Full Stack Engineer

Paid security review: Next.js + Supabase app (half a day to one day, fixed price, remote, UK)
I'm the founder of Autism Huddle, a UK site that helps autistic people and families find local services, events and NHS waiting times. The app is built and running privately ahead of a small closed beta. I'm looking for an experienced developer to check it before the first testers sign in.
Stack: Next.js 16 (App Router) on Vercel, Supabase (Postgres, Row Level Security, magic-link sign-in), Resend. Separate staging and production projects, both in London. No payments yet; personal data is limited to email addresses.
What I'd like checked:
• Row Level Security policies, grants and database functions, and that production matches the migrations
• Secret key handling and the sign-in set-up
• How migrations reach staging and production safely
• Anything a solo founder building with an AI assistant is likely to have missed
• Brief UK GDPR pointers: retention periods and what the privacy notice must cover
I've already done a first-pass review and have a short review pack ready, so this is a focused check, not a rebuild.
Deliverable: a short written report with must-fix items, should-fix-later items and a verdict, plus a 30-minute call to go through it.
To apply, please send:
1. A Supabase project you've built or reviewed, and how you tested its RLS policies
2. Your fixed price for half a day or one day
3. Your earliest availability
UK-based or familiar with UK GDPR preferred.

Work arrangement
Yes