Privacy Policy

Last updated: October 22, 2026

Your privacy matters to us. This Privacy Policy explains how Can Tasar ("we", "us"), the developer of Lyru, collects, uses and protects information when you use the Lyru iOS app and the services behind it. Lyru shows synced lyrics for the song you are playing, in the app, on the Lock Screen, in the Dynamic Island and on CarPlay. We follow applicable data protection laws, including the GDPR, the Turkish Personal Data Protection Law (KVKK) and the California Consumer Privacy Act (CCPA).

The short version

• You do not create an account. Lyru makes an anonymous account for your device the first time you open it.
• We use what is playing to find and time its lyrics.
• We do not sell or share your data for advertising, we show no ads, and we do not track you across other apps and websites.
• Payments are handled by Apple. We never see your card details.

1. Who is responsible

Lyru is developed and operated by Can Tasar, an individual developer based in Istanbul, Türkiye, who is the data controller for the data described here. Contact: support@lyru.app.

2. What we collect

• Anonymous device account. A random key, created on your device and kept in its Keychain, identifies your account. We store only a hash of it. We do not ask for your name, email address or phone number.
• Device and app details. Your language and region settings and the app version. When you contact support, also the iOS version and device model.
• What you play. The title, artist, album and length of the current song, its position, whether it is playing, and whether it comes from the Lyru player, the Music app or Spotify. We use this to find the lyrics and keep them in time, and we keep a history of listening sessions (when they started and ended, and how lyric updates were delivered).
• Push tokens. The tokens Apple gives the app, so we can update the Live Activity with the current line, wake the app in the background when a Spotify song changes, and send you notifications if you allow them.
• Purchases. If you subscribe to Lyru Pro, Apple processes the payment. Our subscription provider, RevenueCat, tells us which product you bought, its price and currency, your store country, and when it renews or ends.
• Usage events. In-app events such as opening the app, finishing onboarding, seeing the Pro screen or starting a Live Activity, linked to your anonymous account. They help us understand what works and fix what does not.
• What you send us. Lyrics reports, your lyrics timing setting, and support messages, including an email address if you choose to give one.

3. What stays on your device

• Apple Music library. With your permission, Lyru reads your Apple Music library on your device to show your playlists and recently played music. That list is not sent to us; only the song you play is.
• Spotify connection. If you connect Spotify, the connection token stays in your device's Keychain. Lyru talks to the Spotify app on your device to read what is playing.

We do not access your contacts, location, photos, microphone or calendar, and we do not use the advertising identifier.

4. How we use information

• To provide Lyru: find lyrics, keep them in time, and update the Live Activity.
• To unlock Lyru Pro and check its status.
• To answer support requests and fix reported lyrics.
• To understand usage and improve stability and performance.
• To meet legal obligations.

5. Service providers

• Apple: App Store distribution, payments, push notifications, and Apple Music playback information.
• Spotify, if you connect it, to read what is playing in Spotify on your device.
• RevenueCat: subscription management.
• LRCLIB, an open lyrics database. We send it the song's title, artist, album and length, never anything about you.
• Hetzner Online GmbH (Germany): hosting of our servers and database.

Each provider has its own privacy policy. We give them only what they need to provide their service.

6. Sharing

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only to the providers above, when the law requires it, to protect rights and safety, or as part of a merger or sale of the app, in which case we will tell you.

7. Retention

• Account, listening and usage data are kept while your anonymous account is in use, and deleted when you ask us to delete them.
• Lyrics are cached per song, not per person.
• Support messages are kept until the request is resolved and for a reasonable time after.

8. Security

We use encrypted connections, authenticated APIs and restricted access to protect your information. No system is perfectly secure, but we work to keep your data safe.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict its processing, and to withdraw consent. You can also complain to a data protection authority. To use these rights, write to support@lyru.app or use Settings → Contact support in the app. We answer within 30 days. Live Activities and notifications can be turned off at any time in iOS Settings. Deleting the app removes the account key from your device, so the server account can no longer be used; contact us if you also want its data deleted.

10. Children

Lyru is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. International transfers

Our servers are in Germany. If you use Lyru from another country, your information is transferred there and to our service providers, with appropriate safeguards where the law requires them.

12. Changes

We may update this policy. We will post the new version on this page and update the date above. Material changes will also be announced in the app.

13. Contact

Can Tasar, Istanbul, Türkiye. Email: support@lyru.app.