Apparently this solved the issue...

-- Create a policy that allows authenticated users to read their own data
CREATE POLICY "Users can read their own profile" ON app_users
FOR SELECT 
TO authenticated 
USING (auth_id = auth.uid());