Your account (email, display name, a password hash — never the password), your workspace content (kits, presets, saved prompts, melodies), your credit ledger, and which invite code you joined with. Payments are handled by Stripe; we never see or store card numbers — only Stripe's customer and subscription references.

When you generate, the musical brief you compose (kit fields, style tags, your instructions) is sent to an AI provider through our own gateway to produce the result. We log these calls for cost accounting and abuse prevention. We don't sell your data or use your private kits to train models.

We run LyraPulse, our own privacy-first analytics (no third-party ad trackers, no cross-site profiles): page views and product events such as "signup" or "purchase", attributed to your workspace so we can support you and understand what's used.

You can export your own content from the app, and you can ask us to delete your account and its data — email [email protected] and we'll confirm within 30 days. Data lives on servers in the EU.