Privacy Policy

1. Introduction

Welcome to The Lazy Inn(“we,” “our,” or “us”), accessible at https://thelazyinn.app. The Lazy Inn is an opinionated AI roleplay experience platform and is currently unincorporated. We are dedicated to providing a private, secure, and unconstrained AI roleplay retreat. This Privacy Policy outlines how we collect, use, and protect your information when you access our web application, create an account, or interact with our services.

2. Information We Collect

We collect minimal information necessary to deliver and secure our roleplay experience:

• Email & Password Credentials: When you register via email and password, we store your email address, hashed password, and chosen display name.
• Social Authentication (Google & GitHub): You may authenticate using Google OAuth or GitHub OAuth. Both providers can be used for both sign-up and sign-in. When authenticating through these providers, we collect and store only your email address, name, and full name. Users cannot link multiple providers to a single account, and cannot disconnect authentication providers once connected.
• Creative Roleplay Data: Custom character cards you author or import, user personas, chat sessions, and swiped message alternatives are stored in our secure database to preserve your conversations.
• AI Model Credentials: API keys you provide for third-party inference providers (OpenAI, OpenRouter, DeepSeek, or custom endpoints) under Bring-Your-Own-Key (BYOK) are stored securely and used solely to route chat requests on your behalf.
• Product Analytics & Diagnostic Telemetry: We collect anonymous diagnostic telemetry (latency, token totals, error logs) and high-level product metrics via PostHog to monitor application health. The application is hosted on Vercel. DOM autocapture is disabled, text in session recordings is scrambled, and raw conversation prompts or AI story completions are never recorded in server traces. You can opt out of all anonymous telemetry at any time in Settings → Account → Privacy & Telemetry.

3. AI Interaction & Third-Party APIs

The Lazy Inn operates on a Bring-Your-Own-Key (BYOK) and managed AI model. When you generate a chat completion via BYOK, your prompt (character cards, conversation history, and user input) is transmitted directly to your configured AI provider (such as OpenAI, OpenRouter, or DeepSeek) via their respective APIs. Your conversation content is governed by your provider's privacy policy and data retention practices. BYOK requests are processed with zero-retention intent on our platform.

4. Data Retention & Planned Account Deletion

You maintain ownership of your roleplay content. Automated self-serve account deletion is currently in development as a planned feature and is not yet available as a fully implemented self-serve workflow. The intended future behavior is to permanently delete account-related personal data, sessions, and backups while retaining cards published to the public community catalog. Users who wish to close their account or request data deletion may contact us directly at hello@thelazyinn.app.

5. Security Measures

We implement industry-standard security safeguards, including TLS encryption in transit, cryptographic password hashing, strict email verification where applicable, short-lived session cookies with HTTP-only flags, and multi-tenant database isolation.

6. Contact Information

If you have any questions or privacy inquiries regarding this policy or your personal data, please contact us at:

hello@thelazyinn.app