Privacy Policy
This Privacy Policy explains how Thirteenth Idea FZ-LLC ("we", "us") collects, uses, shares and protects personal data when you use Corovus: our website, the Corovus platform and its AI agents, and our mobile apps Corovus AI, Corovus Voice and Coro Stream (together, the "Services").
Who we are
Thirteenth Idea FZ-LLC (FOAM1018, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates) decides how and why your personal data is processed: we are the "data controller", or "data fiduciary" under India's Digital Personal Data Protection Act. You can reach us at info@13idea.org.
What we collect
We collect only what we need to run the Services:
Your account. Your name and email address and, if you add them, your phone number, profile photo, language and time zone. If you sign in with an account you have with another service, we receive your name, email address and profile photo from that service. Sign-in is handled by our authentication provider; we never see your password. We record the IP address and device of each sign-in to protect your account.
What you create and share. The prompts and messages you send to our AI, the files, photos, documents, audio and video you upload, what our agents generate for you, and the notes, projects and business details you save.
Messages and calls. In Coro Stream: the messages, photos, files and voice notes you send, the people you add to your contacts in the app, and your call history — who called whom, when and for how long. We do not read your phone's address book. Call audio and video travel directly between the people on the call or, when a direct connection is not possible, through our relay servers, which pass them on without being able to read them. We do not record calls. If you turn on live translation in a call, what is said is sent to our translation servers and translation providers to produce the translation.
Your device. Your device type, operating system, app version and IP address; a random identifier for your app installation that we use to deliver app updates and notifications; the notification token that lets us deliver calls and messages to your phone; and technical logs and error reports we use to keep the Services secure and working. Some components built into our apps send their providers limited diagnostic information — such as your device model, operating-system version and app version, and how the component performed — so that the component keeps working. We also use your IP address to estimate your country, so that our website opens in your language on your first visit.
Payments. Purchases on our website are processed by our payment processor; purchases in our iPhone app are processed by Apple. We never receive your full card number or your Apple Account details. We keep a record of what you bought, when, and for how much — for App Store purchases, the transaction ID, product, price, currency and country that Apple sends us.
Accounts you connect. If you connect another service — a social-media, advertising, website or file-storage account — we store the access it grants, encrypted, and use it only for the actions you ask for.
How we use it
To provide the Services you ask for — answering your questions, generating content, connecting your calls and messages, and publishing or sending only what you approve; to keep the Services secure and prevent fraud and abuse; to give you support; to bill you; to email you about your account, payments and security, and — unless you turn them off in your notification settings — about new features and tips; to understand in aggregate how the Services are used so we can improve them; and to meet our legal obligations. We do not sell your personal data, and we do not use your content to train our own AI models.
We use your data to provide the Services you ask for (our contract with you), to keep them secure and improve them (our legitimate interests), where you have given consent (for example the AI notice, optional permissions, or advertising cookies on our website — you can withdraw it at any time), and where the law requires.
How AI processes your data
Our assistant and agents run on AI models operated by third-party AI providers. To answer you, we send them what that request needs — your prompt or message, the files or photos you attach and, in voice features, your speech, camera or screen. They process it on our behalf to produce the answer. Our apps ask for your permission before the first time this happens.
Voice, camera and screen sharing
Corovus Live and the Corovus Voice app let you talk to the assistant, and optionally show it your camera or share your screen. This section explains exactly what that means, because these are the most sensitive permissions our apps ask for.
Your microphone is used only while you dictate a message, record a voice message or a voice sample, before and during a call, during a Live conversation, or — if you turn on the wake word in the Corovus Voice app or hands-free mode on our website — to listen for the wake word. When you dictate in our mobile apps, and while the Corovus Voice app listens for the wake word, your phone's own speech-recognition service turns speech into text. In the hands-free and voice-conversation modes on our website, your browser's own speech-recognition service does this. Depending on your device and browser, that service may process the audio on its provider's servers, under that provider's privacy terms. We receive only the text it produces, and while the wake word is on, nothing is sent to us until it is heard. When you dictate a message on our website, the recording is sent to our servers and on to an AI provider to turn it into text; we do not keep the recording. Your browser's speech-recognition service may also show the words as you speak. A voice message or voice sample you record is handled like any other file you send or upload. During a Live conversation, audio is streamed to our servers and on to our AI providers so the assistant can understand and answer you; we keep the written transcript, not the audio. None of this is used for advertising.
Your camera and your screen are only ever shared when you turn them on yourself, for that session. On Android, screen sharing uses the system's own permission dialog and shows a permanent notification and recording indicator for as long as it lasts. Whatever is visible on screen at that moment — including any other app, message or document in view — is sent to our AI providers so the assistant can answer your question about it. Turn it off before showing anything you would not want processed.
Where it goes. Speech, camera frames and screen frames are sent over encrypted connections to our servers, and from there to our AI providers, which process them to generate a response. We keep a written transcript of your conversation so it appears in your chat history and so the assistant can remember context between sessions. We do not sell this data, and we do not use it to train our own models.
Your control. You can end a Live session at any time, stop screen sharing from the notification, turn the wake word off, and delete voice conversations from your chat history the same way you delete any other chat. Deleting a conversation removes its transcript from our systems.
What we cannot do. Because the assistant has to understand your speech to answer it, voice and screen data cannot be end-to-end encrypted — our AI providers must be able to process it. This is true of every voice assistant. If that is not acceptable for a particular conversation, do not use Live for it.
Permissions on your phone
Our apps ask for a permission only when a feature needs it: the microphone to dictate, record voice messages, talk to the assistant and make calls; the camera to take photos, show the assistant something and make video calls; photos and files to attach them; and notifications to tell you about calls and messages. Coro Stream can show an incoming call over your lock screen, and keeps a notification on screen for as long as a call or a screen share lasts. The Corovus Voice app can also listen in the background, appear over other apps and be set as your phone's assistant, so it can open when you say the wake word — only if you turn that on — and it can open your clock app with an alarm filled in when you ask it to. You can turn any permission off in your phone's settings.
Who we share it with
Service providers. A small number of providers process data for us, only to deliver the Services: cloud hosting and storage, AI model providers, speech-recognition and translation providers, our authentication provider, our payment processor, and email and notification delivery services. They may use the data only to provide their service to us.
People you choose. People you message or call in Coro Stream see your name, profile photo and what you send them. Anything you share by link can be seen by anyone who has the link. If you work inside someone else's workspace, its owner can see the work you do there.
When the law requires it. We disclose data when required by law or by a valid order of a court or authority, or when needed to protect the rights, property or safety of our users, the public or ourselves.
If our business changes. If we are involved in a merger, acquisition or sale of assets, your data may be transferred as part of it, and this policy will continue to apply to it.
Where your data is stored
Our main servers are in India. Some of our own servers — such as the relay that connects a call when a direct connection is not possible, and the secure workspace where the assistant runs code for you — are in the European Union and the United States, and some of our providers process data in other countries, including the United States and member states of the European Union. When your data leaves your country, we protect it with the same security measures on our own servers and rely on our providers' contractual commitments.
How long we keep it
We keep your data while your account is open. When you delete a chat, a file or a message, it is removed from the Services. When you delete your account, sign-in stops at once, any subscription or hosting plan stops renewing, and your personal data and content are permanently deleted after 30 days — see how to delete your account. We keep payment and invoice records for as long as tax and accounting law requires.
Your rights and choices
You can see and correct your account details in your profile, download a copy of your data from your profile's Security page, delete individual chats, files and messages, and delete your whole account in the apps or on the website. You can withdraw any consent you have given, turn off permissions such as the microphone, camera or notifications in your phone's settings, and object to or ask us to restrict how we use your data where the law gives you that right. For anything you cannot do yourself, email info@13idea.org; we may need to confirm your identity first. You can also complain to your data-protection authority — in India, the Data Protection Board of India.
Children
The Services are for people aged 18 and over. We do not knowingly collect personal data from children; if we learn that we have, we delete it.
Security
Data travels over encrypted connections. Credentials and access tokens are encrypted at rest, access to our systems is restricted and logged, and our administrators use two-factor authentication. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
Advertising and analytics
Our website uses tags from our advertising partners only with your permission: if you choose “Accept all” in our cookie banner. The tags measure how well our ads work and show our ads to people who have visited our site. They set cookies and share limited usage data (such as the pages you visit and your device information) with those partners, who may combine it with data they hold about you as described in their own privacy policies. If you accept and create an account, a hashed form of your email address (a code that cannot be turned back into the address) is also sent to one of these partners, so it can match your sign-up to an ad. These tags never load inside our mobile apps: our apps show no advertising and do not use your phone's advertising ID. You can withdraw your permission at any time with “Cookie settings” at the bottom of our website's pages. You can also opt out of personalised advertising in your ad-platform account settings, or block third-party cookies in your browser. See our Cookie Policy for details.
Complaints in India
If you are in India, you can raise a complaint about your personal data with our Grievance Officer — see our Contact page.
Changes to this policy
We post every change here and update the date below. If a change is significant, we will also tell you in the Services or by email before it takes effect.
Contact us
For privacy requests or any questions, email us at info@13idea.org.
Last updated: 18 October 2026.