CorviPrivacy Policy
Last updated: 28 October 2026
In short: Corvi reads your screen only when you press its key, and opens the microphone only while the key is held. Your speech is turned into text on your Mac. Content travels over an encrypted connection to an AI service to be summarized; Corvi's servers don't keep it. Your history stays on your Mac. We don't sell your data or use it for advertising.
1. Controller
The controller is Miron Group LLC, a limited liability company registered in Wyoming, USA (30 N Gould St Ste R, Sheridan, WY 82801, USA). You can reach us at support@trycorvi.com.
2. What we process
Account data
Name, e-mail address, password and the date your account was created. Your password is stored by Google Firebase as a one-way hash; we can't see it. If you sign in with Google, we use the name, e-mail and account ID Google shares with us.
Content read when you press the key
The text you selected, the message or text under the pointer, the main text of a page, a screenshot where needed, or a YouTube video's captions. Corvi never watches your screen in the background; it captures only the moment you press the key.
Voice
The microphone records only while the key is held. Your recording is turned into text on your Mac with a local model (Whisper). For a few languages the local model handles poorly, such as Hindi and Bengali, the recording is sent to Google Gemini for transcription. Silent recordings are never sent anywhere.
Data that belongs to your account
Your streak, the number of words you dictated, daily usage counts, the words in your dictionary, your snippets, writing-style choices and your answers to the introduction questions are kept with your account in Google Firebase Cloud Firestore (servers in the European Union), so signing in on another Mac picks up where you left off. Only you can access this record. If you sign in with Google, your profile picture is shown on your Mac.
Data that stays on your Mac
Your history (summaries, questions, dictations), dictation samples, settings and any API keys of your own are stored only on your Mac, in ~/Library/Application Support/Corvi, separately for each account and readable only by your user account. They are not sent to us.
Usage and error reports
So we can improve Corvi and find problems quickly, the app sends us by default: a random install ID, the Corvi and macOS versions, the Mac model, the interface and listening language, the country the connection comes from, your account's e-mail and name, which action (summary, question, dictation) you used and when, word counts, durations, which app you used it in (e.g. Safari) and error messages. What's on your screen, what you say, what you dictate and your summaries never go into these reports. You can turn this off any time in Corvi › Settings › Privacy › "Share usage and error reports"; reports not yet sent are then deleted too.
Updates
Every few hours Corvi checks this website for a new version and downloads it if there is one. Only standard technical information (IP address, Corvi version) is transmitted.
Technical data
Corvi's relay server briefly keeps your IP address and account ID in memory to prevent abuse and apply daily limits. Our host Vercel keeps technical request logs (IP, time, address, status code) for a limited period under its own policy. Request content is not logged.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, signing you in, confirming your e-mail | Contract, Art. 6(1)(b) |
| Producing the summary, answer or text you ask for | Contract, Art. 6(1)(b) |
| Security, preventing abuse and runaway costs, usage limits | Legitimate interests, Art. 6(1)(f) |
| Finding and fixing errors, improving Corvi (usage and error reports) | Legitimate interests, Art. 6(1)(f); you can object any time by switching it off |
| Keeping Corvi up to date and secure | Contract, Art. 6(1)(b), and legitimate interests, Art. 6(1)(f) |
| Important notices about the Service; legal obligations | Contract and legal obligation, Art. 6(1)(b) and (c) |
We don't sell your data, use it for advertising or profiling, or share it with third parties for marketing.
4. Who we share data with
To provide the Service we share only the data needed, and only when you start an action, with these providers:
| Provider | What for | Which data |
|---|---|---|
| Google Firebase Authentication (Google LLC, USA) | Accounts, sign-in, password reset | Name, e-mail, a one-way hash of the password, Google account ID and profile picture |
| Google Firebase Cloud Firestore (Google LLC, servers in the EU) | Keeping the data that belongs to your account | Streak and usage counts, dictionary, snippets, writing style, introduction answers |
| Google Gemini API (Google LLC, USA) | Summaries, answers, dictation cleanup, reading aloud, videos without captions, web research | The content captured when you press the key, your questions and dictated text |
| Anthropic API (Anthropic PBC, USA) | Summaries and answers (fallback and some languages) | The content captured when you press the key and your questions |
| Groq (Groq Inc., USA) | Dictation cleanup (fallback) | Dictated text |
| Vercel (Vercel Inc., USA) | Corvi's relay server and hosting of this website | Technical request logs (IP address, time, size); no content is stored |
| Supabase (Supabase Inc., servers in the EU, Frankfurt) | Storing usage and error reports | Install ID, versions, language, country, account e-mail, usage counts, error messages; no content |
| YouTube (Google LLC, USA) | Fetching a video's captions when you have it read | The video's address |
When content is sent to one of these services, its own policy applies as well: Google, Gemini API terms, Anthropic, Groq, Vercel, Supabase.
When the free tier of the Google Gemini API is used, Google may use the content sent to improve its products, and human reviewers at Google may see it. We recommend not having Corvi read confidential or sensitive content (such as health data, passwords or ID numbers).
If you add your own API key in Settings (e.g. OpenAI, ElevenLabs, Azure, Mistral), those requests go straight to that service under your own account.
Where the law requires it, we may disclose data to competent authorities in response to proper requests.
5. International transfers
Most of these providers' servers are in the United States, so your data is transferred outside the EU and Türkiye. We rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
6. How long we keep it
- Account data and data that belongs to your account: until you delete your account; the Firebase records are then deleted.
- Content and spoken questions: not stored on Corvi's servers. The AI provider may keep them for a limited period for safety purposes under its own policy.
- History on your Mac: until you delete it. You can switch history off or clear it in Corvi › Settings › Privacy.
- Usage and error reports: up to 24 months, or sooner if you delete your account or ask us to.
- Technical logs: for the period in the host's policy.
7. Security
All connections are encrypted (HTTPS/TLS). The AI services' keys are kept secret on the server, not in the app. The server accepts only requests from confirmed accounts that match Corvi's own actions. The Corvi folder on your Mac is readable only by your user account.
8. Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. You can delete your account and its data in the app at any time. For anything else, write to support@trycorvi.com; we reply within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live.
9. Children
Corvi is not designed for children under 18; under-18s may use it with a parent's or guardian's consent. If we learn that we have processed a child's data without that consent, we delete it.
10. Changes
When we update this policy we change the date on this page, and we announce important changes in the app or by e-mail.