Privacy Policy

KorvinAI is an intelligent assistance platform with international operations and administrative base in Colombia. Our service combines artificial intelligence technology, information organization, and productivity tools.

This Privacy Policy applies to all users registered on korvinai.app and the KorvinAI mobile app. Use of the service implies acceptance of the terms described here.

We collect only the information necessary to operate the service:

Account information:

• —Email address (required for authentication)
• —Encrypted password (we never store passwords in plain text)
• —Unique device identifier (for security and access control)
• —Registration date and time

Usage information:

• —Service activity logs (without communication content)
• —Anonymous performance metrics
• —Subscription and payment information (processed by certified third parties)

Information processed locally on your device:

• —Tags and notes about contacts (stored locally, not on our servers)
• —Scheduled reminders (managed by your device's operating system)
• —Conversation history for AI context (processed temporarily, not stored permanently)

We use the collected information exclusively to:

• —Authenticate your identity and keep your session active securely
• —Process the artificial intelligence requests you make
• —Manage your subscription and associated payments
• —Send you important technical communications about the service
• —Detect and prevent fraudulent or unauthorized activities
• —Improve the performance and stability of the service

We share information only in the following strictly defined cases:

• —Certified payment processors — only data necessary to complete transactions
• —Authentication services — for secure credential management
• —Artificial intelligence providers — messages are sent to process your request and are not retained per their terms of use
• —Competent authorities — only when required by law through a formal request

All our providers are contractually obligated to maintain confidentiality of the information and use it only for the specific purposes for which it was shared.

Account data is stored on servers with encryption at rest. Communications between your device and our servers use TLS 1.3 encryption.

• —Passwords: bcrypt encryption, never accessible in plain text
• —Session tokens: automatic rotation with configurable expiration
• —External service API keys: stored as encrypted secrets in dedicated infrastructure
• —Payment data: we never store card numbers — they are handled entirely by the processors

KorvinAI operates through an overlay architecture: a visual layer displayed over the platforms you already use, without modifying their underlying structure.

• —KorvinAI does not request or store passwords for the external platforms you use
• —We do not continuously monitor your activity on external platforms
• —KorvinAI's action buttons are elements of the app itself (not code injected into the platform)
• —We only process the context you actively request to analyze through the AI tools

This architecture was specifically designed to minimize access to sensitive information. KorvinAI is an assistance tool, not a surveillance tool.

Our website uses functional and performance cookies necessary for the proper functioning of the service. We do not use advertising tracking cookies.

• —Session cookies: keep your session securely logged in
• —Preference cookies: remember your settings
• —Anonymous analytics cookies: help us understand site performance without identifying you

See our full Cookie Policy for more details.

KorvinAI integrates external services to offer its features. Each one has its own privacy policy:

• —Supabase — authentication and database
• —Cloudflare — infrastructure and edge computing
• —Payment processors — subscription and transaction management
• —AI providers — processing of artificial intelligence requests

KorvinAI is not directed at persons under 18 years of age. We do not intentionally collect information from minors. If you discover that a minor has created an account, contact us immediately at [email protected] to proceed with data deletion.

Depending on your location, you have the following rights regarding your personal information:

• —Access: you can request a copy of the information we have about you
• —Rectification: you can correct inaccurate or incomplete information
• —Deletion: you can request deletion of your account and all associated data
• —Portability: you can request your data in a structured, machine-readable format
• —Objection: you can object to the processing of your data in certain cases
• —Restriction: you can request that we limit the processing of your information

We retain your information for as long as necessary to fulfill the purposes described in this policy:

• —Active account data: while your account remains active
• —Transaction records: minimum 5 years for accounting and legal requirements
• —Session and activity data: maximum 90 days
• —Support requests: 2 years from case closure

When you delete your account, all personal data is erased within 30 days, except what we must retain due to legal obligations.

KorvinAI operates with globally distributed infrastructure. By using our service, you accept that your information may be processed on servers located outside your country of residence.

We implement appropriate safeguards for these transfers, including standard contractual clauses and the use of providers with internationally recognized security certifications.

We may update this Privacy Policy occasionally. When we do:

• —We will update the 'Last updated' date at the top of the document
• —We will notify significant changes by email
• —Changes take effect 30 days after notification

Continued use of the service after the notification period implies acceptance of the changes.

KorvinAI's AI features process the text you select to generate suggestions, translations, or information extractions.

• —The text is sent to the AI provider to process it and generate the response
• —We do not use your conversations to train our own models
• —Processing is transactional: we send, we receive a response, we do not permanently store the context
• —You can review AI providers' practices in their own privacy policies

For any inquiry related to this policy: