Publish a real app, not a prototype.

A booking page, a client portal, a storefront, a game — live at its own address minutes after you describe it. And an app can only touch the fields you named.

A dark SaaS landing page with a product dashboard preview and customer logos.
A creative agency site with large editorial type and a project grid.
A fashion store front page with a lookbook and shoppable product cards.
An architecture practice site listing properties with plans and specifications.
A travel booking flow with destination search, dates and trip cards.
A restaurant site with the menu, opening hours and a reservation form.
A music festival page with the line-up, stage times and ticket tiers.
A wellness studio site with class timetable and membership options.
A personal portfolio with selected work, case studies and contact details.
A lodge booking site with availability, room types and nightly rates.
A voxel sandbox game running in the browser, with a build palette.
A neon snake game with a live score, level, mission and global leaderboard.
A side-scrolling browser game with score, lives and a restart control.
A 2048-style tile puzzle with a score counter and undo.
A space runner game with a boost meter, distance counter and high score.
Live at its own address
minutes after you describe it
Sees only what you list
field by field, enforced server-side
Undo a bad deploy
in one click
Your brand, throughout
logo, colours and fonts
Permissions

The part most AI app builders skip.

An app cannot read your workspace just because it lives in it. Each data binding names one collection, the operations allowed on it, an explicit list of readable fields, and a filter the server enforces — one that the browser cannot widen, however the request is crafted.

  • Field allow-lists: unlisted fields are never sent to the client
  • Server-enforced row filters, so a visitor only ever sees their own records
  • Per-binding operations — a form can insert without being able to read
  • Workflow bindings expose exactly one webhook, and nothing else
Booking portal · data accessDefault deny
Bookings
readinsertupdatedelete
Readable fields
slotstatuscustomer_name+ 9 hidden
Server-enforced filter
customer_id = session.user_id
The browser cannot widen this, however the request is crafted
Audiences

From private draft to public site.

Every app picks who it is for: just you, your team, a named invite list, or the whole internet. Invited apps get a branded sign-in screen you can restyle by describing the change.

  • Just me, team, invited, or public — changed at any time
  • Branded guest sign-in with your logo, colours and copy
  • Optional self-signup for apps that want to grow their own audience
  • SEO controls, social image and favicon on the app itself
Who can open it
Just mePrivate draft
TeamWorkspace members
InvitedNamed list, branded sign-in
PublicAnyone with the link
Shipping

Deploy, preview, roll back.

Apps build to a real bundle with a deployment history. Preview before you publish, and if a change goes wrong, put the previous version back immediately.

  • Live preview sessions before anything is published
  • Checkpoints and one-click rollback to any earlier deploy
  • Remix any app into a new one to branch an idea
  • Your own brand kit — logo, colours, fonts — applied throughout
Deployslumen-studio.cheqq.site
v7Add cancellation flowLive
v6New booking slots layoutRoll back
v5Brand kit refreshRoll back

Yours, not rented

A real address

Every app is live at your-name.cheqq.site from the moment it builds. No servers, no deploy pipeline to babysit.

Wired to your data

Apps read and write the same collections your automations use, so the site and the operation never drift apart.

Auditable by construction

Access is declared, not inferred. You can read an app's bindings and know exactly what it can touch.

Changed by describing it

Restyle, add a page, or change what a form collects the same way you built it — in words.

Questions about apps

Can an app expose data I did not intend to share?

Access is default-deny. An app can only read the collections, operations and individual fields you list, through a row filter the server applies on every request. Fields you leave out are never sent to the browser at all.

Can I use my own domain?

Yes, on the Business plan — Cheqq gives you the DNS records, verifies them, and issues the certificate. Custom domains are currently in early access.

What happens if a build breaks the live app?

Nothing, until you publish it. Builds are previewed first, and every deploy is a checkpoint you can roll back to in one click.

Put something live

Describe the app you need and watch it go live at its own address. Free to start, no credit card.

Start free