Workflow-vs-Agent Test, Goldilocks Scope, Agent Prompting, and Tool Design | mentioned | | Backend for a business analytics tool |
| Day 14: Graduation — Skills, Systems, Dollars: the Niche Framework, the First-Dollar Roadmap, Pricing, Moats, and What Happens Next | mentioned | | Database behind SaaS examples |
| Julius AI: Notebook-Style Analysis with Database Connectors, Self-Correcting Code, and the Four-Tool Recap | mentioned | | Connector |
| AI Masterclass: Exploring Antigravity 2 — Four Products, Four Slash Commands, and Two Live Builds | mentioned | | 'Antigravity can handle Supabase — give it the information' (as-heard 'Superbase') |
| AI Sprint: Vibe Coding to Production — Day 1 (Deployment, DNS, and the Five Locks) | mentioned | | Named as the Postgres-managed alternative; 'higher, costlier side' vs Atlas in his view |
| AI Sprint: Windsurf & Devin — Day 1 (Vibe to Agentic: GitHub as Pizza, the Four Spec Concerns, and the IDE Lineage) | mentioned | | Auth via edge functions — 'don't ask me what an edge function is, for now just take it' |
Supabase