Privacy policy

Last updated: 16 October 2026

Who we are

Lazy as is an independent app for macOS, Windows and Linux, made by The Crew MENA Art Production L.L.C, Office 804, Saeed Mohammed Saeed Al Kindi Building, Naif, Dubai, United Arab Emirates, which is responsible for the personal data described here (the "controller"). It is not made by or affiliated with Anthropic, OpenAI, Google, GitHub, Microsoft or Apple. Questions about this policy, or to use your rights below, write to support@lazyas.com.

What stays on your computer

• Screenshots taken during a session, saved as PNG files in your session folder (by default Documents/LazyAs).
• Transcripts and notes, saved as notes.md, prompt.md and session.json in the same folder, plus screenshots-sheet.png when you use Open in AI chat.
• Page addresses and window titles of the app or browser page you were reviewing, stored inside your notes.
• Settings, stored in your macOS user defaults, or in a settings file in %LOCALAPPDATA%\LazyAs (Windows) or ~/.config/LazyAs (Linux).
• A log file with app events and errors, to help fix problems: ~/Library/Logs/LazyAs.log on a Mac, %LOCALAPPDATA%\LazyAs\LazyAs.log on Windows, ~/.local/share/LazyAs/LazyAs.log on Linux. It stays on your computer unless you choose to send it to us.
• The speech model on Windows and Linux, next to that log.
• Your Anthropic API key or Claude token, if you add one on a Mac, stored in the macOS Keychain.

We don't have servers that receive any of this. You can delete any of it at any time by deleting the files or the session folder.

Audio and speech recognition

While a session is running, Lazy as listens to your microphone so it can transcribe what you say. Audio is processed in memory and never saved to disk.

On a Mac, transcription is done by Apple's speech recognition, and you choose where in Settings › Capture › Transcription:

• Best accuracy (the default): audio is processed by Apple's speech service, the same way macOS Dictation works. Apple's privacy policy applies to that audio.
• Private: audio is processed on your Mac only, for languages that support on-device recognition (marked ⚡︎). Nothing leaves your Mac for transcription.

If you're offline, Lazy as switches to on-Mac transcription by itself.

On Windows and Linux, transcription is done on your computer by Whisper, an open speech model. Audio never leaves your computer. The first session downloads the model from Hugging Face (huggingface.co), which, like any website you download from, sees your IP address. After that, transcription works offline.

Screenshots

Lazy as captures the screen only during a session (on a Mac, with your Screen Recording permission), when you start talking (around the pointer) or snip an area. It crops around that spot and saves the screenshots that end up in your notes locally. Screenshots are never uploaded by Lazy as.

What's under the pointer

On a Mac, when a screenshot is taken Lazy as also notes the name of the thing under the pointer (for example, button "Save changes"), using the Accessibility permission, and reads the text around the pointer from the screenshot with Apple's on-device text recognition. Both are saved in your notes and nowhere else. If you aren't pointing at anything, the screenshot shows the whole window and nothing is highlighted.

Page addresses and window titles

On a Mac, if "Record the browser page address" is on, Lazy as asks your browser (Chrome, Safari, Arc, Edge or Brave) for the address of the current tab when you make a note. macOS asks your permission for this once per browser. On Windows and Linux, Lazy as reads the name and title of the window in front instead. Either way, it's saved in your notes and nowhere else.

Making a prompt

When you choose "Make it a prompt" (or turn on automatic polishing), Lazy as sends the text of that session's notes, meaning screenshot file names, page names and your transcribed words, to the AI you picked, which rewrites it into a shorter prompt and a session name. Images are never sent at this step. Depending on your choice in Settings › AI:

• Claude: the text goes through your own Claude Code installation and Claude account, under your agreement with Anthropic.
• ChatGPT: through your own Codex installation and ChatGPT account, under your agreement with OpenAI.
• Gemini: through your own Antigravity CLI installation and Google account, under your agreement with Google.
• GitHub Copilot: through your own Copilot CLI installation and GitHub account, under your agreement with GitHub.
• Your Anthropic API key (Mac): directly from your Mac to Anthropic's API, under your agreement with Anthropic.
• Offline cleaner: nothing leaves your computer.

You sign in to these services in their own apps and websites, so Lazy as never sees your passwords. Their own privacy policies and terms apply to anything you send them. We never see it.

Open in AI chat

If you use Open in AI chat, Lazy as opens the chat website you picked in your browser and puts your screenshots on your clipboard as one image. For ChatGPT and Claude, your notes are placed in the web address so the chat opens with them typed in: that site receives them when the page loads, and the address stays in your browser history. For the other chats, your notes go on your clipboard instead. What you then send, paste or attach in the chat is up to you, under that chat's own privacy terms.

When you paste notes or prompts into Claude Code, Codex or another tool yourself, that tool's privacy terms apply to what you paste and to any screenshot files it reads.

AI agents

If you connect an AI coding agent (Claude Code, Codex, Cursor, Gemini CLI or Copilot CLI), the lazyas tool runs on your computer and answers that agent over a local connection: your notes, screenshots and statuses never pass through us. What the agent then sends to its AI provider is under your agreement with that provider. Agents can record statuses and evidence in a review.json file next to your session.

Updates and licences

Once a day the app asks lazyas.com/api/latest whether there's a newer version, sending your system (mac, windows or linux) and app version. Nothing else, and it isn't stored.

Licence activation. When you add a licence key, and then about once a week, the app sends lazyas.com/api/activate your licence key, a fingerprint of your computer (a SHA-256 hash of its hardware ID, which can't be turned back into the ID), your computer's name (so you can tell your computers apart when freeing one), your system and the app version. We store the fingerprint, name, system, version and the dates we saw them against your licence, to enforce the number of computers a licence covers and to switch off refunded licences. The app works for 30 days between check-ins. Computer names often include your own name; you can see and remove them at your licence. Your licence key, and the activation the app keeps, include your name and email in readable (not secret) form, so treat a key like a receipt.

Trial. Once paid plans are on, a computer without a licence sends the same fingerprint, its system and the app version to lazyas.com/api/trial once, and we store the fingerprint with the trial's start date so reinstalling doesn't restart the trial. No name, email or key is involved.

Buying. Paddle (our reseller and Merchant of Record) handles payment and your billing details under its privacy policy. We receive your name, email, what you bought, and Paddle's customer, order and subscription numbers, to issue your licence, email you the key, renew it and let you manage it at your licence. That page emails you a sign-in link; we keep only a one-way hash of the link, for one hour.

Why we may (legal basis). To provide what you bought and the trial you started (performing our contract with you), and to prevent licence abuse (our legitimate interest in being paid for our work, kept to the minimum above).

Who processes it for us. Vercel (hosting the website and licence server), Supabase (the licence database) and Resend (sending licence and sign-in emails). Paddle sells Lazy as as Merchant of Record and is responsible for the payment data it collects under its own policy; we don't use Paddle's Retain or other marketing tools. If you email support, the email is handled by Google (Gmail). They may store data outside your country, including in the United States, under their own data-transfer safeguards.

How long. Licence records, for as long as the licence exists plus 2 years (tax and dispute records are kept by Paddle as the law requires). A computer's activation is removed when you free it (a note that it was freed is kept 12 months). Trial records, 2 years after the trial. Licence-server logs, 12 months. To limit abuse we count requests per IP address, kept only as a one-way hash for 2 days. These are deleted automatically every day.

Your rights. Wherever you live you can ask us for a copy of the personal data we hold about you, to correct it, or to delete it (deleting a paid licence's records ends the licence, so we'll check with you first). People in the EU, UK and many other places also have the right to object, to restrict use and to complain to their data protection authority. Write to the address above; we answer within 30 days.

What we don't do

• No passwords or sign-up: your email at checkout is all we know.
• No analytics, telemetry, crash reporting services or advertising in the app.
• No selling of personal data, and no sharing beyond the services above that run Lazy as for us.

This website

This site keeps a simple first-party count of visits and downloads so we know how people find Lazy as. For each page view or download it records the page, the referring site, your IP address and the approximate location our host derives from it (country, region, city), your browser, operating system and screen size, your language and time zone, how long the page was open, and a random visitor ID kept in your browser's local storage (not a cookie). It isn't shared with advertisers or sold, and it's kept for up to 12 months. The site also loads fonts from Google Fonts, which receives your IP address as part of serving them. Our hosting provider may keep standard server logs for security and reliability.

Email

If you email us for support, we use your email and whatever you send (including a log file, if you attach one) only to help you, and delete it when it's no longer needed.

Children

Lazy as isn't directed at children under 13, and we don't knowingly collect anything from anyone, let alone children.

Changes

If this policy changes, we'll update this page and the date at the top. If a change affects what leaves your computer, we'll say so in the changelog too.