Privacy Policy

Last updated: April 2026

1. Who We Are

LYRA Music is operated by Kim Clauß, Rendsburg, Germany. We are the data controller for the personal data collected through this platform.

2. What Data We Collect

We may collect the following categories of personal data:

• Account data: name, email address, and hashed password when you register.
• Usage data: tracks you generate, prompts you enter, genres and moods you select.
• Technical data: IP address, browser type, device type, and page visit timestamps (via analytics tools).
• Payment data: handled exclusively by our payment processor (e.g., Stripe); LYRA Music does not store card details.

3. How We Use Your Data

We use your data to:

• Provide and improve the LYRA Music platform and its features.
• Manage your account and subscription.
• Send transactional emails (e.g., account confirmation, billing notifications).
• Analyze usage trends to improve our service (anonymized where possible).
• Comply with legal obligations.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Contract performance — to provide the services you have signed up for.
• Legitimate interests — for analytics and platform improvement.
• Legal obligation — where required by applicable law.
• Consent — for optional cookies and marketing communications.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers (e.g., hosting, analytics, payment processing) strictly for the purpose of providing our service.
• Legal authorities, if required by law or court order.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time.

7. Your Rights

Under applicable data protection law (including GDPR), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing in certain circumstances.
• Data portability — receive your data in a structured, commonly used format.
• Lodge a complaint with a supervisory authority (e.g., the German Datenschutzbehörde).

8. Cookies

We use cookies and similar technologies to operate and improve our platform. Please see our Cookie Policy for full details.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of the platform constitutes acceptance of the updated policy.