LYRA · BILLING INFORMATION
Privacy notice
This notice describes Lyra’s vehicle connection, content, support and payment data practices. Updated October 22, 2026.
Aggregate page-load notifications
We count successful loads of public pages, including repeat visits and refreshes, without identifying unique visitors. This counter does not set cookies, use browser storage, or retain IP addresses, device identifiers, request paths or individual browsing records. Recognizable bots, prefetch requests, administrative pages and API requests are excluded where detectable. Every ten loads can generate an operational summary to the site operator through Resend; the email contains only a cumulative count and batch timestamp, not visitor data. Completed notification records are eligible for deletion after 180 days; aggregate totals and unresolved delivery records are retained for operation and recovery.
Who operates Lyra
Lyra is operated by Tang Hu, an individual based in the United States. Contact support@lyranow.app about this notice or your information. Lyra is independent of Tesla.
Tesla sign-in and your connection
You enter your Tesla password and verification code on Tesla’s official sign-in pages, not into Lyra. Tesla returns authorization information to Lyra so we can access the permissions you approve. We store encrypted access and refresh tokens, connection identifiers, authorized vehicle identifiers and names, and encrypted vehicle identification numbers. Verified Tesla identity is used to associate your connections with a stable Lyra account. Encryption is a safeguard, not a promise that no security incident can occur. Never send passwords, verification codes or tokens to support.
Music, motion and optional navigation
We process the current song title, artist, album, media source, playback status, duration and progress to find and synchronize lyrics and artwork. Vehicle speed and gear support driving-related display behavior. If you grant the optional location permission, we also process navigation destination names, travel time and distance, expected arrival battery and traffic delay when available. Destination names can reveal sensitive places. Our configured telemetry fields do not request a continuous GPS-coordinate or route history. Declining the optional permission disables the related navigation feature; permission labels are shown by Tesla.
Preferences and content requests
We store relevant lyric-version, artwork and reading choices, settings and listening records to remember selections and synchronize supported screens. Some preferences and cached data also remain in browser storage. Song and artist queries are sent to music, artwork, lyrics or pronunciation services as needed to provide results; these providers may receive your search terms. Shared content caches reduce repeat lookups and conversions. A shared content cache is distinct from your personal account records.
Website operation and security
Hosting and network services process requests and technical information such as IP addresses and browser information to deliver and protect the website. Lyra uses hashed identifiers for rate limits and aggregated usage counters for service monitoring. Hashing does not make all records anonymous. Essential session cookies keep you signed in for up to 90 days unless revoked earlier; browser preferences support the player. This information supports service delivery, abuse prevention and operational diagnostics.
Payments
Eligible purchases use Stripe Managed Payments and Link. The legal seller and applicable purchase terms are identified at checkout and on your receipt. Payment and billing information is handled under the payment provider’s privacy notice. Lyra keeps customer, transaction and subscription references, selected-vehicle associations, payment amounts, tax, refunds, billing periods and access records. Lyra does not store full payment-card numbers. Payment notifications are verified by the server before processing and reconciliation. A successful browser payment screen alone does not grant access.
Service providers and support
The service uses Sites and Cloudflare for website hosting, database and file storage, AWS for supporting telemetry and media services, Tesla for authorized vehicle access, and external content providers. In-page support tickets and staff replies are encrypted in our hosted database. A separate essential cookie retains access to your tickets in the same browser for up to 180 days; it is not a Tesla credential. Clearing that cookie loses access to the ticket list. Email sent separately to support may be handled through Porkbun forwarding, our support mailboxes and Help Scout. In-page tickets do not accept attachments. Stripe and Link handle payment information, transaction communications and payment support for eligible purchases. Providers and operators may process information outside your country, including in the United States. Send only the information needed for your support request and redact private details from screenshots.
Retention and safeguards
We retain account, connection, preferences and listening information while needed to operate your account and address support or security issues. Logging out revokes a session; it does not delete all account data. Financial and security records may need to remain for accounting, dispute or legal reasons after a deletion request. Processed payment-notification payloads are eligible for cleanup seven days after receipt; pending or disputed processing is retained for reconciliation. Shared content caches have capacity limits and idle cleanup policies, not a guarantee that your personal data is deleted after the same period. We do not promise immediate deletion from every backup or third-party system.
Your choices and requests
You can adjust available settings and revoke Lyra access through Tesla’s account controls. You may contact support@lyranow.app to request access, correction, export or deletion of your personal information. We verify the requester's authority before disclosing or deleting data and explain any information we must retain. Depending on where you live, additional rights to restrict or object to processing, portability, withdrawal of consent where applicable, or the right to contact your local privacy regulator may apply. There is currently no automatic self-service export or account-deletion button. Cancellation of subscription renewal, disconnecting a vehicle and deletion of personal data are different actions; tell us which you need. Do not email identity documents or credentials unless a specific, appropriate verification process has been agreed.
Register a privacy request
Changes to this notice
We update this page when our data practices change. Material changes will be highlighted through the service or another appropriate channel. Review the date above and contact support if you need clarification before connecting your vehicle.