Draft pending legal review — October 6, 2026. This text isn't final yet: a lawyer will review it before it's published as final.

Privacy policy

• 1. Who we are
• 2. Data
• 3. Why
• 4. Legal basis
• 5. Who we share with
• 6. Google data
• 7. Help improve Lyron
• 8. Other countries
• 9. How long
• 10. Your rights
• 11. Minors
• 12. Security
• 13. AI
• 14. Cookies
• 15. By region
• 16. Changes

1. Who's responsible

The party responsible for your personal data is [TO BE FILLED IN: legal name], located at [TO BE FILLED IN: address]. For any privacy matter, email [TO BE FILLED IN: privacy email]. The person or team in charge of personal data is [TO BE FILLED IN].

If we offer Lyron in the European Union or the United Kingdom, our representatives there will be listed here: [TO BE FILLED IN, if applicable].

2. What data we handle

Your account (on Lyron's central service)

Your name, email, a hash of your password (never the password itself), your Apple or Google ID if you sign in that way, your language, country, and time zone, your plan and its dates, your open sessions (which device), invitations, and a security log (sign-ins, plan changes, and notices from your computer).

What you do with Lyron (on YOUR Lyron computer, not on the central service)

Your conversations, voice notes and their transcripts; files you upload or Lyron creates; your memory («About you»); your tasks and their steps (with screenshots of the pages it visits); your schedule, goals, lists, and expenses; your agents and their notes, your bots, teams, and routines; your podcast; the sites and apps you publish (and what their visitors leave in them); Lyron's browser with your sessions on the sites you sign in to; the Vault (encrypted) and the keys for the services you connect (encrypted); the cost of each AI step (60 days); and, if you link your WhatsApp on its computer, your chat list (for your routines) and the messages your apps send with your permission.

Sensitive data, only if you choose to share it

Health (for example, Apple Health or what you talk about with a well-being agent) and finances (bank accounts, read-only). We only handle it with your express consent, and you can withdraw it at any time. More in the Consumer Health Data Privacy Policy.

Waitlist

If you request an invite or ask us to tell you when an app is out: your email, your language, country, and time zone, the devices you're interested in, and the Lyron you picked on the site.

This site

It doesn't use trackers or ads (see cookies).

3. Why we use it

Needed to provide the service: creating and maintaining your account and your computer; getting done what you ask Lyron to do; sending your notifications; security and abuse prevention; billing, once it exists; support; and complying with the law.

Only if you turn them on: «Help improve Lyron» (anonymized examples for Lyron's own model; off by default, and you can delete them) and product news. You can say no to these at any time in your settings or by emailing [TO BE FILLED IN: privacy email], without affecting the service.

4. Legal basis (European Union and United Kingdom)

Our contract with you (providing the service), your consent (health, improving Lyron, and product news), our legitimate interest (keeping the service secure), and legal obligations.

5. Who we share it with

With companies that process data on Lyron's behalf and under contract (processors), and only what's needed:

• Fly.io: hosts the central service and your Lyron computer, in the region closest to your country.
• The AI companies that answer for Lyron: OpenRouter and the open-model providers it picks (only those that don't store or train on what they receive); and OpenAI and Anthropic, whose API terms say they don't train on it (OpenAI keeps it for up to 30 days to monitor for abuse). They only receive what's needed to answer, without your private details.
• The web search service Lyron uses to search the internet for you.
• Email and calls, once they're active: Resend and Mailgun (email) and Twilio (calls).
• Apple and Google, if you sign in with them or get notifications on your phone.
• The services you connect and the sites Lyron visits for you, which receive what your request needs (for example, your search, or your delivery address if you approve it).

We don't sell your data or use it for ads. If a transfer ever needs your consent, we'll ask you separately and you can say yes or no [TO BE FILLED IN: transfer clause, with counsel].

6. Google data

Once the Gmail, Google Calendar, and Google Drive connections exist: Lyron's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That data is never used to train AI models.

7. «Help improve Lyron»

It's off by default. If you turn it on, anonymized examples (no emails, phone numbers, or card numbers) are kept to train Lyron's own model, and you can delete them anytime. This program never uses Google Workspace data, data that comes in through WhatsApp, or responses from OpenAI.

8. International transfers

Some of these companies are in the United States or other countries. Transfers are made with the safeguards each place's law requires [TO BE FILLED IN: transfer mechanism, with counsel].

9. How long we keep it

• For as long as you have an account. When you delete it, your Lyron computer and everything Lyron knows about you are deleted. Automatic disk backups at Fly.io last up to 5 days.
• The cost of each AI step: 60 days.
• The waitlist: until you create your account, or 12 months.

10. Your rights

You can access, correct, and delete your data, and object to how it's used (including automated decisions); you can also ask for a portable copy, restrict its use, withdraw your consent, and file a complaint with your regulator (for example, in California, the California Privacy Protection Agency; in the UK, the ICO; in Spain, the AEPD).

How: in the app («About you», «forget this», «Delete my account») or by emailing [TO BE FILLED IN: privacy email]. We'll reply within 20 business days (and within one month in Europe). Until «Download my data» is ready, you can request a copy of your data by email.

11. Minors

Lyron is only for people [18] or older. Well-being and friend agents are always 18+.

12. Security

An isolated computer for each person, an encrypted Vault and keys, an optional personal key, private details that never reach the AI, and a Guardian that checks what goes out. To maintain the service, Lyron's operator has technical access to the computers and only uses it for that. If there's ever a security breach that affects you, we'll tell you right away.

13. Artificial intelligence

Lyron is an AI: it can make mistakes, and it acts on your instructions and permissions. It doesn't make decisions with legal effects about you. What it creates with AI (images, voices, podcasts) is AI-generated content.

14. Cookies and browser storage

None of them are for analytics or advertising. Since there's no cross-site tracking, your browser's «Do Not Track» signal doesn't change anything here.

15. By region

United States: consumer health data (for example, under Washington's law) has its own Consumer Health Data Privacy Policy; California residents can contact us about their rights at the email above. European Union and Spain: the General Data Protection Regulation; the legal notice is in the terms. United Kingdom: the UK GDPR. Mexico: the Federal Law on the Protection of Personal Data Held by Private Parties. [TO BE FILLED IN: region-specific sections, with counsel]

16. Changes to this policy

If we change this policy, we'll tell you in the app and by email before it takes effect. Effective date: [TO BE FILLED IN].