Legal
Privacy Policy
Last updated: 13 August 2026
Lyric Overlay ("the app") is a Windows application that displays beat-synced lyrics and a music visualizer for whatever is playing on your PC. This policy explains what the app does with your information, and meets the Microsoft Store privacy requirement and the disclosure expectations of the GDPR (EU/UK), the CCPA/CPRA (California), and comparable laws.
Developer / data controller: Dhruv Choudhary · dhruvchoudhary306@gmail.com
The short version
- The app runs on your device. There is no Lyric Overlay account, server, or login, and we operate no backend that receives your data.
- We run no analytics, advertising, or tracking, and we do not sell or share personal information.
- The audio used for the visualizer is processed live on your device and is never recorded, saved, or transmitted.
- To fetch lyrics, art, and optional AI translation, the app sends only the current song's title and artist (and, for AI, the lyric text) directly from your device to the third-party services below. It sends nothing that identifies you.
Information the app processes
The app processes the following on your device. Except where noted, all of it stays local.
| Category | What it is | Why | Leaves device? |
|---|---|---|---|
| Now-playing metadata | Title and artist your media player reports to Windows (SMTC) | Find matching lyrics and artwork | Title + artist only, to providers below |
| System audio | Audio playing on your PC, captured via WASAPI loopback | Drive the real-time visualizer | No. Analyzed live; never recorded or sent |
| Lyric text | Lyrics fetched or transcribed for the song | Display and optionally translate | Only when you use an AI feature |
| Your API keys | Keys you paste for optional AI providers | Authenticate your own requests | Stored locally; sent only to that provider |
| Settings & caches | Preferences, cached lyrics, artwork, beat maps | Remember setup, avoid re-downloading | No. Stored in your local app-data folder |
The app does not collect your name, email, precise location, contacts, browsing history, or any government or financial identifiers.
Third-party services the app contacts
When you use the relevant feature, the app makes a direct request from your device to these services. Your data is then handled under their policies, not ours.
Lyrics (receive song title + artist): LRCLIB, NetEase Cloud Music, KuGou.
Album artwork (receive song title + artist): Apple iTunes Search, Deezer, MusicBrainz / Cover Art Archive.
Optional AI translation, transliteration, and mood (receive lyric text + song title/artist; only when you enable an AI feature and provide your own key): Google Gemini, Groq, Hugging Face.
Software updates (standalone build only): GitHub. The Microsoft Store version does not self-update; the Store delivers updates.
Because these providers are based in different countries (including the United States and China), using a given feature may transfer your song title/artist and lyric text to servers in those countries. Choose which features to use accordingly.
On-device auto-transcription (Whisper)
If you turn on automatic lyric transcription, speech recognition runs entirely on your device using a bundled local model. The audio and the resulting transcript are not uploaded anywhere.
Legal bases (GDPR/UK GDPR)
Where the GDPR applies, we rely on legitimate interests to process now-playing metadata and audio locally so the app works as expected, and on your consent — given by enabling a feature — for each request the app sends to a third-party lyrics, artwork, or AI provider. Each such provider is an independent controller under its own policy.
Data retention
Local caches, settings, and API keys remain on your device until you clear the app's cache or uninstall it. We retain nothing, because we receive nothing. Third-party providers retain data per their own policies.
Your rights
You control your data directly: clear the app's cache or uninstall the app to remove local data, and disable features plus remove your API keys to stop all third-party requests. Depending on where you live (for example, the EU/UK under the GDPR or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port personal data and to object to or restrict processing. Because we hold no data about you on any server, exercise these rights against your local data as above, and against a third-party provider directly for data it holds. We do not sell or "share" personal information as defined by the CCPA/CPRA, and we do not discriminate against anyone for exercising a privacy right.
Children's privacy
The app is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect personal information from them. Because we operate no account system or server, we do not knowingly hold any such data.
Security
Requests to third-party services are made over encrypted HTTPS connections. Your settings and API keys are stored in your Windows user profile and protected by your operating system's account security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy as the app changes. Material changes will be reflected by a new "Last updated" date at the top. Continued use of the app after an update means you accept the revised policy.
Contact
Questions or requests about this policy or your data:
Dhruv Choudhary — dhruvchoudhary306@gmail.com