Privacy Policy
This Privacy Policy explains how THIRTEENTH IDEA FZ-LLC ("we", "us") collects, uses, shares and protects personal data when you use Corovus: our website, the Corovus platform and its AI agents, and our mobile apps Corovus AI, Corovus Voice and Coro Stream (together, the "Services").
Who we are
THIRTEENTH IDEA FZ-LLC decides how and why your personal data is processed: we are the "data controller", or "data fiduciary" under India's Digital Personal Data Protection Act. You can reach us at info@13idea.org.
What we collect
We collect only what we need to run the Services:
Your account. Your name and email address and, if you add them, your phone number, profile photo, language and time zone. Sign-in is handled by our authentication provider; we never see your password.
What you create and share. The prompts and messages you send to our AI, the files, photos, documents, audio and video you upload, what our agents generate for you, and the notes, projects and business details you save.
Messages and calls. In Coro Stream: the messages, photos, files and voice notes you send, the contacts you add, and your call history — who called whom, when and for how long. Call audio and video travel directly between the people on the call or through our relay servers. We do not record calls.
Your device. Your device type, operating system, app version and IP address; the notification token that lets us deliver calls and messages to your phone; and technical logs and error reports we use to keep the Services secure and working.
Payments. Purchases on our website are processed by our payment processor; purchases in our iPhone app are processed by Apple. We never receive your full card number or your Apple Account details. We keep a record of what you bought, when, and for how much — for App Store purchases, the transaction ID, product, price, currency and country that Apple sends us.
Accounts you connect. If you connect another service — a social-media, advertising, website or file-storage account — we store the access it grants, encrypted, and use it only for the actions you ask for.
How we use it
To provide the Services you ask for — answering your questions, generating content, connecting your calls and messages, and publishing or sending only what you approve; to keep the Services secure and prevent fraud and abuse; to give you support; to bill you; to understand in aggregate how the Services are used so we can improve them; and to meet our legal obligations. We do not sell your personal data, and we do not use your content to train our own AI models.
How AI processes your data
Our assistant and agents run on AI models operated by third-party AI providers. To answer you, we send them what that request needs — your prompt or message, the files or photos you attach and, in voice features, your speech, camera or screen. They process it on our behalf to produce the answer. Our apps ask for your permission before the first time this happens.
Voice, camera and screen sharing
Corovus Live and the Corovus Voice app let you talk to the assistant, and optionally show it your camera or share your screen. This section explains exactly what that means, because these are the most sensitive permissions our apps ask for.
Your microphone is used only while you dictate a message, while a Live conversation is open, or — if you turn the wake word on in the Corovus Voice app — to listen for the wake word you choose. The wake word is detected on your phone (on some phones by the phone's own speech service), and nothing is sent to us until it is heard. During a conversation, audio is streamed to our servers and on to our AI providers so the assistant can understand and answer you. It is never used for advertising.
Your camera and your screen are only ever shared when you turn them on yourself, for that session. On Android, screen sharing uses the system's own permission dialog and shows a permanent notification and recording indicator for as long as it lasts. Whatever is visible on screen at that moment — including any other app, message or document in view — is sent to our AI providers so the assistant can answer your question about it. Turn it off before showing anything you would not want processed.
Where it goes. Speech, camera frames and screen frames are sent over encrypted connections to our servers, and from there to our AI providers, which process them to generate a response. We keep a written transcript of your conversation so it appears in your chat history and so the assistant can remember context between sessions. We do not sell this data, and we do not use it to train our own models.
Your control. You can end a Live session at any time, stop screen sharing from the notification, turn the wake word off, and delete voice conversations from your chat history the same way you delete any other chat. Deleting a conversation removes its transcript from our systems.
What we cannot do. Because the assistant has to understand your speech to answer it, voice and screen data cannot be end-to-end encrypted — our AI providers must be able to process it. This is true of every voice assistant. If that is not acceptable for a particular conversation, do not use Live for it.
Permissions on your phone
Our apps ask for a permission only when a feature needs it: the microphone to dictate, talk to the assistant and make calls; the camera to take photos, show the assistant something and make video calls; photos and files to attach them; and notifications to tell you about calls and messages. The Corovus Voice app can also listen in the background and appear over other apps, so the assistant can open when you say the wake word — only if you turn that on. You can turn any permission off in your phone's settings.
Who we share it with
Service providers. A small number of providers process data for us, only to deliver the Services: cloud hosting and storage, AI model providers, speech-recognition and translation providers, our authentication provider, our payment processor, and email and notification delivery services. They may use the data only to provide their service to us.
People you choose. People you message or call in Coro Stream see your name, profile photo and what you send them. Anything you share by link can be seen by anyone who has the link. If you work inside someone else's workspace, its owner can see the work you do there.
When the law requires it. We disclose data when required by law or by a valid order of a court or authority, or when needed to protect the rights, property or safety of our users, the public or ourselves.
If our business changes. If we are involved in a merger, acquisition or sale of assets, your data may be transferred as part of it, and this policy will continue to apply to it.
Where your data is stored
Our main servers are in India. Some of our providers process data in other countries, including the United States and member states of the European Union. When your data leaves your country, we rely on our providers' contractual commitments to protect it.
How long we keep it
We keep your data while your account is open. When you delete a chat, a file or a message, it is removed from the Services. When you delete your account, sign-in stops at once, any subscription or hosting plan stops renewing, and your personal data and content are permanently deleted after 30 days — see how to delete your account. We keep payment and invoice records for as long as tax and accounting law requires.
Your rights and choices
You can see and correct your account details in your profile, download a copy of your data from your profile's Security page, delete individual chats, files and messages, and delete your whole account in the apps or on the website. You can withdraw any consent you have given, turn off permissions such as the microphone, camera or notifications in your phone's settings, and object to or ask us to restrict how we use your data where the law gives you that right. For anything you cannot do yourself, email info@13idea.org; we may need to confirm your identity first. You can also complain to your data-protection authority — in India, the Data Protection Board of India.
Children
The Services are for people aged 18 and over. We do not knowingly collect personal data from children; if we learn that we have, we delete it.
Security
Data travels over encrypted connections. Credentials and access tokens are encrypted at rest, access to our systems is restricted and logged, and our administrators use two-factor authentication. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.
Advertising and analytics
Our website uses tags from our advertising partners only with your permission: if you choose “Accept all” in our cookie banner. The tags measure how well our ads work and show our ads to people who have visited our site. They set cookies and share limited usage data (such as the pages you visit and your device information) with those partners, who may combine it with data they hold about you as described in their own privacy policies. If you accept and create an account, a hashed form of your email address (a code that cannot be turned back into the address) is also sent to one of these partners, so it can match your sign-up to an ad. These tags never load inside our mobile apps: our apps show no advertising and do not use your phone's advertising ID. You can withdraw your permission at any time with “Cookie settings” at the bottom of our website's pages. You can also opt out of personalised advertising in your ad-platform account settings, or block third-party cookies in your browser. See our Cookie Policy for details.
Complaints in India
If you are in India, you can raise a complaint about your personal data with our Grievance Officer — see our Contact page.
Changes to this policy
We post every change here and update the date below. If a change is significant, we will also tell you in the Services or by email before it takes effect.
Contact us
For privacy requests or any questions, email us at info@13idea.org.
Last updated: 18 October 2026.