Privacy Policy

IndieGent is made and sold by LEGAL ENTITY, of ENTITY ADDRESS. For anything in this policy, that is the entity responsible for your information — the data controller, if your law uses that term. Reach us at CONTACT EMAIL.

This policy covers the website at SITE DOMAIN, the IndieGent app for macOS, and the licensing service the app talks to at api.lazytasks.com. (The lazytasks.com domain is the product’s original name and is still where the licensing service and its email live; the app and the brand are IndieGent. Nothing else is different about them.)

Nothing. There is no analytics product on this site, no cookie is set, no consent banner is needed and no third-party script runs. The brand fonts are self-hosted, so your browser makes no request to Google Fonts or any other font service. The site is a folder of static files with no server-side code behind it at all.

The site is hosted by Cloudflare Pages, and like every web host Cloudflare processes the ordinary data a request carries — your IP address, your browser’s user agent and the page you asked for — in order to serve the page and protect the site from abuse. We have enabled no analytics product on top of that, and we build no profiles from it.

The list below is complete. If an event is not on it, the app is not talking to us.

Your computer’s name is sent on activation for one reason: so that when you are at the two-machine limit you can tell which machine to deactivate. The machine identifier is a stable per-Mac value the operating system already exposes; it tells us nothing about you, and it is what makes “two machines” mean two machines rather than two installs.

The app runs perfectly well with no network at all. If the daily licence check cannot reach us, it keeps your current status rather than locking you out.

One row per licence, and one row per machine it is activated on. Specifically:

• Your licence key.
• The email address Stripe passes to us with the purchase — this is where the key is sent, and how we can find your licence if you write to us.
• The Stripe checkout session and customer identifiers, so a purchase can be reconciled with the licence it produced.
• One activation record per machine: the machine identifier, the machine name you sent with it, when it was activated, and when it was deactivated if it has been.

That is the entire database. There is no account, no password, no address book, no session history and no record of what you do in the app. We hold this because we need it to perform the contract you entered into when you bought a licence — issuing it, delivering it, and keeping it working on up to two machines.

Everything the app is actually for. It lives in files under ~/Library/Application Support/LazyTasks/v2/ and in your macOS Keychain, and none of it is transmitted anywhere by IndieGent:

• Your projects, sessions, transcripts, scheduled runs, suggestions, inbox and time ledger.
• Your GitHub credentials — the app drives the GitHub CLI you have already signed in with, and never reads, stores or transmits a token of its own.
• Per-project secret values, in files readable only by your user account. They never appear in a launch command, a session brief, or the interface after you enter them, and they never sync. Only the names of the keys travel with your project preferences, so another machine knows which values to ask you for.
• Your licence key and your trial start date, in the Keychain under com.lazytasks.license and com.lazytasks.session.

There is no analytics SDK, no crash reporter and no usage reporting compiled into the app. We cannot see your projects, your sessions, or how — or whether — you use it.

IndieGent can keep its settings the same across your Macs. It does that through your own GitHub account, not through us: it creates a private repository named lazytasks-config under your account and keeps a config.json in it holding your project list and preferences. Any Mac signed into the same GitHub account reads the same file.

That repository is yours. It is private by default, we have no access to it, and it is covered by your agreement with GitHub rather than by this policy. Secret values and agent profile contents deliberately never sync — they stay on the machine you typed them into. The feature is off unless you switch it on, and deleting the repository turns it off.

IndieGent is a console for tools that live on your machine. It does not include a coding agent and does not resell anyone’s agent capacity — you bring the agent CLI you already use, and your own GitHub account.

So when a session runs, your prompt and the contents of the repository it is working on go from your Mac directly to whichever coding-agent CLI you have configured, under that vendor’s terms and your own account with them. When the app lists your issues, opens a pull request or reads your notifications, that request goes from your Mac directly to GitHub under your own login. IndieGent does not proxy, copy, log or store any of it, and none of that traffic passes through anything we run.

This is worth being clear about rather than quiet about: an agent that writes code has read your code. That relationship is between you and the agent vendor you chose, and their privacy policy is the one that governs it.

Four services, each doing one job:

We do not sell personal information, we do not share it for advertising, and there is no advertising or data-broker relationship anywhere in this product. There never has been.

A licence that never expires needs a record that never expires: we keep your licence and its activation records for as long as the licence exists, because that record is the licence. Deactivating a machine does not erase its row — it marks it deactivated, which is what frees the slot and keeps the count honest.

Stripe, Postmark, Cloudflare and GitHub keep their own records under their own retention policies. Beyond what is listed above, we keep nothing, because we collect nothing.

Write to CONTACT EMAIL and you can ask us what we hold about you, get a copy of it, have it corrected, or have it deleted. We will answer within 30 days. One consequence worth stating plainly: deleting your licence record deletes your licence — the app will fall back to the free tier on your machines, and we will not be able to reissue the key.

If you are in the UK or the EEA you have these rights under the UK GDPR and the GDPR, including the right to complain to your data protection authority. If you are in California, you have the rights the CCPA gives you — and the answer to “do you sell or share my personal information” is no.

There is nothing to opt out of in the app, because there is nothing switched on. If you would rather it never contacted us at all, it will run without a licence check; you simply will not be able to activate a licence.

IndieGent is a professional developer tool. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has bought a licence, write to CONTACT EMAIL and we will refund and delete the record.

If this policy changes, the effective date at the top of the page changes with it, and the change applies from that date. If a change materially affects people who hold a licence, we will also email the address attached to it. We will not quietly start collecting something and update the wording later.