Your Lovable app might be showing everyone's data — one setting fixes it

The short answer

Row Level Security (RLS) is a rule attached to each database table that decides, row by row, who can see or change what. Without it, anyone who can reach the table can read all of it. With it, a…

What it is: a per-table rule for which rows each user can see or change

Why vibe coders need it: your public database key relies on it

RLS on, no policy yet: nobody can read the table through the API

The usual policy: "users can see rows where the owner is them"

Ask your AI tool this, word for word

"List every table in my database, whether RLS is enabled on it, and every policy on it in plain English. Flag any table with RLS off, any policy that uses true on private data, and any view." Then…