Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains how Lyra Music ("Lyra", "we" or "us") collects, uses and shares information about you when you use our mobile, desktop and web applications and our websites (together, the "Services"), and when you contact our support team.

We may change this Policy from time to time. When we do, we revise the date above and, for significant changes, we give you additional notice in the app or on this site.

1. Information we collect

Information you give us

  • Account information. Your email address, a username or display name, and a password. If you sign in with Google, Apple or Facebook, we receive your email address and basic profile information from that provider instead of a password.
  • Guest accounts. You can use Lyra without registering. A guest account holds only an internal identifier and the library attached to it, with no email address, until you choose to sign up — at which point the library carries over.
  • Profile details you choose to add, such as a profile picture and your country.
  • Payment information when you subscribe to Premium. Card details are entered directly with our payment provider or your app store and are never stored on our servers — we receive the transaction record, not your card number.
  • Anything you write to us, including support emails, bug reports and the optional reason you give when deleting your account.

Information collected as you use Lyra

  • Your library and activity. The tracks, albums, artists, playlists, folders, podcasts, episodes and radios you save, and your listening history — this is what we sync so your library follows you across devices.
  • Usage information, such as which screens and features you use and how you interact with them.
  • Device and log information, such as device model, operating system version, app version, language, device identifiers, crash reports, access times and your IP address, from which we derive an approximate location (typically country level).
  • Transaction information about your subscription: plan, renewal and expiry dates, amounts and the store or processor used.

Information from other sources

  • App stores and payment providers, which tell us whether a purchase or renewal succeeded.
  • Sign-in providers (Google, Apple, Facebook), which share the account information you authorise when you use them to log in. Apple lets you hide your real email address; if you do, we only ever see the relay address.
  • Advertising and attribution partners, which tell us that an install or event came from a particular campaign.

2. Music on your device and in your cloud storage

Lyra can play audio you already own — files stored on your device, and files you import from third-party cloud storage. This content is yours, and we treat it that way.

  • Local files. We read your device's music library only to play and organise the files on it. Those files are processed on your device and are never uploaded to our servers.
  • Cloud imports. You can connect Google Drive, OneDrive or Dropbox to browse and import audio and video files you select. Files are downloaded directly to your device — we do not copy them to our servers, and we do not read files you have not chosen to import.
  • Access tokens for a connected cloud account are stored locally on your device and are not transmitted to our servers. You can disconnect an account at any time: open Import songs from your Library, tap the connected account and choose Disconnect. This revokes our access.

Google Drive

When you connect Google Drive, Lyra requests read-only access (the drive.readonly scope) so you can navigate your folders and choose files to import. You can also revoke access directly from your Google Account permissions page.

Lyra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalised AI or machine-learning models, and we do not sell it.

3. How we use information

  • Provide, maintain and improve the Services, and develop new features;
  • Sync your library and playback across your devices, and personalise what we recommend to you;
  • Process subscriptions and give you the Premium features you paid for;
  • Send you service messages, such as receipts, account notices and replies from support;
  • Send push notifications you have agreed to receive, which you can turn off at any time in your device settings;
  • Diagnose crashes and technical problems, and measure whether a change made the app better or worse;
  • Show and measure advertising in the free tier (Premium removes ads);
  • Detect, investigate and prevent fraud, abuse and activity that breaks our Terms; and
  • Comply with legal obligations, such as keeping tax records for purchases.

4. How we share information

We do not sell your personal data. We share it only as described here:

  • Service providers acting for us, under contract and only for the purpose we give them: cloud hosting and storage, payment processing (Stripe for purchases on our website; Apple, Google and Huawei for in-app purchases), subscription management, email delivery, customer support tooling, analytics, crash reporting, push delivery, and advertising and attribution partners (see the next section);
  • Other users, when you ask for it — see “Social features you control” below;
  • For legal reasons, when we believe disclosure is required by law or legal process, or necessary to protect the rights, property or safety of Lyra, our users or others;
  • In a business transfer, such as a merger, financing or acquisition, and between Lyra and other companies under common ownership; and
  • With your consent or at your direction.

Refund requests made to Apple

If, on or after 2 November 2026, you ask Apple for a refund of a purchase you made in Lyra through the App Store, Apple may ask us for information about that purchase before it decides. When it does, we may tell Apple:

  • that you agreed to this sharing;
  • whether the purchase was delivered and worked as it should;
  • whether a free trial or sample was available before you paid;
  • for a one-time purchase, how much of it you used; and
  • whether we would prefer Apple to grant or decline the refund, or have no preference.

To reach that preference we use our own records of the purchase and your account, such as how long you have been a customer and your previous purchases and refunds. We do not send Apple your name, your email address, your library or what you listen to. Apple alone decides every refund request, and handles this information under the Apple Privacy Policy.

We share this information with Apple only because you agree to it in section 4 of our Terms of Service, which apply to your Premium purchases through the App Store. If you would rather we did not share anything with Apple about your refund requests, write to us using the details in the "Contact us" section below. From then on we will not answer Apple's requests about any of your purchases.

Content from YouTube

Content that comes from YouTube is delivered from YouTube's servers. When you play it, Google receives information such as your IP address, device and browser information, and any YouTube cookies on your device, and processes it under the Google Privacy Policy.

5. Advertising, analytics and attribution

The free tier of Lyra is funded by advertising. To show and measure ads, and to understand how the app is used, we work with the following partners, which may set device identifiers and collect information about your use of the Services:

  • Google AdMob — serves the ads you see in the free tier;
  • Google Firebase — Analytics (how features are used), Crashlytics (crash diagnostics), Cloud Messaging (push notifications) and Remote Config;
  • Tenjin and TikTok Business SDK — measure which marketing campaign an install or event came from; and
  • our own analytics, which we host ourselves and which records app events tied to a device or account identifier rather than to your name or email.

Your controls

  • In Europe and the UK, we ask for your consent before personalised advertising through a consent prompt shown when you first open the app. You can change your answer later in the app's privacy settings.
  • On iOS, the system asks separately for permission to track you across other companies' apps and websites. If you decline, we do not.
  • On any device, you can limit ad personalisation with “Limit Ad Tracking” (iOS) or “Opt out of Ads personalisation” (Android).
  • For interest-based advertising generally, see aboutads.info/choices or, in the EU, youronlinechoices.eu.
  • Premium removes ads entirely.

6. Social features you control

Some Lyra features share what you are listening to. They are opt-in, and each one is under your control:

  • Jam sessions. When you start or join a shared listening session, the other participants see what is playing and who is in the session, for as long as the session lasts.
  • Aura. If you create an Aura, it produces a shareable page summarising your listening — for example your top artists, top genres and listening minutes. Anyone with the link can open it, so share it only with people you want to see it.
  • Profile visibility. You can make your profile private in the app, so your saved music is not visible to other users.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and retention limits. No system is ever completely secure, so please use a strong password unique to Lyra, do not share it, and sign out on shared devices. Anyone with access to your account can see the personal data in it.

8. Deleting your account and your data

You have the right to have the personal data we hold about you deleted, and you can exercise it at any time in one of two ways:

  • In the app, without contacting us. Go to Settings → Profile → Edit profile and choose Delete account at the bottom of the page, then follow the short guided flow.
  • By email. Write to [email protected] from the address your account is registered under. We verify the request before acting on it — if it does not come from the registered address, we will ask you to confirm ownership first.

Deletion is permanent and cannot be undone. Your account is disabled and your sessions are revoked immediately, and your identity record, profile, library, playlists, listening history and preferences are then permanently erased from our systems.

Two things worth knowing before you delete: deleting your Lyra account does not cancel a subscription bought through the App Store or Play Store — those are billed by the store and must be cancelled there — and if you want a copy of your data, ask us for it before you delete the account rather than after.

We may keep a limited set of records where the law requires it, such as billing and tax records for purchases and records needed to prevent fraud or resolve disputes. Routine encrypted backups are kept on a short rolling cycle and are overwritten automatically, so deleted data disappears from them within that cycle.

9. How long we keep information

We keep personal data for no longer than is necessary for the purposes described in this Policy. In practice, the data attached to your account is kept while the account exists and is erased when you delete it. Analytics and advertising records are kept in aggregated or identifier-level form for limited periods, and records we are legally required to retain are kept for the period the law prescribes.

10. Your choices

  • Account information can be updated in the app, or by writing to us.
  • Push notifications can be turned off in your device settings at any time.
  • Advertising consent can be changed in the app's privacy settings.
  • Connected cloud accounts can be disconnected in Settings → Cloud Accounts.
  • A copy of your data can be requested at any time — see the section below.

11. Children's privacy

The Services are not directed to children under 13, or under the minimum age required in your country, and we do not knowingly collect personal data from them. If you are a parent or guardian and believe your child has given us personal data, write to [email protected] and we will delete it.

12. If you are in the EEA, the UK or Switzerland

Legal bases

We process personal data only when we have a legal basis to do so:

  • to perform our contract with you — running your account, syncing your library, processing payments;
  • for our legitimate interests — keeping the Services secure, preventing fraud, including reviewing our own records when you ask an app store for a refund, and understanding and improving how the Services are used;
  • to comply with legal obligations; and
  • with your consent, for personalised advertising and push notifications, and for the information we give Apple about your App Store refund requests (see "Refund requests made to Apple" above). You can withdraw it at any time.

Your rights

Subject to the limits set by law, you have the right to access the personal data we hold about you, to have it corrected or erased, to receive it in a portable form, to object to or restrict certain processing, and to withdraw consent you have given. To exercise any of these rights, write to [email protected]. We answer within the period the law allows, normally one month.

You also have the right to complain to a supervisory authority. You can find your national authority through the European Data Protection Board; in Switzerland, contact the FDPIC.

International transfers

Some of the service providers we rely on operate outside the EEA, the UK and Switzerland. When personal data is transferred to them, we rely on an adequacy decision covering the destination country or on Standard Contractual Clauses agreed with the provider concerned.

13. If you are a California resident

In the last 12 months we collected the following categories of personal information: identifiers (such as email address and device identifiers), commercial information (such as subscription and transaction records), internet or other electronic network activity information (such as app usage and listening activity), approximate geolocation derived from IP address, and inferences drawn from that activity (such as likely content preferences). The sources, purposes and recipients are described in the sections above.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising where you have not consented.

California residents may request to know the categories and specific pieces of personal information we hold, to have it deleted, and not to be discriminated against for exercising those rights. Write to [email protected]; we will verify your request against information we already hold about you.

14. Contact us

For any question about this Policy, or to exercise any of the rights described in it, write to [email protected]. We answer every privacy request from that address.