About Ctrl+Z Therapy and how we test

Who it is for

People who built something with AI and got stuck: founders, makers and small teams who are not full-time programmers. That is why every case starts with what you would notice, not with the bug's technical name.

How we build each case

• Each case is a small demo built on purpose with one bug, fake users and fake data.
• Nothing is taken from a real person's app. The cases are common kinds of bugs, not reports of real incidents.
• Every page is labelled “Controlled demo · fake data”, and the code on screen is simplified.

How we test the fix

• For cases 003, 004, 005, 006, 007, 008, 009, 010, 011, 013, 015, 017, 021, 024, a scripted test sends the same requests to the demo before and after the fix. The tables show the results as they came out.
• When something was not part of the test, the table says “Not tested” instead of guessing.
• For cases 001 and 002, the before and after are shown in the demo video only. Those pages say “What the demo shows”, and you should test your own app before relying on them.
• Each page shows when its demo was built and when the page was last reviewed.

What we never do

• We don't scan or test other people's live apps without permission.
• We don't publish anything you send us without your explicit permission. You can choose to be named, stay anonymous or keep it private.
• A case file is not a security audit or a guarantee. It explains one kind of bug and how to check for it.

When you send in your app

We read every submission and reply with a diagnosis and next steps, then help fix it for free. No code knowledge or repo is needed to start. See what happens to what you send, or send it in.

Corrections

If something on this site is wrong, tell us through the intake form or an Instagram DM to @ctrlztherapy. We fix it and update the page's “Last reviewed” date.

Changelog

• 8 Nov 2026: added 10 quick answers for Shorts from 8 November: Supabase CLI v3, Vercel Schedules, revoked tokens, vercel doctor and Security Review, Lovable contact form submissions, Gemini 2.5 model routing on 1 December, OpenAI's new image models, Cursor's hosted apps and Netlify's new terms.
• 4 Nov 2026: added 10 quick answers for Shorts from 4 and 5 November: the Next.js November security release, Lovable's new project and website imports, Analytics visit counting, Memory and Deep scan, Apple's new age rating questions, blocked npm packages and the Vercel MCP card in ChatGPT, and Claude's personal and service account keys. Corrected Can you import a GitHub repo into Lovable?: since 29 October the answer is yes, as a ZIP.
• 2 Nov 2026: added 10 quick answers for Shorts from 3 November: the Claude API's new version and removed temperature setting, Lovable's student discount, link previews and Claude models, Next.js vs React, restricted Stripe keys for AI agents, Dockerfiles and the AI Traffic tab on Vercel, OpenAI's 12-hour prompt caching and GitHub's AI Scan.
• 2 Nov 2026: new long guide, How to Upload Your App to the App Store Without a Mac, with the video, the checklist and every source.
• 2 Nov 2026: visits are now also counted with AiO Tag, a cookieless first-party counter, and Google Analytics runs if you accept it on the new cookie banner. Details on the privacy page. Missing pages now show a proper 404 page.
• 1 Nov 2026: added 10 quick answers for Shorts from 2 November: Claude and Codex in Android Studio, Android limited distribution accounts, restoring Lovable work after a Git push, Lovable's high-load warning, Growth tools and free allowance coverage, scoped Supabase tokens, Gemini model routing, WebSockets on Vercel and Vercel's updated terms.
• 31 Oct 2026: added 10 quick answers for Shorts from 31 October and 1 November: the Claude Code extension incident on Cursor's marketplace, Cursor's minimum versions, Vercel's Runtime Cache billing, Bolt's private tables, Claude Ultra, Lovable referral credits and edit requests, GitHub Copilot model removals, Apple Developer Program enrollment and a Supabase time zone fix.
• 30 Oct 2026: added 10 quick answers for Shorts from 30 and 31 October: the Next.js security release, Gemini voice model shutdowns, Vercel (AI bots, Node.js 26), Lovable (credit emails, 2FA, /goal), the Claude Team plan, Google Play student discounts and Replit chat sharing.
• 29 Oct 2026: added 40 quick answers for Shorts from 22 to 30 October: model shutdowns and AI credits (OpenAI, Claude, Gemini, Copilot, Cursor), Lovable, Vercel, Firebase, Replit, Supabase, Stripe, Cloudflare and the app stores.
• 23 Oct 2026: added 94 quick answers for Shorts from 6 to 23 October: hosting and domains (Vercel, Netlify, Cloudflare, Render, Railway, Firebase), app stores, payments and Stripe, AI API errors and bills, Claude Code and Cursor, Supabase and Lovable. Updated the Claude Pro and API answer: Max and Team plans now include monthly API credits.
• 23 Oct 2026: added a contact page. AI agents that ask for Markdown now get the home page and “page not found” replies as Markdown.
• 21 Oct 2026: added 23 quick answers for Shorts from 5 to 20 October: Supabase (permissions, storage, Realtime, connections, magic links), app emails (Resend, Gmail, SPF), Lovable, and AI and cloud bills (OpenAI, Gemini, Claude, Cursor, Google Maps).
• 21 Oct 2026: added the second guide: why your app's emails don't arrive, the four places they get lost and the fixes, shown on the real Supabase and Resend dashboards.
• 11 Oct 2026: added guides, longer step-by-step videos with a written version. The first one: how to keep your app online on a free plan on Supabase, Netlify, Vercel and Render, shown on the official pages.
• 10 Oct 2026: added episode 5 of the cartoon, Goldfish: why your AI tool forgets things in a long chat, and the notes file that fixes it.
• 10 Oct 2026: added a quick answer: why your AI coding tool forgets what you built in a long chat, and the notes file each tool reads every time.
• 7 Oct 2026: added episode 4 of the cartoon, Make It Pop: why every message costs more as your app grows, and what Plan mode is for.
• 5 Oct 2026: added episode 3 of the cartoon, Whack-a-Bug: what to do when every AI fix breaks something else.
• 4 Oct 2026: added the cartoon, a short animated comedy about building an app with AI. Everything in it is made up except the therapist's note at the end of each episode.
• 4 Oct 2026: added 10 more quick answers: Stripe payments that don't unlock a plan and Stripe fees, rate limits, function regions, the Hobby plan and email records on Vercel, publishing changes on Lovable, Claude Pro and the API, installing Node.js, and running AI coding on your own computer.
• 3 Oct 2026: added 10 more quick answers: fake sign-ups and CAPTCHA, Replit and Bolt costs, privacy policies, Stripe reserves, Lovable on the App Store, Lovable credits and search indexing, finding errors your users see, and capping an AI API bill.
• 1 Oct 2026: added 10 more quick answers: Supabase keys, pausing and bills, Replit, Netlify, Google Play, Apple account deletion, the EU AI Act and leaving Lovable. The site credit now reads “Website by AiOClicks”.
• 1 Oct 2026: added Quick answers: 17 short, sourced answers about limits, emails, bills and getting unstuck when AI breaks your app, each with its video.
• 1 Oct 2026: added four cases: a save that said it worked (024), a backup that wouldn't restore (021), a delete that removed every row (017) and a password written to the logs (013).
• 29 Sep 2026: added Case 015, two buyers bought the last item, and a checklist item for secret keys in browser code.
• 28 Sep 2026: added Case 011, a cached profile showed another user's data.
• 28 Sep 2026: added Case 010, a crashed security check let everyone in.
• 26 Sep 2026: added Case 009, one payment credited twice.
• 23 Sep 2026: site launched with 8 case files, the 10-minute checklist and the intake form.