Account information: identifiers such as your username, email address, and, if you provide it, your date of birth and display name.

Content you write: stories, scenes, characters, personas, world-books, and messages you exchange with the Service while writing collaboratively.

Usage data: logs of your interactions (e.g. which stories you opened, which model you used, request timestamps) used to operate, secure, and improve the Service.

Device and technical data: IP address, user agent, device model, OS version, and similar information collected automatically when you use the Service.

Payment information: purchases are processed by our payment providers — Stripe on the web, and Apple (in-app purchase) on iOS. We never receive your full card details; we receive limited information such as the last four digits of your card, billing country, and the transaction identifier needed to deliver what you bought.

We do NOT use the content of your chats to train our own models without your explicit, separately-collected consent.

We may combine information collected through different parts of the Service (for example, account information with usage data) and may aggregate or de-identify information so it no longer identifies you. Aggregated and de-identified information is not subject to this Privacy Policy and may be used for any legitimate business purpose.

Where the GDPR applies we rely on the following legal bases: (a) performance of our contract with you (operating the Service); (b) our legitimate interests (improvement, security, fraud prevention); (c) compliance with legal obligations; and (d) your consent where required (e.g. optional marketing communications).

We share information with vendors that help us operate the Service ("subprocessors") and only to the extent necessary for them to perform their services. Current subprocessors include:

We may also disclose information (a) to comply with legal process or government requests; (b) to enforce our Terms; (c) to protect the rights, safety, or property of users or the public; and (d) in connection with a corporate transaction such as a merger or acquisition, subject to standard confidentiality protections.

To measure how well our ads perform and to build advertising audiences, we share limited advertising and conversion data with Meta and TikTok. On the web app this uses the Meta Pixel. In our iOS and Android apps we use the Meta SDK and a server-side Conversions API, which may include purchase and product-interaction events and hashed identifiers (such as a hashed email address or account ID) used for matching. Our apps also use the TikTok Business SDK, which receives app events (installs, app opens, sign-ups, purchases, and reaching a chat milestone) along with basic device information. On iOS, your device's advertising identifier (IDFA) is shared with either partner only with your permission. To show a relevant in-chat ad, our iOS and Android apps send Koah the title, tagline, description and tags of the story you are chatting with and, in some cases, an excerpt of the AI character’s latest reply, with basic device information. We never share your own messages or search queries with advertising partners. This activity may be considered a "sale" or "sharing" of personal information under U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA); we do not sell your information for money.

You can opt out of this advertising activity at any time:

Some content you create — stories you publish publicly, your creator profile, and similar — is visible to other users by design. If you make a story public, other users may read, save, branch, or chat with it. Public stories may continue to be visible to other users for a reasonable period after you delete your account, while we process the deletion and remove related caches and backups; we will detach your name from publicly-visible content as soon as practical.

If you do not want a story to remain visible after deletion, unpublish it before deleting your account. Private chats, personas, and unpublished drafts are not affected by this provision and are deleted with the account.

We retain account information for as long as your account is active. When you delete your account, we delete or anonymize your profile and private content from production systems within 30 days under normal circumstances.

We may retain certain information for longer where:

Backups containing your information are purged on a rolling schedule (typically within 90 days) as backup snapshots age out.

Depending on your jurisdiction, you may have rights to:

Submit requests to admin@lyra-ai.io. We will respond within the time limits required by applicable law (typically 30–45 days).

California residents have additional rights, including the right to know the categories of personal information collected, the right to delete personal information, and the right to opt out of "sale" or "sharing" of personal information. We do not sell personal information and do not share it for cross-context behavioral advertising without consent.

The Service is for adults aged 18 or older. We do not knowingly create accounts for, or collect personal information from, anyone under 18. If you believe a person under 18 has provided us with personal information, contact admin@lyra-ai.io and we will terminate the account and delete the data.

We operate globally and may transfer your information to servers outside your home country. Where we transfer personal data from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

We use technical and organizational measures designed to protect personal information, including encryption in transit, encrypted storage, access controls, and audit logging. No system is perfectly secure, however, and we cannot guarantee absolute security.

Our web app uses essential cookies to keep you signed in and to remember your preferences. See our Cookie Policy for details and how to manage cookie choices.

We may update this Privacy Policy from time to time. If a change is material we will provide notice (e.g. by email or in-app banner) before it takes effect.

Privacy questions: admin@lyra-ai.io. Mailing address: 2261 Market Street STE 66320, San Francisco, CA 94114.