Privacy
Draft for review, August 26, 2026
Draft for review. This policy is not yet in effect.
Lyra Comment is built around local files and accountless use. We collect only the information needed to operate the product website, deliver purchases and licenses, recover licenses, provide updates, prevent abuse, and answer support requests.
Your files stay yours
Lyra Comment works with files stored on your Mac. We do not receive your documents, comments, or other working content just because you use the app. Lyra Comment does not require a Lyra account.
You control backups, storage locations, sharing, and any synchronization service you choose to use with those files.
Dictation and transcription
On-device dictation is the default. If you explicitly select a supported cloud provider, the app sends the recorded audio or live audio stream needed for transcription to that provider using the provider credential you add. Lyra does not silently switch from on-device processing to a cloud provider.
Provider credentials are stored in the macOS Keychain for the app that uses them. Temporary recording inputs are removed after transcription, cancellation, or failure. If you choose to keep recordings, the retained audio stays in local app storage. A cloud provider processes submitted audio under its own terms and privacy policy.
Purchases, licenses, and recovery
Stripe and Link handle checkout and payment information. We do not receive your full card number. We receive information needed to fulfill and support the order, such as your email address, the product purchased, price and currency, payment status, provider references, and refund or dispute status.
Our licensing service uses that information to issue and recover accountless licenses. It stores one-way representations of license keys and recovery tokens rather than their plaintext values. Lyra Comment stores its license material in the macOS Keychain. Resend processes your email address and transactional message content when it delivers a purchase or recovery email from licenses@lyracomment.com.
Software updates
When Lyra Comment checks for updates or downloads one, the update host receives ordinary request information such as an IP address, time, requested file, and app networking details. Update requests do not include the files you work with in Lyra Comment.
Website analytics
We use Cloudflare Web Analytics to understand aggregate traffic. It counts visits and page views and reports broad information such as the referring website, country, device type, operating system, and page performance.
The analytics beacon does not use cookies, persistent visitor identifiers, fingerprinting, session replay, inferred demographic profiles, or cross-site tracking. We do not use it to measure bounce rate or dwell time. Cloudflare processes this analytics data as our service provider.
Your analytics choice
We respect Global Privacy Control and Do Not Track signals. You can also disable aggregate analytics for this browser. The preference is stored only in your browser so the analytics beacon stays off.
Support and communications
If you contact us, we receive the email address, message, attachments, and other information you choose to send. We use it to answer the request, investigate a problem, prevent abuse, and keep an appropriate support record. Purchase and recovery emails are transactional. We do not use them to enroll you in marketing without a separate choice.
How we share information
We do not sell personal information. We share information with service providers only as needed for hosting, payments, fraud prevention, email delivery, licensing, updates, analytics, and support. We may also preserve or disclose information when reasonably necessary to comply with law, protect people or the service, investigate fraud or abuse, or complete a corporate transaction subject to appropriate protections.
Retention and security
We keep personal information only as long as reasonably needed for the purpose described here, including delivery, recovery, accounting, tax, fraud prevention, disputes, support, and legal obligations. Retention periods differ by record and service provider.
We use access controls, encryption where appropriate, secret redaction, and limited operational logging. No method of storage or transmission is completely secure.
Your choices and rights
Depending on where you live, you may have rights to ask what personal information we hold about you, receive a copy, correct it, delete it, or object to certain uses. We may need to verify your request and may retain information where the law permits or requires it. Contact us at the address below.
Children
Lyra Comment and its website are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can investigate and delete it where appropriate.
Changes
We may update this policy when Lyra Comment, its providers, or legal requirements change. We will post the revised policy here, change the effective date, and provide additional notice when required.