Privacy Policy

1. Introduction

Welcome to The Lazy Inn (“we,” “our,” or “us”), accessible at https://thelazyinn.app. We are dedicated to providing a private, secure, and unconstrained AI roleplay retreat. This Privacy Policy outlines how we collect, use, and protect your information when you access our web application, create an account, or authenticate using third-party identity providers such as Google.

2. Information We Collect

We collect minimal information necessary to deliver and secure our roleplay experience:

• Account Credentials: When you register via email and password, we store your email address, hashed password, and chosen display name.
• Google User Data (OAuth): If you authenticate using Google Sign-In, we access your public profile data authorized via Google OAuth: specifically your email address, full name, and avatar image. We use this strictly to authenticate your account and create your user profile.
• Creative Roleplay Data: Custom character cards you author or import, user personas, chat sessions, and swiped message alternatives are stored in our secure database to preserve your conversations.
• AI Model Credentials: API keys you provide for third-party inference providers (OpenAI, OpenRouter, DeepSeek, or custom endpoints) are stored securely and used solely to route chat requests on your behalf.

3. How We Use Google User Data

Our use of Google user data adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements:

• We use Google data solely to facilitate user sign-in and display your profile identity.
• We do not sell, rent, or transfer your Google user data to third parties.
• We do not use Google user data for advertising, marketing, or retargeting purposes.
• We do not use your Google personal data to train artificial intelligence or machine learning models.

4. AI Interaction & Third-Party APIs

The Lazy Inn operates on a Bring-Your-Own-Key (BYOK) and self-hosted model. When you generate a chat completion, your prompt (character cards, conversation history, and user input) is transmitted directly to your configured AI provider (such as OpenAI, OpenRouter, or DeepSeek) via their respective APIs. Your conversation content is governed by your provider's privacy policy and data retention practices.

5. Data Retention & Account Deletion

You maintain complete ownership and control over your data:

• Self-Serve Account Deletion: You may permanently purge your account at any time by navigating to Settings → Account → Danger Zone.
• Cascading Purge: When you delete your account, your profile, credentials, custom character cards, chat histories, message branches, and uploaded avatars are permanently deleted from our database and storage with zero retention.

6. Security Measures

We implement industry-standard security safeguards, including TLS 1.3 encryption in transit, cryptographic password hashing, strict email OTP verification, short-lived session cookies with HTTP-only flags, and multi-tenant database isolation.

7. Contact Information

If you have any questions or privacy inquiries regarding this policy or your personal data, please contact us at:

auth@thelazyinn.app