Elemental Genius — HomeElemental GeniusElemental Genius

Virylium Privacy Policy

Virylium Privacy Policy Elemental Genius LLC | virylium.com/privacy Effective Date: June 19, 2026

1. Introduction

This Privacy Policy describes how Elemental Genius LLC ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use Virylium (the "App"), including its AI companion Lyra Solus, personal brand management features, third-party platform integrations, and Google Drive memory system. By using Virylium, you agree to the practices described in this Policy. If you do not agree with this Policy, do not use the App. For questions, contact us at [email protected].

2. Information We Collect

2.1 Account Information

When you create a Virylium account, we collect:

  • Your name and email address (via Google Sign-In OAuth)
  • Google account profile photo (optional, used for in-app display)
  • Subscription status and billing history (managed via Google Play)
  • Account creation date and last login timestamp

2.2 Brand Profile & Lyra Soul File

Virylium's core feature involves Lyra Solus, your AI personal brand conductor. During onboarding and ongoing use, we collect and process:

  • Your responses to the Lyra brand interview (11 onboarding questions covering your brand identity, voice, values, and goals)
  • Brand preferences, tone settings, and content strategy inputs you provide
  • The generated 'Lyra Soul File' — a structured YAML/Markdown document summarizing your brand identity

IMPORTANT — Google Drive Storage: The Lyra Soul File is stored in YOUR personal Google Drive account, in a folder named 'Virylium' created with your permission. We do not store this file on our servers. You own this data entirely and may access, edit, or delete it at any time through Google Drive. We access this file only to read and update your brand profile within the App.

2.3 Third-Party Platform OAuth Connections

Virylium connects to third-party platforms to support personal brand management. When you authorize these connections, we collect and store OAuth access tokens and, where applicable, refresh tokens. The platforms we support include:

  • LinkedIn — profile data, post publishing, audience analytics
  • X (Twitter) — profile data, post publishing, analytics
  • Instagram / Meta — profile data, post scheduling, insights
  • TikTok — profile data, content publishing (where available)
  • YouTube — channel data, video insights
  • Other platforms as added and disclosed within the App

OAuth tokens are encrypted at rest and in transit. We access third-party platform data only to perform functions you explicitly request within the App. We do not sell or share your third-party platform data with any other party. You may revoke any OAuth connection at any time through the App's Settings or through the respective platform's security settings.

2.4 AI Interaction Data

When you interact with Lyra Solus, we process:

  • Your prompts, questions, and inputs to Lyra
  • Lyra's responses and generated content recommendations
  • Conversation history maintained within your active session
  • Brand content drafts and suggestions generated by Lyra

AI interactions are processed through our backend infrastructure hosted on Google Cloud Run (Lyra runtime). Interaction data may be retained in Firestore for session continuity and feature functionality. We do not use your AI interactions to train third-party AI models without your explicit consent.

2.5 Usage & Analytics Data

  • App feature usage patterns (which features you access and how frequently)
  • Session duration and frequency
  • Device type, operating system version, and app version
  • Crash reports and error logs
  • Subscription conversion and retention events

2.6 Data We Do NOT Collect

  • We do not collect your payment card details. All billing is handled directly by Google Play.
  • We do not access your full Google Drive beyond the Virylium folder we create with your permission.
  • We do not read, access, or process your email, contacts, or calendar unless a specific feature you enable requires it and is explicitly disclosed.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing and operating the Virylium App and Lyra Solus experience
  • Storing and retrieving your Lyra Soul File from your Google Drive
  • Connecting to and interacting with third-party platforms via OAuth on your behalf
  • Generating personalized brand content, strategy, and recommendations
  • Processing and managing your subscription through Google Play Billing
  • Communicating with you about your account, subscription status, and updates
  • Diagnosing technical issues, improving app performance, and preventing fraud
  • Complying with our legal obligations

4. Google Drive Integration — Special Disclosure

Virylium's use of the Google Drive API is limited to the following:

  • Creating a 'Virylium' folder in your Google Drive upon your first use
  • Writing your Lyra Soul File (lyra.soul) to that folder
  • Reading your Lyra Soul File to load and update your brand profile
  • Updating your Lyra Soul File as your brand profile evolves

We do not access any other files, folders, or content in your Google Drive. Our use of Google Drive data is not used for advertising or marketing purposes. Our use of Google APIs complies with Google's API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing & Disclosure

We do not sell your personal information. We share your data only in these limited circumstances:

5.1 Service Providers

We use the following third-party service providers, each bound by appropriate data protection agreements:

  • Google Cloud Platform — backend infrastructure, Firestore database, Cloud Run AI runtime
  • Google Firebase — authentication and real-time data services
  • Google Play — subscription billing and payment processing
  • Vertex AI / Google Gemini — AI model powering Lyra Solus

5.2 Third-Party Platforms (at Your Direction)

When you authorize OAuth connections, we transmit data to and from those platforms on your behalf. This is a service function, not a data sale.

We may disclose your information if required by law, court order, or to protect our rights or the safety of our users.

6. Data Retention

  • Account data: retained while your account is active, deleted within 30 days of account deletion request
  • Lyra Soul File: stored in your Google Drive — deletion is entirely in your control
  • Firestore session data: retained for 90 days of inactivity, then purged
  • OAuth tokens: deleted immediately upon revocation or account deletion
  • Crash logs and analytics: retained for 12 months in aggregate, anonymized form

7. Your Rights & Controls

7.1 Access & Portability

You may request a copy of personal data we hold about you at any time by contacting [email protected].

7.2 Correction

You may update your account information within the App or by contacting us.

7.3 Deletion

You may delete your Virylium account at any time through Settings > Account > Delete Account. Upon deletion, we will: remove your account credentials and Firestore data within 30 days, revoke all OAuth tokens, and remove our App's access to your Google Drive. Your Lyra Soul File will remain in your Google Drive unless you delete it manually — this is by design, as you own that data.

7.4 OAuth Revocation

You may revoke any third-party platform connection at any time in Settings > Connections or through the third-party platform's own security settings.

7.5 Google Drive Revocation

You may revoke Virylium's Google Drive access at any time through your Google Account settings at myaccount.google.com. Note that revoking Drive access will disable the Lyra Soul File memory feature.

8. Security

We implement industry-standard security measures including:

  • TLS/HTTPS encryption for all data in transit
  • Encryption at rest for OAuth tokens and sensitive credentials
  • Firebase Authentication for secure account access
  • Google Cloud security controls for backend infrastructure
  • Regular security reviews of our OAuth and API integrations

No system is completely secure. If you believe your account has been compromised, contact us immediately at [email protected].

9. Children's Privacy

Virylium is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at [email protected].

11. International Users

Virylium is operated from the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States. By using the App, you consent to this transfer.

12. AI-Generated Content Disclosure

Lyra Solus is an AI system powered by large language models (Google Gemini via Vertex AI). Content, recommendations, and brand strategy suggestions generated by Lyra are AI-generated and should be reviewed by you before use. AI outputs may not always be accurate, complete, or appropriate for your specific situation.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting a notice within the App and updating the Effective Date above. Continued use of the App after changes constitutes your acceptance.

14. Contact Us

Elemental Genius LLC Elemental Genius LLC Rochester / Brockport, NY, USA Email: [email protected] Website: virylium.com