Privacy Notice
Last updated September 2026
Myra Create ("we", "us") runs the Myra Create website and application. For the personal data described here, Myra Create is the data controller, we decide why and how it's used.
The short version: your library, reflections, characters, worlds and manuscripts are yours. They're stored against your account, visible only to you when you're signed in. We don't sell your data, we don't share your writing with other readers, and we don't use it to train AI models.
What we collect and why
- Account data, your email address, display name and login credentials. Used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
- Your content, books, reflections, project notes, characters, world entries and manuscript chapters. Used solely to store your work and show it back to you. Legal basis: performance of our contract.
- Support messages, anything you send us. Used to answer you. Legal basis: legitimate interests in supporting our customers.
- Usage and device data, IP address, browser and device type, pages visited, error reports. Used for security, fraud prevention, diagnosing faults and improving the product. Legal basis: legitimate interests.
- Subscription status, whether you're on the free or Pro plan, and when your plan renews or ends. Used to give you access to what you've paid for. Legal basis: performance of our contract. Card details never reach us, Paddle handles those.
- Marketing, if you opt in, we may email you about new features. Legal basis: consent, which you can withdraw at any time.
AI features
When you use a feature that generates text, such as book reflections or story beats, the relevant prompt is sent to our AI provider to produce the response. It is used only to answer that request. Your manuscript is not used to train AI models.
Who we share data with
- Service providers, hosting, database, authentication, email delivery and AI providers, acting on our instructions as processors.
- Paddle, our Merchant of Record, for the sale of Myra Create Pro, subscription management, payments, tax compliance and invoicing.
- Professional advisers, legal and accounting, where necessary.
- Authorities, where we're legally required to disclose.
We never sell your personal data.
International transfers
Some of our providers are outside the UK and EEA. Where that's the case, transfers are covered by an adequacy decision or by Standard Contractual Clauses with appropriate safeguards.
How long we keep it
We keep your account and content for as long as your account is open. If you delete your account, your content is deleted or anonymised within 30 days, except where we must keep records longer for legal, tax or fraud-prevention reasons. Ending a subscription does not delete anything.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent where we rely on it. We'll respond within one month. If you're in the UK or EEA and you're unhappy with our response, you can complain to your data protection supervisory authority (in the UK, the ICO).
To exercise any of these, get in touch through our contact page.
Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, and row-level access controls that make your content reachable only by your own signed-in account.
Cookies
We use essential cookies and local storage to keep you signed in and remember preferences such as your theme, these are required for the site to work. Our payment provider sets cookies during checkout to process your order securely. We don't use advertising cookies. You can clear or block cookies in your browser, though signing in won't work without the essential ones.
Changes and contact
If we make a material change to this notice we'll tell you before it takes effect. For anything privacy-related, reach us through our contact page.