The short version. Corvus is a native email client that runs entirely on your Mac. Your email is fetched directly from Google's servers to your device. We operate no servers that receive, store, or process your mail. We do not sell your data, share it with advertisers, use it for marketing, or use it to train any AI model — ever. AI summaries are generated on your Mac by Apple Intelligence and your content never leaves the device.
1. Who we are
Corvus ("Corvus," "the app") is a macOS email client for Gmail accounts, developed and published by Amelia Partner Group ("we," "us," "our"). This policy explains what information Corvus handles, where that information lives, and what we do — and deliberately do not do — with it.
This policy applies to the Corvus macOS application and to the Google account data it accesses on your behalf. Questions about anything below can be sent to info@ameliapartners.com.
2. How Corvus is built, and why that matters
Corvus is a local-first application. When you connect a Gmail account, the app talks directly to Google's Gmail API from your Mac using the credentials you authorize. There is no Corvus server, relay, proxy, or cloud backend sitting between you and Google.
The practical consequence: we have no technical ability to read, copy, retain, or analyze your email. Your messages, attachments, contacts, drafts, and search index exist on your Mac and in your own Google account, and nowhere else.
3. Google account data Corvus accesses
When you sign in, Google shows you a consent screen listing exactly what Corvus is asking for. Corvus requests only the permissions it needs to function as an email client:
| Permission (OAuth scope) | Why Corvus needs it |
|---|---|
.../auth/gmail.modify |
To read your messages so they can be displayed; to compose, reply to, and send mail; and to apply the changes you make — marking as read, starring, labeling, archiving, and moving messages to trash. |
.../auth/userinfo.email |
To identify which account is signed in and display the correct address in the app. |
.../auth/userinfo.profile, openid |
To display your name and profile picture in the account switcher and as the sender identity on outgoing mail. |
Corvus does not request access to Google Drive, Google Calendar, Google Contacts, or any other Google service beyond what is listed above. You can review and revoke these permissions at any time — see Section 7.
Authentication credentials
Corvus signs you in using Google OAuth 2.0. You enter your Google password on Google's own sign-in page, inside a secure system-provided browser view. Corvus never sees, receives, or stores your Google password. Google returns an access token and a refresh token, which Corvus stores in the macOS Keychain on your Mac — encrypted at rest and protected by the operating system. Those tokens are never transmitted to us or to any third party.
4. Where your data is stored
Everything Corvus keeps is kept locally, in the app's sandboxed container on your Mac:
- Message cache. Downloaded messages, headers, and attachments are cached on disk so the app is fast and works offline.
- Local search index. Built on your Mac from your cached mail so search runs without a network round trip.
- Drafts. Drafts in progress are held locally and synced to your Gmail account's Drafts folder through the Gmail API.
- App preferences. Window layout, signatures, notification settings, and similar choices.
- OAuth tokens. Stored in the macOS Keychain, as described above.
If you use iCloud backup or Time Machine, this local data may be included in your own backups under your own Apple account. That is your backup, under your control, and we have no access to it.
5. AI summaries are generated on your device
Corvus can summarize messages and threads. These summaries are produced by Apple Intelligence, running on your Mac. The message content is passed to Apple's on-device foundation models through the operating system, and the summary is returned locally.
- Your email content is not sent to Corvus, to Amelia Partner Group, or to any third-party AI provider.
- Your email content is not sent to OpenAI, Anthropic, Google, or any other external model provider.
- Corvus does not route summarization through Apple's Private Cloud Compute or any other off-device inference. Summarization is on-device only. If a message cannot be summarized on-device, Corvus declines to summarize it rather than sending it elsewhere.
- Nothing derived from your mail — content, summaries, embeddings, metadata, or usage patterns — is used to train, fine-tune, or improve any AI or machine learning model, ours or anyone else's.
6. What we do not do
Stated plainly, because these are the things people actually worry about:
- We do not sell your personal information, and we never have. We do not share it for cross-context behavioral advertising.
- We do not monetize your data in any form — no ads, no data brokering, no "anonymized" datasets sold or licensed to anyone.
- We do not scan your mail for advertising, profiling, or product-recommendation purposes.
- We do not send you marketing email, and we do not add your address to any mailing list. We do not send bulk or unsolicited messages of any kind, to you or through your account.
- We do not transfer your Google user data to third parties, except in the narrow circumstances described in Section 9.
- We do not run analytics, telemetry, tracking pixels, or third-party SDKs that report your activity back to us. Corvus does not phone home.
7. Your control over access and data
Revoking Corvus's access to your Google account
You can disconnect Corvus from your Google account at any time, without our involvement, at myaccount.google.com/permissions. Select Corvus and choose "Remove access." The app's tokens become invalid immediately and it can no longer reach your mail.
Removing an account inside the app
Removing an account in Corvus's settings deletes that account's cached messages, search index, and Keychain tokens from your Mac.
Deleting everything
Uninstalling Corvus and deleting its application-support container removes all locally stored data. Because we hold no copy of your data on any server, there is nothing further for us to delete — and no deletion request to file. Your mail itself remains in your Gmail account, where it has been all along, and is governed by Google's Privacy Policy.
8. Limited Use disclosure (Google API Services)
Corvus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, and in the terms Google's policy uses:
- Corvus uses Google user data only to provide and improve the user-facing features that are prominently visible in the app's interface.
- Corvus does not transfer Google user data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets — in which case we would give affected users prior notice.
- Corvus does not use Google user data for serving advertisements of any kind, including retargeted, personalized, or interest-based advertising.
- Corvus does not allow humans to read Google user data, unless (a) we have your specific consent to read specific messages, (b) it is necessary for security purposes such as investigating abuse, (c) it is required to comply with applicable law, or (d) the data has been aggregated and de-identified. In practice, none of these have occurred, because the app's local-first design gives us no channel through which such data could reach us.
- Corvus does not use Google user data to develop, improve, or train generalized or non-personalized AI and/or ML models.
9. When information could be disclosed
We hold no copy of your mail, so in the ordinary course there is nothing to disclose. Should we ever come into possession of information covered by this policy, we would disclose it only:
- with your explicit consent;
- where required by valid legal process, and only to the extent legally required; or
- in connection with a merger, acquisition, or sale of assets — in which case any successor would be bound by this policy, and affected users would be notified in advance and given the opportunity to disconnect their accounts.
If we receive a legal demand for user data, we will provide notice to affected users unless we are legally prohibited from doing so.
10. Support correspondence
If you email us at info@ameliapartners.com, we will have whatever you choose to put in that message — your email address, your description of the problem, and any screenshots or logs you attach. We use it solely to answer you, we do not add you to any list, and we retain support threads only as long as needed to resolve the issue and keep a reasonable record of it. Please redact anything sensitive before attaching logs or screenshots.
11. Security
Corvus connects to Google over TLS-encrypted connections. It runs as a sandboxed, notarized macOS application, so it can only reach its own container on disk. Authentication tokens are held in the macOS Keychain rather than in application files, and local data inherits the protection of macOS FileVault when you have it enabled — which we recommend.
The strongest security property of Corvus is architectural rather than procedural: there is no central store of user mail to breach. A compromise of our systems would not expose your email, because your email was never on our systems.
12. Children
Corvus is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable threshold), and we do not knowingly collect personal information from them. Google's own account-age requirements apply to any Gmail account you connect.
13. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict its processing — including under the EU/UK GDPR and the California Consumer Privacy Act as amended by the CPRA.
Because Corvus stores your data only on your own device and we hold no copy, you can exercise most of these rights directly and immediately: your data is already in your possession, you can export or delete it yourself, and revoking access at myaccount.google.com/permissions ends our app's access entirely. We do not sell or share personal information, so there is no sale to opt out of. If you would like to exercise a right or ask how this applies to you, contact info@ameliapartners.com and we will respond within the time frame the applicable law requires. You also have the right to lodge a complaint with your local data protection authority.
14. International users
Corvus processes your data on your own Mac, wherever that Mac is. Your mail is stored by Google in Google's infrastructure under Google's Privacy Policy, which governs any international transfer of that data. Support correspondence you send us is received in the United States.
15. Changes to this policy
If we change this policy, we will update the "Last updated" date above. For material changes — particularly any change to what data Corvus accesses or how it is handled — we will give notice in the app before the change takes effect, so you can review it and disconnect your account if you disagree. We will not apply a materially different handling of previously collected data without your consent.
16. Contact
For privacy questions, support, or anything else about Corvus:
info@ameliapartners.com
Amelia Partner Group