Kyara Lab · Mycelium LLC
Privacy Policy
Last updated 14 September 2026
What Kyara Lab collects, why, and what you can do about it. Mycelium LLC is the data controller.
What we collect
Account identity: your user id and email address, provided by Mycelium Account when you sign in. We do not run our own passwords and never see one.
Your work: reference images you upload, character profiles and notes you write, and every image the service generates for you.
Billing records: your plan, credit balance, and a ledger of what each generation cost. Card details are held by Stripe, not by us.
Operational logs: request identifiers, timestamps, error events and the model used. These make it possible to answer "what happened to my generation".
Product usage: while you are signed in, we record which pages you open and which buttons and links you click, with the time — never what you type, your character names, prompts or images. It tells us which screens work and where people get stuck, and is kept with your account record.
Usage analytics, only if you allow them: Microsoft Clarity records how pages are used — clicks, scrolling, and where people get stuck — tied to your user id, never your email. What you type, and everything inside your workspace (character names, notes, prompts and images), is masked before it leaves your browser.
Why we hold it
To run the product you asked for, to meter and bill it accurately, to investigate failures, and to meet our legal and accounting obligations.
We do not sell your data. We do not use your images to train models. We do not run advertising.
Who else sees it
Google Cloud, which hosts the service and runs the image model on our behalf.
Stripe, which processes payments and holds your card details directly.
Mycelium Account, which authenticates you across Mycelium products.
Microsoft, through Clarity, if you allow analytics.
Nobody else, unless the law requires it of us.
Where it lives, and for how long
Data is stored in Google Cloud in the United States. Images are held in object storage scoped to your account; billing records are held in Firestore.
We keep your work until you delete it or close your account. Billing records are kept as long as accounting law requires. Operational logs are kept for a limited period and then discarded.
Your rights
You can download everything the service holds about you at any time, from the Plans and Credits page, as a single archive.
You can ask for correction or deletion, or object to processing, by writing to hello@myceliumllc.dev. If you are in the UK or EEA you can also complain to your local data protection authority.
Cookies
We set one necessary cookie: a short-lived, HttpOnly session cookie so that image requests stay scoped to your account.
Microsoft Clarity sets analytics cookies only after you choose Allow Analytics. Declining changes nothing about how the product works. To change your choice, clear this site's data in your browser and you will be asked again. There is no advertising cookie.
Contact
Questions about any of this go to hello@myceliumllc.dev.