// Legal
Privacy & Terms.
The Privacy Policy and Terms of Service for the Lyra Agent desktop and Android applications, and any Lyra server operated by Straylight Labs.
Lyra Agent Privacy Policy
Effective and last updated: September 8, 2026
This Privacy Policy explains how Straylight Labs, LLC (“Straylight Labs,” “we,” “us,” or “our”) handles information when you use the Lyra Agent desktop or Android application (the “App”) and connect it to a Lyra server.
Lyra is designed for a self-hosted model. Most substantive content is sent to and stored on the Lyra server you choose. If you operate your own server, you control that server data. If another person or organization operates your server, that operator controls its hosting, providers, retention, security, and access practices. This Policy applies to the App and to any Lyra server or related service that Straylight Labs operates for you. It does not govern a server operated by someone else.
INFORMATION LYRA HANDLES
Depending on the features you use and the configuration of your Lyra server, Lyra may handle:
- Connection information, including the server address, API key, device or client identifier, and connection state.
- Conversation content, including messages, prompts, AI responses, conversation titles, and tool results.
- Files and media, including attachments, extracted document text, images, microphone recordings, transcripts, and generated speech.
- Agent state, including memories, journal entries, scheduled jobs, notifications, preferences, evaluations, and usage records.
- Technical information, including timestamps, model and token usage, errors, tool invocation records, logs, and browser profile data.
- Device settings, including local preferences, the selected conversation, notification choices, and optional voice endpoint settings.
INFORMATION STORED ON YOUR DEVICE
The desktop App stores your API key in the operating system credential vault and stores ordinary client preferences locally. The Android App protects your API key with Android Keystore and excludes its app data from Android backup and transfer. The App may retain the server address, client identifier, selected conversation, drafts, notification settings, and voice settings on your device.
Disconnecting from a server removes locally stored connection credentials but does not delete information held by the Lyra server.
Microphone audio is captured only when you activate voice input. The desktop App sends that audio to the speech-recognition endpoint configured for your deployment. Voice output may be generated by a configured text-to-speech service. The current Android App does not request microphone permission.
HOW INFORMATION IS USED
Lyra may use information to:
- Respond to prompts and carry out agent actions you request.
- Store and retrieve conversations, attachments, memories, journal entries, scheduled work, notifications, and settings.
- Send selected content to model, embedding, speech, research, tracing, browser, or integration services configured by the server operator.
- Maintain authentication, security, service limits, audit records, backups, and operational diagnostics.
- Support persistent browser sessions. When enabled, the server browser profile may retain cookies, local storage, and website session state.
- Comply with law and protect users, Lyra, Straylight Labs, and others.
THIRD-PARTY SERVICES AND DISCLOSURES
Lyra can connect to third-party services selected by the server operator, including AI model providers, embedding providers, speech services, LangSmith tracing, websites opened by browser tools, and MCP or API integrations. Prompts, files, tool inputs, credentials supplied in requests, outputs, and related metadata may be disclosed to those services as needed to perform the requested function. Their privacy terms govern their processing. The server operator should review each provider before enabling it.
We may disclose information when required by law, to protect users or the service, to investigate abuse or security incidents, or as part of a merger, financing, acquisition, reorganization, bankruptcy, or transfer of our business or assets.
The App does not include advertising software development kits or a feature designed to sell personal information or share it for cross-context behavioral advertising. A separately operated Lyra server or third-party integration may have practices outside our control.
RETENTION AND DELETION
Client settings and credentials remain on your device until you disconnect, clear App data, or uninstall the App, subject to operating system behavior.
Server-side retention depends on the operator’s configuration and backups. In the current Lyra server design, original conversation messages and journal entries are durable and are not automatically erased when context is summarized or a conversation is archived. Some schedules and pending attachments can be deleted. Other records may require an operator-level database or filesystem process.
To request access, correction, export, or deletion, contact the server operator first. If Straylight Labs operates your server, contact us using the information below. We may verify your request and retain limited information when required for security, legal compliance, dispute resolution, or backup integrity.
SECURITY AND YOUR RESPONSIBILITIES
Lyra uses platform credential storage and API-key authentication, but no system is completely secure. The server operator is responsible for server access controls, software updates, backups, provider credentials, network exposure, and transport encryption.
Use HTTPS or another trusted encrypted network when connecting across an untrusted network. If you explicitly allow HTTP, your API key and content may travel without transport encryption.
Lyra can run commands, access files available to its operating-system account, browse websites, and call configured services. These capabilities may expose or change information. Limit the server account’s permissions, review enabled tools and integrations, maintain appropriate backups, and avoid submitting information you do not want processed by the providers you select.
YOUR CHOICES AND PRIVACY RIGHTS
You may:
- Decline optional microphone and notification permissions or disable related features in the App or operating system settings.
- Disconnect from a server and remove its locally saved credentials.
- Choose your server and, if you operate it, select providers, storage, network security, and retention procedures.
- Ask the applicable server operator to access, correct, export, or delete eligible server data. Depending on where you live, you may have rights to know, access, correct, delete, restrict, object to, or obtain a copy of personal information and to appeal or complain to a regulator. We will not discriminate against you for exercising an applicable privacy right.
CALIFORNIA PRIVACY DISCLOSURES
If the California Consumer Privacy Act applies to Straylight Labs, California residents may request the categories and specific pieces of personal information we collected, correction or deletion of eligible information, and information about disclosures.
Based on the current App design, Straylight Labs does not sell personal information or share it for cross-context behavioral advertising, and we do not have actual knowledge that we sell or share the personal information of consumers under 16. These statements do not describe a separately operated Lyra server or third-party integration.
INTERNATIONAL USERS
The location of server-side processing depends on the server and providers selected by the operator. Where applicable law requires a legal basis for processing, our basis may include performing a contract, our legitimate interests in operating and securing the service, consent for optional features, or compliance with law. Where required, we will use appropriate safeguards for international transfers involving a service we operate.
CHILDREN
Lyra Agent is not directed to children under 13, and Straylight Labs does not knowingly collect their personal information through a service we operate. Users must also meet any higher minimum age required where they live. If you believe a child provided personal information to a Straylight Labs-operated service, contact us so we can review and take appropriate action.
CHANGES TO THIS POLICY
We may update this Policy as Lyra, our practices, or legal requirements change. We will change the last-updated date and provide additional notice when required. We will seek consent before applying a materially different use to previously collected personal information when applicable law requires it.
CONTACT US
Straylight Labs, LLC
PO Box 21983
Seattle, WA 98111
[email protected]
Lyra Agent Terms of Service
Effective and last updated: September 8, 2026
These Terms of Service (“Terms”) govern your use of the Lyra Agent desktop and Android applications and any Lyra server or related service provided by Straylight Labs, LLC (collectively, “Lyra”). Lyra is an AI agent that can generate content and, when configured, use tools that read files, run commands, browse websites, and connect to external services. Review its work and use permissions appropriate to your environment.
AGREEMENT TO THESE TERMS
By downloading, installing, accessing, or using Lyra, you agree to these Terms. If you use Lyra for an organization, you represent that you have authority to bind that organization, and “you” includes the organization. If you do not agree, do not use Lyra. Any separate written agreement between you and Straylight Labs controls to the extent it conflicts with these Terms.
ELIGIBILITY
You must be at least 13 years old and meet any higher minimum age required where you live. If you are under the age of legal majority, a parent or legal guardian must review and accept these Terms for you. You may not use Lyra if applicable law prohibits you from receiving the service.
THE LYRA SERVICE
The applications connect to a user-selected Lyra server. The server may be self-hosted, operated by your organization, or offered by Straylight Labs under separate service terms. Features depend on the server’s configuration and may include conversations, attachments, memory, research, scheduling, notifications, speech, browser automation, file access, command execution, and third-party integrations. Some features may continue running or send notifications after you leave the application.
We may change, suspend, or discontinue features. We may issue updates needed for security, compatibility, or operation. You are responsible for maintaining compatible devices, a reachable server, and network access.
LICENSE
Subject to these Terms and any license distributed with the software, Straylight Labs grants you a limited, non-exclusive, non-transferable, revocable license to install and use the Lyra applications for lawful personal or internal business purposes. This license does not transfer ownership. Open-source components are governed by their own licenses, which control if they conflict with this section.
Unless applicable law or an accompanying license permits it, you may not:
- Copy, sell, sublicense, rent, or distribute proprietary portions of Lyra.
- Bypass security, authentication, access limits, or technical restrictions.
- Reverse engineer proprietary portions of Lyra, except where applicable law gives you a non-waivable right to do so.
- Remove ownership, attribution, or legal notices.
YOUR SERVER AND CREDENTIALS
You are responsible for choosing and administering the server to which the applications connect unless Straylight Labs expressly agrees to operate it for you. Your responsibilities include access controls, network security, TLS, provider accounts, API keys, backups, data retention, updates, and the permissions of the operating-system account that runs Lyra. Keep credentials confidential and notify the relevant server operator promptly if you suspect compromise.
AI OUTPUT AND AGENT ACTIONS
Lyra uses probabilistic AI systems. Output may be inaccurate, incomplete, outdated, offensive, or unsuitable for your purpose. Lyra may misunderstand a request or take an unintended action. You must evaluate output and confirm consequential actions before relying on them.
Lyra is not a substitute for qualified professional advice. Do not rely on it as the sole basis for medical, legal, financial, safety-critical, employment, housing, credit, or other high-impact decisions.
Configured tools can read, create, modify, move, or delete files; run commands with the server account’s authority; send network requests; maintain authenticated browser sessions; and interact with third-party systems. Tool safeguards reduce but do not eliminate risk. Use a dedicated least-privilege server account, keep backups, review integration scopes, and supervise any action that could affect people, money, production systems, or important data.
YOUR CONTENT
You retain any rights you have in prompts, files, and other content you submit. You grant Straylight Labs a limited license to host, copy, transmit, process, and display that content only as needed to provide, secure, support, and comply with law for a service we operate. For a self-hosted server, you authorize the software and providers you configure to process content as needed to perform your requests.
You represent that you have the rights and permissions needed to submit content and direct its processing. You are responsible for reviewing generated content before publishing or using it and for determining whether you may claim, protect, or use rights in that output. Similar or identical output may be generated for others.
ACCEPTABLE USE
You may not use Lyra to:
- Break the law, violate another person’s rights, or evade sanctions or export controls.
- Develop or distribute malware, gain unauthorized access, disrupt systems, or conceal harmful activity.
- Exploit, abuse, or endanger a child or create sexual content involving minors.
- Harass, stalk, threaten, defraud, impersonate, or unlawfully discriminate against another person.
- Process highly sensitive information without the authority, safeguards, and agreements required for that use.
- Use output as the sole basis for a high-impact decision about another person when law or fairness requires human review.
- Interfere with Lyra, probe a Straylight Labs-operated service without authorization, or help others violate these Terms.
THIRD-PARTY SERVICES
Lyra can use services and content provided by others, including AI models, websites, speech services, tracing systems, and integrations. Those services may impose separate terms, fees, usage limits, and privacy practices. Straylight Labs does not control third-party services and is not responsible for their availability, security, content, or conduct. Your use of them is at your own risk and subject to their terms.
FEES AND TAXES
Unless an order, app-store listing, or separate agreement states otherwise, the Lyra applications are provided without a recurring fee from Straylight Labs. You are responsible for charges from hosting, network, AI, speech, tracing, and other providers you choose, plus applicable taxes. Any future paid offering will disclose its price, billing period, cancellation terms, and refund rules before purchase.
PRIVACY
The Lyra Agent Privacy Policy explains how the applications and Straylight Labs-operated services handle information. A self-hosted or third-party server operator may provide a separate privacy notice governing server-side processing.
INTELLECTUAL PROPERTY AND FEEDBACK
Lyra, its branding, and proprietary software are owned by Straylight Labs or its licensors. Except for the license above, these Terms grant no rights in that intellectual property.
If you send feedback, you grant Straylight Labs a perpetual, worldwide, royalty-free right to use it without restriction or compensation. You are not required to provide feedback.
SUSPENSION AND TERMINATION
You may stop using Lyra at any time. You may disconnect the applications and uninstall them. A server operator may separately retain server data under its policy.
Straylight Labs may suspend or terminate access to a service we operate if you materially breach these Terms, create a security or legal risk, fail to pay an amount due, or if continued operation becomes unlawful. Where practical, we will provide notice and an opportunity to cure. Sections that by their nature should survive termination will survive, including ownership, disclaimers, liability limits, and dispute terms.
DISCLAIMERS
TO THE MAXIMUM EXTENT PERMITTED BY LAW, LYRA AND ALL OUTPUT ARE PROVIDED “AS IS” AND “AS AVAILABLE.” STRAYLIGHT LABS AND ITS LICENSORS DISCLAIM ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AND UNINTERRUPTED OR ERROR-FREE OPERATION.
WE DO NOT WARRANT THAT LYRA WILL PRESERVE DATA, COMPLETE A TASK, IDENTIFY EVERY RISK, OR BE COMPATIBLE WITH EVERY SERVER, MODEL, INTEGRATION, OR DEVICE. SOME JURISDICTIONS DO NOT ALLOW CERTAIN DISCLAIMERS, SO PARTS OF THIS SECTION MAY NOT APPLY TO YOU.
LIMITATION OF LIABILITY
TO THE MAXIMUM EXTENT PERMITTED BY LAW, STRAYLIGHT LABS, ITS AFFILIATES, AND LICENSORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, BUSINESS, GOODWILL, USE, OR DATA, ARISING FROM LYRA OR THESE TERMS.
OUR TOTAL LIABILITY FOR ALL CLAIMS ARISING FROM LYRA OR THESE TERMS WILL NOT EXCEED THE GREATER OF US $100 OR THE AMOUNT YOU PAID STRAYLIGHT LABS FOR LYRA DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM. THESE LIMITS DO NOT APPLY WHERE LIABILITY CANNOT LAWFULLY BE EXCLUDED OR LIMITED.
INDEMNITY
If you use Lyra on behalf of a business or organization, that organization will defend and indemnify Straylight Labs, its affiliates, and their personnel against third-party claims, damages, and reasonable costs arising from its content, configured server or integrations, violation of these Terms, or violation of another person’s rights. This section does not apply to individual consumers where prohibited by law.
GOVERNING LAW AND DISPUTES
These Terms are governed by the laws of the State of Washington, without regard to conflict-of-law rules. The state and federal courts located in King County, Washington, will have exclusive jurisdiction, except that either party may seek injunctive relief in a court with jurisdiction and consumers retain any mandatory rights or forums provided by applicable law.
Before filing a claim, contact [email protected] and provide a brief description so the parties can try to resolve it informally for 30 days.
GENERAL TERMS
We may update these Terms by posting a revised version and changing the effective date. If a change materially reduces your rights, we will provide additional notice when required.
You may not assign these Terms without our consent. We may assign them as part of a reorganization, merger, acquisition, or asset transfer. If a provision is unenforceable, the remaining provisions remain effective. Failure to enforce a provision is not a waiver. These Terms and any incorporated agreements are the entire agreement about their subject matter.
CONTACT US
Straylight Labs, LLC
PO Box 21983
Seattle, WA 98111
[email protected]