Privacy Policy

Who we are and how to contact us

Lyra is operated by Ori Delevski. Questions, privacy requests, complaints, access or correction requests can be sent to orworkdelevski@gmail.com. We may ask for reasonable verification before acting on a request.

Data we handle

• Account and authentication: email address, optional display name, account ID, authentication tokens, and Google account details returned when you choose Google sign-in. Supabase handles passwords and authentication; Lyra does not receive your plain-text password.
• Your use of Lyra: favorites, song visits, search queries and pasted YouTube links, chat questions and answers, feedback, language, and account preferences.
• First-party product events: events such as opening a song, lyrics or translation, asking a question, or adding a favorite. Events may include your account ID if signed in, song ID, language, allowed campaign tags, the referring site's host, and a coarse platform category (desktop web, mobile web, or Android). We do not store the raw user-agent string, full referring URL, advertising ID, or a persistent device ID in this analytics table.
• Technical data: hosting and security providers may process IP address, request data, device/browser information, cookies or similar storage, timestamps, and server logs to deliver and secure the service.

Lyra does not request your precise location, contacts, photos, or microphone. Please do not put sensitive personal information in searches or AI questions.

Why we use data

• Provide search, accounts, synced favorites and history, lyrics, translations, song analysis, and AI answers.
• Authenticate users, prevent abuse, troubleshoot errors, secure Lyra, and enforce our terms.
• Measure coarse product use and campaign performance so we can improve Lyra.
• Respond to requests and meet legal obligations.

Providing account data is voluntary, but without it we cannot create or sync an account. Some basic technical processing is required to operate the site and app.

Service providers and international processing

Data may be processed outside Israel. We use:

• Supabase for authentication and database storage.
• Vercel for web hosting, delivery, and operational logs.
• OpenRouter and the selected AI model provider for AI requests. Your question and relevant song context can be sent to them. Provider retention depends on the model and Lyra's OpenRouter settings, so do not submit sensitive information.
• LRCLIB for lyrics lookup; song and artist metadata is sent to it.
• Apple iTunes Search and YouTube for song/video metadata and playback. A YouTube connection occurs when its embedded player loads, and YouTube may process technical data under its own terms.
• Google when you choose Google sign-in.

We do not sell personal data or use advertising SDKs.

Cookies and local storage

Lyra uses necessary authentication and security storage and remembers your language and theme. We do not currently use advertising cookies or third-party behavioral analytics cookies. The YouTube privacy-enhanced player is loaded only on pages that contain a video and may use storage or receive technical data. You can block or clear storage in your browser, but sign-in and saved preferences may stop working.

Retention

Account data is kept while your account exists. Raw first-party product events are designed to be deleted after 90 days; daily totals may remain without direct account identifiers. Operational and security logs follow provider retention. Shared song analyses remain because they are not account-specific. When an account is deleted, profile, favorites, visits and searches are deleted; retained chat and feedback records are disassociated from the account. Legal, fraud-prevention, backup, and security records may be kept as reasonably required.

Your choices and rights

You may ask to access or correct information about you, object or complain, and delete your account. Delete it in the Android app under Profile, or follow these deletion instructions. We aim to complete verified email deletion requests within 30 days. You can use basic song discovery without creating an account.

Children

Lyra is not directed to children under 13 and we do not knowingly collect their personal data. If you believe a child supplied data, contact us.

Security and changes

We use reasonable technical and organizational safeguards, but no online service can promise absolute security. We will update this page and its date when this policy changes. Where required, material changes will be shown in the service.