Privacy Policy
Last updated: September 13, 2026
This Privacy Policy explains how Lazy Meal ("Lazy Meal", "we", "us", "our") processes personal data in connection with the website and application at lazymeal.art (the "Service"). Lazy Meal is established in Belgium and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
Lazy Meal is the data controller for the personal data described in this policy. Requests concerning this policy or your personal data may be sent to adrien@lazymeal.art.
2. Data collected
The Service can be used without an account; in that case, your meal plan and shopping list are stored only in your browser's local storage and are not transmitted to us.
If you create an account, we collect:
- Account data: email address and password, or, if you sign in with Google, the name, email address, and profile picture provided by Google.
- Service data: weekly meal plans, shopping lists, favorited recipes, household membership, and shared household data.
- Submitted content: recipe submissions and feedback you send through the Service.
We do not use advertising or analytics trackers and do not sell personal data.
3. Purpose and legal basis
We process this data to provide and maintain the Service, including account authentication, cross-device synchronization, household sharing, and review of submitted content. Processing is based on the performance of a contract with you (Art. 6(1)(b) GDPR) and, for submitted content, our legitimate interest in operating and improving the Service (Art. 6(1)(f) GDPR).
4. Recipients and hosting
Personal data is hosted and processed by Supabase, acting as processor, on infrastructure located in the European Union (Ireland). Where you sign in with Google, Google Ireland Limited acts as an independent controller for the authentication process, subject to Google's own privacy policy. No other third party receives your personal data.
5. Retention
Personal data is retained for as long as your account remains active. Upon account deletion, personal data is deleted within a reasonable period, except where retention is required by law.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Requests may be sent to adrien@lazymeal.art. You also have the right to lodge a complaint with a supervisory authority, including the Belgian Data Protection Authority (autoriteprotectiondonnees.be) or the authority of your own country of residence.
7. Children
The Service is not directed at children, and we do not knowingly collect personal data from individuals under 16 years of age.
8. Changes
This policy may be updated from time to time. The date at the top of this page indicates the version currently in effect. Continued use of the Service after an update constitutes acceptance of the revised policy.