Lyra Prime
Privacy Policy
Last updated: 26 October 2026
Draft for owner review. This policy describes behavior verified in the app source. Please review and confirm the speech-recognition note below before publishing and linking it from Google Play Console.
Lyra Prime (“the app”) is a client for an AI assistant server that you configure and control. The developer does not operate a backend for this app and does not receive your conversations.
What the app handles, and where it goes
- Your messages & chat content → your own server. Text you send, the selected model name, and a session id are sent over HTTPS to the server URL you enter in Settings. This goes to infrastructure you control — not to the developer or any shared service. Plain
http://is refused for non-local servers. - Your API keyis stored in your device’s encrypted storage and sent only to your configured server as a bearer token. It is excluded from device backups.
- Voice input (microphone).When you use voice, audio is handled by your device’s speech-recognition service. Depending on your device and its settings, that service may process audio on-device or via its provider (for example, Google) under that provider’s policy. The app does not send your audio to the developer. Recognized text is then sent to your server as above.
- Voice outputis produced by your device’s text-to-speech engine.
- Fonts are bundled inside the app. No font is downloaded and no font CDN is contacted.
- Local data on your device: server URL, preferences, and a list of recent conversations (ids, titles, timestamps). The optional App Lock uses your device biometric/PIN via the operating system — no biometric data leaves the device.
- External links: tapping the developer link opens ryn.bd.
What the app does not do
- No analytics, advertising, tracking, or crash-reporting SDKs.
- The developer operates no server for this app and collects none of your content.
Data retention & deletion
- Local data is removed when you uninstall the app. “New conversation” starts a fresh session.
- Conversation data stored on yourserver is governed by your server’s configuration and is under your control.
Security practices & your choices
- All server requests use HTTPS; TLS verification is never disabled.
- Your API key is held in encrypted device storage and excluded from backups.
- You choose the server, the model, and whether to enable voice and the biometric lock.
Children
This app is not directed to children under 13.
Changes
This policy may be updated; the “Last updated” date will change accordingly.
Contact
Questions about privacy? Contact Md Raihan Hasan at contact@ryn.bd.
