Privacy Policy

1. Introduction

Welcome to Lyraboo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our mobile application and related services (collectively, the "Service").

We operate in accordance with the General Data Protection Regulation (GDPR) and the laws of Ukraine.

2. Data Controller

3. Data We Collect

We collect only the data necessary to provide and improve our text-to-speech and audiobook generation services.

3.1 Personal Information

• Account Information: Email address and authentication tokens provided via our single-sign-on providers (Google Sign-In).
• User Identifiers: Unique user IDs created by our authentication system (Firebase UID) and internal database IDs.

3.2 User Content

To provide our core functionality—converting text to audio—we process:

• Uploaded Files: Books, documents, and text files (e.g., PDF, EPUB, TXT) you upload.
• Cover Images: Images uploaded for book covers.
• Generated Content: Audio files generated from your text.

3.3 Usage & Transaction Data

• Usage Statistics: Data on how you use the service, such as total listening hours, number of books created, and books finished.
• Transaction Logs: Records of subscriptions and one-time purchases processed through app stores (Google Play Store or Apple App Store). Note: We do not store or process your credit card numbers directly. Payments are handled entirely by the respective app stores.

3.4 Device Permissions

To function properly, the app may request access to your device's storage (to upload books). You can revoke these permissions at any time in your device settings, though this will limit the app's functionality.

4. How We Use Your Data

We process your data for the following purposes:

1. Service Provision: To convert your uploaded text into audiobooks using AI speech synthesis.
2. Account Management: To manage your subscription, credits, and access rights.
3. Improvement: To analyze usage patterns to optimize system performance and fix bugs.
4. Legal Compliance: To maintain records of transactions for tax and accounting purposes.

5. Third-Party Service Providers

We share data with specific third-party processors who assist us in operating Lyraboo.

5.1 Infrastructure & Hosting

• Railway: Used to host our application backend and databases.
• Google Cloud Platform (GCP):
  • Cloud Storage: Strictly used for storing your encrypted uploaded files and generated audio.
  • Firebase Authentication: Used to manage secure user login and identity.
  • Firebase Crashlytics: Used for error reporting and stability monitoring.

5.2 AI & Text Processing

To generate high-quality audio, analyze text structure, and prepare multi-voice scripts, snippets of your uploaded content are transmitted to the following AI providers:

• Google Gemini (Vertex AI): Used for text analysis and speaker detection.
• RunPod: Serverless GPU infrastructure used for generating audio.
• DeepInfra: External API used for text-to-speech generation.
• Replicate: External API used for AI model inference.

5.3 Payments

• Google Play Store & Apple App Store: We do not view or store your payment card details. We only receive confirmation of your subscription validity and purchase receipts.

6. International Data Transfers

Our primary operations are based in Ukraine. However, third-party service providers (such as Google, RunPod, and Replicate) may process data in the United States or other jurisdictions.

When transferring data outside the European Economic Area (EEA), we rely on robust legal mechanisms, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to ensure your data remains protected.

7. Data Retention & Deletion

We adhere to a strict Data Minimization and Storage Limitation policy.

• Active Accounts: We retain your personal data and uploaded content for as long as your account is active to provide you with access to your library.
• Account Deletion: You may request account deletion at any time via the app settings or by contacting us.
  • Strict Deletion: Upon account deletion, identifiers and uploaded content are permanently removed from our active databases and storage buckets.
• Transaction Records: We may retain financial transaction logs for a longer period strictly as required by tax law.

8. Your Rights

Under GDPR, you have the following rights:

1. Right to Access: Request a copy of the personal data we hold about you.
2. Right to Rectification: Request correction of inaccurate data.
3. Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and data.
4. Right to Restriction: Request that we limit how we use your data.
5. Right to Data Portability: Receive your data in a structured, commonly used format.

To exercise these rights, please contact us at [email protected].

9. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or 16 in certain jurisdictions like the EEA). We do not knowingly collect personal identifiable information from children. If we become aware that we have collected Personal Data from a child without verification of parental consent, we take steps to remove that information from our servers.

10. Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS).
• Encryption of data at rest in our cloud storage buckets.
• Strict access controls limiting staff access to user data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email.