Data controller
The Lazy IDE is operated by GameOn, a company established in France. For the purposes of the EU General Data Protection Regulation (GDPR), GameOn is the data controller for personal data processed through your Lazy account, the Pro service, and this website. You can reach us about any privacy matter at davidlazyide@gmail.com.
Your Brain lives on your machine
When you use Lazy on the Free tier, your Brain (memory), code, decisions, and conversations never leave your device. We have no access to them. The app reads and writes files locally — nothing is transmitted to Lazy servers. This is intentional and non-negotiable.
Third-party AI providers (Free tier)
On the Free tier, you supply your own API key for an AI provider of your choice (for example, Anthropic, OpenAI, or another). When you send a message, your text goes directly from the app to that provider under your own account and their privacy policy. Lazy does not proxy, store, or log these requests. The provider's data handling is governed entirely by their own terms.
Pro tier — managed AI
On the Pro tier, Lazy manages the AI infrastructure on your behalf. This means your prompts and responses pass through our systems so we can route them, apply optimizations, and provide support. We process this data only to deliver the service — we do not use your code or conversations to train models or for advertising. We apply appropriate security measures and retain session data only as long as needed to operate the service.
Why we process your data (lawful bases)
Under the GDPR, we only process personal data where we have a lawful basis. We rely on: performance of a contract, to provide the Pro service and handle billing once you subscribe; your consent, where it is required (for example, non-essential cookies or analytics on this website); and our legitimate interests, to keep the service secure, prevent abuse and fraud, and understand how the website is used — balanced against your rights. Where we rely on consent, you can withdraw it at any time.
Your rights under the GDPR
If you are in the European Economic Area, you have the right to access your personal data, to have it rectified or erased, to receive it in a portable format, to object to or restrict certain processing, and to withdraw any consent you have given. To exercise these rights, contact us at davidlazyide@gmail.com and we will respond within the time limits set by law. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority, or with your local supervisory authority.
How long we keep your data
We keep account and billing data for as long as your account is active, and afterwards only as required to comply with our legal obligations — for example, invoices and payment records must be retained for the period set by French tax and commercial law. Pro AI session data is retained only as long as needed to operate the service and provide support, after which it is deleted or anonymised. Free tier data stays on your device and is never retained by us.
International data transfers
Some of the providers we rely on to run the Pro service and this website are located outside the European Union, including in the United States. When personal data is transferred outside the EU, we rely on appropriate safeguards recognised under the GDPR — primarily the European Commission's Standard Contractual Clauses, or an adequacy decision where one applies — so that your data continues to benefit from an equivalent level of protection.
Sub-processors
To deliver Lazy we use a small number of trusted service providers (sub-processors), each only for a specific purpose: Supabase — authentication, database, and backend hosting (EU region, eu-west-3); Stripe — payment and subscription processing; OpenRouter and the underlying AI providers — managed AI inference for the Pro tier; Vercel — hosting of this marketing website; and Cloudflare R2 — distribution of the app's downloads and updates. Some of these providers are based in the United States, which involves the international transfers described above.
This website
The Lazy marketing website (the site you are reading now) may use standard web analytics to understand how visitors find and use the site (page views, referrers, device types). We do not use fingerprinting or cross-site tracking. If we deploy a cookie consent mechanism, it will give you a real choice. No personal data collected on this site is sold to third parties.
Cookies
The marketing website may set session or preference cookies to remember your language choice and maintain a session if you sign up. We do not use advertising cookies. Third-party analytics scripts, if any, are subject to their own cookie policies, which we will document when relevant.
Children
Lazy is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have accidentally collected such information, contact us and we will delete it promptly.
Changes to this policy
If we make material changes, we will update the date at the top of this page and, where appropriate, notify Pro users by email. Continued use of the service after changes are posted constitutes acceptance.
Questions
Questions about your privacy, or want to exercise your rights? Reach us at davidlazyide@gmail.com.