ELYRA

Privacy Policy

Effective date: August 24, 2026 · Last updated: August 24, 2026

Elyra World LLC (“Elyra,” “we,” “us,” or “our”) operates the Elyra mobile application and related services (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Elyra, you agree to the collection and use of information as described in this Privacy Policy.

1. Who We Are

Elyra World LLC
5473 Blair Rd, Ste 100-72168
Dallas, TX 75231
Contact: support@elyraworld.com

2. Information We Collect

Information you provide to us:

• Account information: email address, password, and date of birth when you create an account. We collect your date of birth to verify that you meet our minimum age requirement, and we store it together with a record of your acceptance of our Terms of Service and this Privacy Policy.
• Profile information: display name, username, profile photo, the city and state you choose to associate with your account, and optional details such as a short bio or tagline and interests you select. You may optionally provide additional information (such as a note about why you'd like to join) during onboarding.
• Content you create: posts, comments, messages in City Rooms and direct messages, event RSVPs, photos you upload (profile photos, post images, and Link-Up albums), Assists board posts and responses, reports you submit, and any other content you share through the Service.
• Communications: information you provide when you contact us for support.

Information collected automatically:

• Push notification token: if you enable notifications, we collect a device push token used to deliver them.

Device permissions (only when you choose to use the related feature):

• Camera and photo library: to let you add a profile photo, post images, or Link-Up album photos. We access only the photos or camera input you choose to share.
• Calendar: if you choose to add a Link-Up event to your device calendar, we create that event. We do not read your existing calendar entries.
• Notifications: to deliver push notifications you've enabled.

What we do NOT collect: we do not collect your precise (GPS) location, phone number, contacts, or advertising data. We do not use third-party analytics, advertising, or crash-reporting services. The only location information we have is the city and state you choose to enter.

3. AI-Assisted Features

Elyra offers an optional in-app feature that lets you ask questions about a post (“ask about this post”). When you use this feature, the content of the post, the author's display name, username, and role, and the questions you type are sent to our AI provider, OpenAI, to generate a response. The response is shown to you in the app. Our API credentials are held on our servers and are not shared with you or other users. We do not send OpenAI the identity of the person asking (such as your name, email, or account ID) — only the post content, the author's public profile details, and your questions. These conversations are ephemeral: they are not stored in our database and are not visible to any other user. AI-generated responses may be inaccurate or incomplete, and you should not rely on them as professional advice. If you do not want your questions processed this way, do not use the feature.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Create and manage your account and verify eligibility;
• Display your profile and content to other users as intended by the features you use;
• Enable community features such as the feed, City Rooms, Link-Ups, direct messages, and the Assists board;
• Power the optional AI “ask about this post” feature described in Section 3;
• Send you notifications, updates, and service-related communications;
• Moderate content, enforce our Terms of Service and Community Guidelines, and keep the community safe;
• Respond to your requests and provide customer support;
• Detect, prevent, and address fraud, abuse, security issues, and technical problems;
• Comply with legal obligations.

5. How We Share Your Information

We do not sell your personal information. We may share information as follows:

• With other users: your profile, posts, comments, messages, and other content you choose to share are visible to other users as intended by the feature.
• With service providers: we use third-party providers to operate the Service, including cloud hosting, database, authentication, and storage (Supabase); push notification delivery (Expo); and AI processing for the “ask about this post” feature (OpenAI), as described in Section 3. These providers process data on our behalf.
• For legal reasons: to comply with applicable law, legal process, or enforceable governmental requests; to enforce our terms; or to protect the rights, safety, and property of Elyra, our users, or others.
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets.
• With your consent: where you direct us to share information.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we promptly delete your personal information and content, including uploaded photos, except where we are required to retain limited information to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Your Rights and Choices

• Access and update: you can review and update your profile information in the app.
• Account deletion: you can permanently delete your account and associated data from within the app (Profile → Delete Account).
• Notifications: you can turn push notifications on or off in your device settings.
• Permissions: you can control camera, photo, and calendar access in your device settings.
• Blocking and reporting: you can block other users and report content through the app.

Depending on where you live, you may have additional rights described in Section 9.

8. Children's Privacy

The Service is not directed to children under 17. We do not knowingly collect personal information from children under 17. If we learn we have collected such information, we will delete it.

9. State and Regional Privacy Rights

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to access and delete it, to correct inaccuracies, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. To exercise these rights, contact us at support@elyraworld.com.

Other U.S. states: residents of states with comprehensive privacy laws may have similar rights to access, correct, delete, and opt out. Contact us to exercise them.

EU/EEA/UK users (GDPR): if you are in these regions, you have rights to access, rectify, erase, restrict, and port your data, and to object to processing. Our legal bases for processing include performance of a contract, our legitimate interests, your consent, and compliance with legal obligations. To exercise these rights, contact us at support@elyraworld.com.

10. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your information may be processed and stored in the United States or other countries where we or our service providers operate. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last Updated” date and, where required, provide additional notice.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Elyra World LLC
support@elyraworld.com
5473 Blair Rd, Ste 100-72168, Dallas, TX 75231