LYRA

Privacy Policy

Refine your search

Last updated · October 17, 2026

1 · What Lyra is

Lyra is a privacy browser and shopping intelligence tool. Its job is to hide predatory commerce (fast fashion, dropshipping, betting, aggressive marketplaces), ads and trackers, and to give you calm, deliberate results. Lyra does not sell, recommend or process any merchandise; it only filters and surfaces information.

The official list of filtered domains is curated and served from our public endpoint at https://lyrasearch.com/v1/. You can also add your own domains to a personal local list and mark brands you respect as part of our "Clean" list (slow buy, sustainable, quality).

2 · The four ways Lyra works

Lyra is delivered in four ways, in this order. Each does the same job on a different surface, and each has its own privacy footprint.

• Apps (Android, iPhone, Mac, PC). The full Lyra browser as a native app, with filtering built in and nothing to configure. The app keeps your lists and preferences locally and, when you are signed in, syncs them with your account. On iPhone and Mac, the subscription can also be bought inside the app, through Apple (see section 7). The Android and PC apps do not sell anything.
• DNS (Safe Mode / Private DNS). System wide filtering that cleans every app on the device, not just the browser. If you enable it, Lyra's DNS resolver processes your device's DNS lookups so it can block filtered domains. We keep, per day, how many lookups were made and how many were blocked, plus the names of blocked domains for 30 days, to show on your profile. Sites you visit that were not blocked are not recorded. We do not sell or share this data.
• Extension (Chrome, Safari, desktop only). Adds Lyra to a browser you already use. It hides filtered result entries on search engines and redirects direct navigation to filtered domains to a local block screen. The match happens entirely in your browser. Phone and tablet browsers do not support extensions. When you are signed in, the extension also sends your account only the daily count of blocks by category, with no site or address, to add up the numbers from all your devices.
• Web (lyrasearch.com). Use Lyra straight from the website, nothing to install. Search runs through Lyra and returns clean results.

3 · What data Lyra collects, and why

Most of what Lyra does happens entirely on your device. Filtering on Google, Bing, DuckDuckGo and Brave Search runs locally, so nothing about your search or the results you saw is sent anywhere. Block counters are calculated on your device. In the apps, when you are signed in, the daily count per category (for example, "12 ads, 3 gambling") is uploaded to your account so the numbers from all your devices add up; it carries no site or address.

Account email, to provide the service and sync across devices. When you sign in we receive your email address (and, where the provider supplies it, your display name) from the sign in provider you chose (Google, Apple, Microsoft, GitHub or Facebook). We use it to identify your account and to send you transactional email. Lyra has no email/password login.

CPF at sign-up (Brazil only), to tie the free trial to one person. In Brazil, sign-up asks for your CPF (Brazilian taxpayer number). We use it to make sure each person gets one free trial, to follow Brazilian tax rules for web purchases, and so that the paid plan also works on your other Lyra accounts with the same CPF, which only happens after the account that paid confirms it by email. It is not used for advertising or shared for marketing.

Data you record, to provide the service and sync across devices. Your personal block list, your personal Clean list and your channel blocks are kept in your account to sync across your devices. Your purchases can be typed by you or read by the app: when you open the order page of Amazon, Mercado Livre, Magalu, Shopee or iFood in the Lyra browser, the app reads the item name, quantity, price and date right there, on your device. These purchases are encrypted on the device before they sync (see the next paragraph). Lyra does not access your account at those stores and does not read your email.

Encrypted sync (zero-knowledge). Your browsing history, open tabs, favorites, purchases and password vault are encrypted on your device, with a key derived from your master password, before they leave it. Our servers store only that encrypted content, to deliver it to your other devices; we do not have the key and cannot read it. If you forget your master password and have neither the Emergency Kit nor a passkey, not even Lyra can recover that data.

Anonymous crash and error telemetry, to fix bugs and outages. When Lyra hits an error, it may send an anonymous report containing a short error message, the app version, and the platform (for example android, ios, web, chrome). Before sending, we scrub the message so URLs and email addresses are removed. Nothing is sent unless you say yes: on the first error the app asks whether it may send a report, and in settings you can leave it always on or off. The extension does not send error reports.

Subscription status, to give you access to what you paid for. We receive your subscription status (trial, active, expired, cancelled, refunded) and a transaction ID from the payment processor. For Apple purchases, we receive the transaction signed by Apple (transaction ID, product, expiry and a link code generated by the app), with no payment data. We do not keep your card details.

What we do NOT collect, ever:

• Your browsing history or the list of sites you visit in readable form (if you use sync, they travel encrypted and we cannot read them)
• Your searches linked to you. Lyra search goes through our servers and through Serper (section 11) to fetch results, and the results stay cached for up to 12 hours, with no link to your account
• The URLs of the pages you visit, outside the encrypted sync described above
• Identifiable analytics or behavioral tracking inside the app (the site's marketing pixel and the purchase event are described in section 11)
• Device fingerprinting data

Community contribution (sharing your personal block/clean lists with the Lyra community) is opt in and off by default. It has its own section below.

Location, only when you ask and only for as long as the request lasts. When you ask Lyra for something near you, or when a site you authorize asks, your device provides your neighborhood, your city and an approximate point of about 100 meters. In a request to the AI, that travels with your question, and nothing beyond it. Lyra does not keep your route, does not follow you in the background and does not record where you have been.

Cloud desktop, for your certificate and to connect WhatsApp. When you open the desktop, a machine of ours runs the program you chose and sends a picture of the screen to your device, about one per second, through our server. Those images are not recorded anywhere: each one replaces the previous one in memory and is gone. The certificate or WhatsApp session stays on the disk that is yours alone, and the machine is destroyed when you close it. This is not zero knowledge, and we would rather say so than promise otherwise: the pixels are born on a machine of ours.

4 · What stays on your device

In the Apps and the Extension, Lyra stores the following only in on device storage (the app's local storage, or chrome.storage.local in the extension), never sent anywhere except as described elsewhere in this policy:

• The official block list (synced from our public endpoint)
• Your personal list of blocks and Clean validations (also synced to your account when you are signed in)
• A list version number and timestamp of last sync
• A session counter showing how many redirects and hidden results you have seen
• Pause state if you have temporarily paused Lyra
• Your chosen interface language
• Ad blocking and tracker blocking toggle preferences
• Cached display name and email of the signed in user (so the account pill renders immediately without a network request)
• A connection token (your account's license key) after you sign the extension in, so it can load the paid curated lists on your behalf; you can remove it by disconnecting in the popup

You can clear all of this at any time by removing the app or extension, or clearing its storage.

5 · What is fetched from our servers

Every few hours, and on demand when you tap Sync now, Lyra makes a standard HTTP GET request to version.json and, if a newer list exists, to domains.json and clean.json. These are static JSON files served from Cloudflare's CDN.

When you are signed in, Lyra also makes authenticated requests to /api/v1/personal to sync your block/clean lists. The request uses a session cookie (HTTP only, secure) issued by Better Auth to identify you.

Cloudflare may retain standard HTTP logs as part of its CDN operation, governed by Cloudflare's privacy policy.

6 · Permissions explained

The native Apps request only the permissions the operating system requires for the features you turn on (for example VPN/Private DNS configuration for Safe Mode). Each is requested with an explanation at the point of use.

The Chrome/Safari Extension declares the permissions below:

• declarativeNetRequest, to redirect direct navigation to filtered domains to the local block screen, and optionally to block ad and tracker requests via bundled rulesets you can toggle. The browser enforces these declaratively; the extension does not see the individual requests.
• storage, to keep the lists (official, personal, Clean) and your local preferences on your device.
• alarms, to schedule the periodic background sync of the list and the auto resume from the "pause for an hour" feature.
• tabs, to open the sign in page, to open the welcome tab on fresh install, and to read the current tab's URL so the popup can offer quick actions ("Block this site" / "Mark as Clean").
• host_permissions: <all_urls>, required so the redirect rules and ad/tracker blocking can apply to any site. Lyra does not read or modify page content beyond hiding result entries on supported search engines (Google, Bing, DuckDuckGo, Brave Search).
• webNavigation, to detect when you navigate directly to a filtered domain so Lyra can show the local block screen (Safe Mode). Lyra does not record, store, or transmit the pages you visit.
• identity, to let you connect the extension to your own paid account with one click. When you choose "Sign in" in the popup, Chrome opens the standard sign in flow for your Lyra account (via chrome.identity.launchWebAuthFlow); on success the extension receives a one time code, which it exchanges for your account's license key. That key is stored on your device (chrome.storage.local) and sent as an authorization header to lyrasearch.com so the paid, curated lists load. Lyra uses this only to authenticate your own account. It does not access any other account, and it receives no identity data beyond the email your sign in provider returns for the account you are signing into. You can disconnect at any time from the popup.

7 · Paid plan

Lyra starts with a 7 day free trial, with no card required up front. After the trial, Lyra requires a paid subscription for the filter to stay active. A days left countdown is shown on the website and in the app.

• International, on the website: US$ 24/year
• Brazil, on the website: R$ 49/year. On iPhone and Mac, through Apple: R$ 59.90/year or US$ 29.99/year (the App Store price includes Apple's commission)

You can subscribe on the Lyra website (lyrasearch.com) or, on iPhone and Mac, inside the app, through Apple. The Android and PC apps and the browser extension do not sell anything. Wherever you subscribe, signing in unlocks the subscription on every surface. Payment is processed by external providers:

• Paddle for international customers (USD; acts as Merchant of Record and handles global tax/VAT). Methods include card, PayPal, Apple Pay, Google Pay and others depending on your country.
• Mercado Pago for Brazilian customers (BRL via PIX, boleto or card).
• Apple for purchases inside the iPhone and Mac apps (App Store subscription, charged and renewed by Apple). Cancellations and refunds of these purchases are handled in your Apple account settings.

The payment processor receives the data needed to process your payment (name, email, billing address, payment method) under its own privacy policy. Lyra receives only your email, the subscription status and a transaction ID (or, for Apple, the signed transaction). We do not store payment data. For website purchases, when the payment is approved, we send TikTok a conversion event with your email and account ID hashed (SHA-256), the amount, the IP address and the browser, to measure campaigns (see section 11). 14-day worldwide refund on website purchases. Cancel anytime on your account page (/billing).

8 · AI assistant channel (MCP)

Lyra exposes an optional channel that lets an AI assistant use Lyra on your behalf, through the Model Context Protocol server at /mcp and the public REST API at /api/v1/*. This channel is governed by a strict two tier consent model:

• Reads (navigate, read a page, look up your own filtered lists) run under a session level consent and never prompt each time.
• Actions that reach the outside world (communicating, buying, sending a message, submitting a form, signing, routing a document) always require your express, per action authorization on screen. These are locked by design and cannot happen silently.

The channel never exposes your vault, your saved passwords, or any signing capability. It cannot read your receipts or order history. Reads never prompt; anything that could spend money or speak for you always does.

9 · Community contribution (optional)

If you enable "Contribute to the community", we send to the server only the following items, with no link to your identifier:

• Domains you added to your personal block list
• Brands you marked positively as Clean

When enough users submit the same domain, it enters a queue for human review and may be added to the official list. The same applies to Clean brands. This is a collective process that helps the Lyra community refine curation without anyone having to identify themselves. Contribution is off by default. You can enable and disable it at any time.

10 · Error reporting (anonymous, opt out)

When Lyra hits an error, it may send a small anonymous report to /api/v1/errors so we can monitor service health and fix crashes. The payload contains:

• An error type (for example pull_5xx), max 64 characters
• A short error message (for example GET /personal 500), with URLs and email addresses scrubbed before sending, max 500 characters
• The app version (for example 1.1.0), max. 32 characters
• The platform (for example android, ios, web, chrome)

The error report does NOT include your email, identity, session cookie, IP address (beyond what our host logs as part of any HTTP request), browsing history, search queries, or the contents of your personal lists. This is operational telemetry only, not analytics. We cannot link an error report to a specific user. You can turn error reporting off in settings.

11 · Third parties who process data for us

We keep the list of processors short and name every one. We do not sell your personal data, and we do not share it for cross context behavioral advertising.

• Cloudflare, hosting, CDN, and our database (Cloudflare D1). Your account data (email, your lists, the purchases you capture) is stored here. Governed by Cloudflare's privacy policy.
• Resend, sends our transactional email (sign in and account notices). Receives your email address for the purpose of delivering that mail. See Resend's privacy policy.
• Paddle, payments for international customers on the web; acts as Merchant of Record and handles global tax/VAT. Receives the data needed to process your payment. See Paddle's privacy policy.
• Mercado Pago, payments for Brazilian customers on the web (PIX, boleto, card). Receives the data needed to process your payment. See Mercado Pago's privacy policy.
• TikTok, marketing campaign measurement. The TikTok pixel runs on our public website (lyrasearch.com), including the subscription pages; in the Android and PC apps, those website pages may open inside the app and load the pixel. It does not load on iPhone, Mac or in the browser extension. When a website purchase is approved, our server sends TikTok the conversion event described in section 7. TikTok never sees your lists, your history or the content of your account. See TikTok's privacy policy.
• Serper, runs Lyra's searches and returns the results. It receives the search text, without your email or your account. See Serper's privacy policy.
• Apple, charges and renews subscriptions bought inside the iPhone and Mac apps and sends us the signed transaction and renewal and refund notices. See Apple's privacy policy.

Your sign in provider (Google, Apple, Microsoft, GitHub or Facebook) also processes the sign in itself under its own privacy policy.

12 · Where your data is stored, and international transfers

Your account data is stored in Cloudflare's infrastructure. The block list and this site are served from Cloudflare's global CDN, which means responses to your device may originate from a Cloudflare edge node anywhere in the world. Payment and email processors named above may process the limited data they receive in their own regions. Where data crosses borders, our processors rely on standard contractual safeguards.

13 · Data retention

We keep your account data (email, your lists, the daily block counts and the encrypted sync content) for as long as your account exists. When you delete your account, that data is removed from our servers. The record of a purchase made through Apple is kept without the link to you, because the purchase belongs to your Apple account and can be restored to a new account. Anonymous error reports are kept only as long as needed for operational monitoring and are not linked to you. Search results stay cached for up to 12 hours, with no link to an account. DNS statistics are kept only in aggregate. Payment and email processors keep the limited data they hold under their own policies and legal obligations (for example, tax records).

14 · Children

Lyra is not directed at children. It is intended for adults and is not directed to children under 13 (or under 16 where a higher age of digital consent applies). We do not knowingly collect information from children. If you believe a child has provided us personal data, contact us and we will delete it.

15 · Your rights and account deletion

Under data protection laws including GDPR (EU), LGPD (Brazil), CCPA (California), PIPL (China) and equivalents, you have the right to access, correct, or delete personal data we hold about you.

The personal data Lyra holds about you, if you have signed in, is:

• Email and name (collected at sign in)
• CPF, Brazil only (collected at sign-up to tie the free trial and, with your confirmation, the plan across your accounts)
• Your personal block list, personal Clean list and channel blocks (synced to your account)
• The purchases and essentials you recorded or that the app read from order pages, encrypted on your device
• The encrypted sync content (history, tabs, favorites, vault), which we store but cannot read
• Subscription state from the payment provider
• The daily block counts per category and, if you bought through Apple, the purchase record

You can delete your account and all of the above at any time, from the website under Profile, Delete account. Deletion removes your data from our servers. You can also email [email protected] to exercise any right, and we will respond within 30 days.

If you enabled community contribution, you can request the removal of the domains and Clean validations you submitted, provided they have not yet been aggregated into the public consensus (after aggregation they become anonymous and inseparable).

16 · Changes to this policy

If we change this policy, the "Last updated" date at the top will change. Material changes will be announced in the app before they take effect.

17 · Who we are and contact

Lyra is operated by Icivitas Ltda (CNPJ 59.206.635/0001-92), headquartered in Brazil. Icivitas Ltda is the data controller responsible for the processing described in this policy.

Questions, complaints, or requests to access, correct or delete your data: [email protected]. We respond to privacy requests within 30 days.

18 · Affiliate links & disclosure

Lyra is associated with VT CASA LTDA (CNPJ 53.990.615/0001-79). Some shopping results in Lyra contain affiliate links: if you click and buy, we may earn a commission from the retailer, at no additional cost to you and without changing the price. This helps keep Lyra running. We participate in the Amazon Associates Program (as an Amazon Associate, we earn from qualifying purchases), Awin and Rakuten Advertising. Affiliate links do not influence our curation or the ordering of results.

When you click an affiliate link, the retailer or its affiliate network may set a cookie to attribute a possible purchase to Lyra. The commission is always paid by the retailer, never by you.