Privacy Policy

Lyrra is provided by BELKALABS PTE. LTD., a company incorporated in Singapore with UEN 202445147Z and registered address at 68 Circular Road, #02-01, Singapore 049422 (“Lyrra”, “Company”, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use Lyrra, including our website, song-creation flow, purchases, emails, mobile app, and related services (the “Services”).

If you have questions about this Privacy Policy or your personal data, write to hello@lyrra.live or use the contact form. That address is also the contact for our Data Protection Officer.

1. Personal data we collect

We collect only the information needed to provide, secure, and improve Lyrra.

Account information

• Email address
• User ID or account identifier
• Login and authentication information, including one-time login code records
• Display name, if you set one

What you give a song

• The prompt, lyrics, style and voice choices you make
• Photos you upload when you create a song from a picture
• Details about a song’s subject — a name, a relationship, a memory
• The generated lyrics, audio, and cover art created from those inputs

Details you share about another person are personal data about that person. Only share details you have the right to share; we use them solely to create and deliver your songs and to provide, secure, and improve the Services. See section 2.

Purchase and subscription information

• Purchase and subscription status, plan, and billing period
• Checkout and payment-provider identifiers
• Credit balance and the ledger of credit movements

We do not collect or store your full payment card details. Our checkout handles that directly.

Technical information

• Device, browser, IP address, session, cookie, and log information
• Error, security, and performance data
• Basic usage data needed to operate and protect the Services

2. Data about song recipients

When a song is about someone else, we process those details only to generate the lyrics and music you asked for, deliver the song, and support you. We do not use them to contact that person, build a profile of them, or sell them.

If you believe someone has shared your details with Lyrra and you want them removed, write to hello@lyrra.live.

3. How we use personal data

We use personal data to:

• create and manage your account;
• send login codes and service emails, including song-ready notices;
• generate, produce, and deliver your songs;
• manage subscriptions, credits, and refunds;
• provide support and answer legal notices;
• secure the Services, enforce our policies, and prevent abuse;
• maintain, test, and improve the Services;
• comply with legal obligations and enforce our rights.

4. Subprocessors

We use service providers, in the categories below, to run Lyrra. Each processes data only as needed to provide its service to us.

• Hosting and infrastructure providers — authentication, database, hosting, logs, and storage and delivery of your generated audio and images
• AI model providers — generate the lyrics and music in your songs
• Payment processing — checkout, plans, and subscription status
• Email delivery — transactional email
• Sign-in providers you choose — Google or Apple, only if you sign in with one of them

Payment providers act as independent controllers for the payment data they hold, under their own terms and privacy notices. We will update this list before adding a category of subprocessor that handles personal data.

5. Cookies and similar technologies

Lyrra sets strictly necessary cookies only: one to keep you signed in, one to carry a purchase from the checkout funnel to your account, and one to record that we received a Global Privacy Control signal from your browser. There are no advertising or analytics cookies on this site. The Cookie Policy names each one and what it does.

6. Sharing of personal data

We may disclose personal data:

• to the subprocessors listed above, including for payment processing;
• if required by law, court order, regulator, or legal process;
• to protect the rights, safety, and security of Lyrra, our users, or others;
• in connection with a merger, acquisition, financing, restructuring, or sale of our business.

7. Sale, sharing, and Global Privacy Control

We do not sell or share personal information as defined by the CCPA/CPRA. We do not disclose personal data for cross-context behavioural advertising, and we do not exchange it for money or other value.

We honor the Global Privacy Control signal. When your browser sends one, we record that preference for your session. Because we do not sell or share personal data in the first place, the signal changes nothing about what we do — it is honored regardless. See Do Not Sell or Share.

8. Cross-border transfers

We are based in Singapore, and our providers process personal data in other countries, including the United States.

Where required, we take reasonable steps to ensure that personal data transferred overseas receives a comparable standard of protection.

9. Retention

We keep personal data while your account is active or as needed to provide the Services (including keeping your songs available), comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

Login codes expire within minutes. Throttling records are deleted automatically after a few days.

10. Exporting and deleting your data

Both are self-serve, from your account settings — no email to us, no waiting on a human.

• Export hands you your account data and the list of your songs.
• Deletion starts a 14-day grace period. During it, signing in again cancels the deletion. After it, your account, your songs and their audio files are deleted and cannot be recovered.

One thing survives deletion: financial records — the credit ledger and the purchase record — are retained in pseudonymized form, with your account identifier replaced by an irreversible hash. We are required to keep records of transactions; we are not required to keep your identity attached to them, so we do not.

Deleting your account does not cancel a subscription bought through our checkout. Cancel it first, or it keeps billing.

11. Your rights and choices

Depending on where you live, you may have rights to:

• know what personal data we hold about you and access it;
• correct inaccurate personal data;
• request deletion of your personal data;
• opt out of the sale or sharing of personal data (we do neither);
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• opt out of marketing emails;
• be free from discrimination for exercising any of these rights.

Use the account controls first — they are faster than we are. For anything they do not cover, use the contact form or write to hello@lyrra.live from the address on your account. We may need to verify your identity before responding.

12. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure.

No internet service can be guaranteed completely secure. You are responsible for keeping access to your email account secure.

13. Children

Lyrra is not intended for children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The effective date above shows when it was last updated. If we make material changes, we will provide notice where required.

16. Contact us

BELKALABS PTE. LTD.
UEN: 202445147Z
Registered address: 68 Circular Road, #02-01, Singapore 049422
Privacy / DPO contact: hello@lyrra.live