Privacy Policy

Summary

• We do not sell your data. We do not use it for advertising. The app has no third-party advertising or analytics tools.
• Most of what you enter about your case stays on your device. Your A-Number goes from your device straight to the government’s EOIR system, not to us.
• When a feature has to send data to a server, this policy says what is sent, who receives it, and how long it is kept.
• You can delete your data in the app or by email. We complete deletion requests within 30 days.
• If we change how we use your data, we will show you a short summary in the app and ask for your agreement first.

Who We Are

AsylumTracker is operated by Eigenbit LLC, a Wyoming limited liability company (“we” or “us”). This policy covers the AsylumTracker apps for iOS and Android and our website, asylumtracker.com. You can reach us at [email protected].

Information That Stays on Your Device

Your favorites, settings, language, onboarding answers, and AI usage counters are stored on your device.

If you track an EOIR case on iOS, the case record can include your A-Number, nationality, name, case status, asylum clock, and hearing dates. It is stored on your device with iOS file protection. It is not sent to our servers. The app marks this data to be left out of device backups, but iOS has the final say on backups. Saved history keeps the case status without your name or A-Number.

My Case answers (such as fee and work permit dates), your hearing checklist, and reminders also stay on your device. The exceptions are iCloud sync and Ask, described below.

Usage Events and Crash Reports

The app creates a random installation ID. It is not linked to your name, Apple ID, Google account, or advertising ID.

The app sends basic usage events with this ID to our own server. Examples are opening a screen, seeing an upgrade screen, a lookup finishing, or a purchase completing. An event can say which court or judge page you opened. Events never contain your A-Number, name, receipt number, or anything you type.

Our website sends similar events without any ID or cookie. They record things like which judge page was opened, whether a search found results, and which download button was tapped. The website uses no tracking cookies and no third-party analytics.

On iOS, if you allow sharing with app developers in your device settings, iOS gives the app a report when it crashes or freezes. We send a short technical summary to our server with the installation ID. It includes the error type, where in the code it happened, the app and iOS versions, and the device model. It contains nothing you entered.

We use events and crash reports only to keep the app working, fix problems, and improve features, including upgrade screens. We keep them without a set end date. They are not linked to your name.

Server Logs

Our backend runs on Supabase, and our website runs on Cloudflare. To deliver and protect the service, they process your IP address and basic request details. Supabase keeps our server logs for 7 days. Cloudflare handles website requests under its own privacy policy.

Purchases

Apple App Store and Google Play process all payments. We never see your card number.

On iOS, our server stores the verified details of App Store transactions. These are the transaction and product IDs, purchase and expiration dates, refund status, price, currency, and store country. It also stores a random ID that the app creates for purchases. We do not use it for advertising or tracking.

For Android AI credits, we store your remaining balance, the Google Play order ID, and a one-way hash of the purchase token. This lets us restore credits and stop the same purchase from being used twice. We use the raw token only to check the purchase with Google Play, and we do not store it.

Ask question packs and report credits are recorded with your installation ID, so your balance works across app updates.

We keep purchase records as long as we need them for your purchases, taxes, and accounting.

We do not send Apple information about your purchases or app use when you ask Apple for a refund. To see or delete information already sent to Apple, contact Apple at privacy.apple.com.

Notifications

If you turn on Judge Data Update Alerts, our server stores your device’s push token with the judge and court codes of the case you track. We use them only to tell you when new monthly data is out. No name, A-Number, or case record is sent. Turning the alerts off, or deleting the tracked case, removes the token and codes.

If you follow a court in the community, our server stores your push token, the court code, your community account ID, language, and platform. We use them only to tell you about new posts for that court. Unfollowing removes them.

Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android) deliver notifications. We delete a push token as soon as Apple or Google tells us it no longer works.

Community

You can read, post, and comment without signing in. If you do, the app creates an anonymous community account. Others see you as “Anonymous” with a four-digit number, such as “Anonymous #1234”.

You can also sign in with Apple or Google. Then we receive an account ID and, if you share it, your email address. Apple may give us a private relay address instead. A signed-in account keeps your name and posts across devices.

For community accounts, we store your display name, avatar, role (such as applicant), posts, comments, helpful votes, reports, blocks, and moderation records.

Posts and comments are public. When you write a post, you can choose to attach your case card. The app shows you exactly what others will see first. The card shows only your court, judge, case stage, and hearing month. It never shows your A-Number, name, or exact dates.

Google’s AI (Vertex AI) checks new posts and comments for rule violations and translates them so people can read them in their own language. Posts reported by users are also reviewed by us. A question posted in the community may get an answer from our AI data assistant. It is labeled as an AI answer and is not legal advice.

You can delete your own posts and comments. Their text is erased right away. Anonymous posts can be deleted only from the device that wrote them, and only until you sign in on that device. Signing in starts a separate account, so earlier anonymous posts can no longer be deleted in the app. Deleting the app or changing phones has the same effect. You can always email us to remove a post or comment you wrote.

Judge Check-ins

You can share how your hearings with a judge are going. We store your answers (such as outcome, hearing month, tags, and an optional comment) with your installation ID. Other users see combined counts and anonymous cards with your answers and comment. The cards show no name or ID. You can remove your check-in in the app at any time, and it is deleted right away.

Referral Program

The app gives you a referral code linked to your installation ID. When a new user redeems a code, we check that the code is real and that the device has not redeemed one before. For this, we use Apple’s DeviceCheck service, which stores one yes-or-no flag for the device. We also store a one-way hash of the IP address used. When someone opens a referral link on our website, we keep the hashed IP address, system version, and device type. We use them to match the link to the new install and delete them after 24 hours.

We keep referral codes, redemptions, and rewards, including the IP hash, without a set end date.

Ask (AI Data Questions)

Before your first question, Ask asks for your consent. When you ask, we send your question to trusted AI providers: Google’s Vertex AI, Anthropic’s Claude, and Apple’s Private Cloud Compute. We also send up to three earlier questions from the same conversation and the page you asked from, such as the judge, court, nationality filter, and filing month.

If you track a case in My Case, Ask also receives the dates the app calculated from it. These are your next hearing and your asylum fee and work permit dates. This lets Ask answer questions about them. A question that used these dates is not kept with the stored questions and answers.

Please do not put your A-Number, name, or other personal details in a question. If a question contains an A-Number, Social Security number, or USCIS receipt number, Ask refuses it and does not send or keep it. We remove email addresses and phone numbers before a question is processed.

To improve Ask, we keep questions and answers. We also keep whether you found an answer helpful and which pages you opened from it. After a holding period of up to 4 days, we remove the link to your device, installation ID, and account. After that, we cannot find or delete one person’s questions. We delete these questions and answers within 24 months.

If you queue a question, we keep it with its page context, its answer, and your push token until the answer is delivered. We delete them within 7 days after that.

Our Ask server log keeps usage details under a one-way hash of your installation ID. These are the language, what data was looked up, timing, and the result. It contains no question or answer text. We use it to apply question limits, and we delete it within 180 days. To recognize a repeated request, we keep a keyed fingerprint of the question for up to 48 hours. It cannot be turned back into the text. To prevent abuse, we count requests per day using one-way hashes of your installation ID and IP address. We delete these counts within 30 days.

AI Case Analysis

When you request an AI case analysis, the case details you choose to include are sent to our server. Our server sends them to Google (Vertex AI or the Gemini API) to write the analysis. We do not store these details or the analysis on our server. The result is saved on your device. On Android, we also send a one-way hash of a device identifier to apply usage limits. We never receive the identifier itself.

EOIR Case Lookup

When you look up or refresh an EOIR case, your A-Number and nationality go straight from your device to the Department of Justice’s EOIR case information system. They do not pass through our servers.

EOIR lookups use hCaptcha to block automated abuse. hCaptcha processes your answer to the challenge and signals such as your IP address and device or browser details.

If you enter a ZIP code to find your court, it is sent to our server to look up the court. We do not store it. Looking up a judge’s hearing schedule sends only the judge and date to our server.

USCIS Case Status (iOS)

If you add a USCIS receipt number on iOS, the app sends it to our server. Our server asks the official USCIS Case Status API for the status. We store the receipt number and what USCIS returns for it. That is the form type, the status and its description in English and Spanish, the dates USCIS provides, and the status history. We also store when we last checked.

Our server checks again about every four hours. For a final decision that has not changed in 30 days, it checks once a day. If alerts are on, we send a notification when the status changes. We do not ask for your name, A-Number, or USCIS account password, and we never sign in to your USCIS account.

Your cases are linked to your device, not to an account. The app creates a random key that stays in your device’s keychain. Our server keeps only a one-way hash of it, with your push token, app language, platform, app version, and subscription status. When your device registers or adds a case, we keep a keyed hash of your IP address to limit abuse. It is normally deleted after one day. Receipt numbers are sent only to USCIS.

When you remove a case, its link to your device is deleted right away. The stored status is deleted as soon as no device follows that receipt number. If a device does not contact our server for 365 days, its key hash, push token, and case links are deleted. You can also email us a receipt number to have its data deleted.

Web Report Builder

If you sign in to the web report builder, we store your email address and the client profiles and report data you save. This can include client names, case numbers, notes, report settings, and export history. It is linked to your account so you can continue your work later. We keep it until you delete it or your account. When you delete a record, its contents are erased right away. An empty marker stays so your other sessions know it was deleted.

In the iOS app, client reports are created on your device. Our server records only credit use, with a random report ID.

iCloud Case Data

You can turn on “Keep my case data in iCloud (end-to-end encrypted)”. The app then stores your tracked cases, My Case answers, hearing checklist, and reminder choices in your private iCloud. Ask history is included only if you choose it. The copy is end-to-end encrypted with keys in your iCloud Keychain, so Apple cannot read it. It can sync to your other devices on the same Apple ID. Our servers never receive it. Turning the switch off deletes the iCloud copy. The switch is off until you turn it on.

Information We Do Not Collect

We do not collect your precise location, contacts, or microphone audio. We do not read your photo library. If you choose a profile picture, only that picture is uploaded.

How We Use Information

We use information only to:

• provide the features you use, such as court and judge data, case tracking, community, Ask, and purchases;
• deliver the notifications you turn on;
• keep the service secure and prevent abuse;
• enforce community rules;
• fix problems and improve the app.

We Do Not Sell Your Data

We do not sell your personal information. We do not share it for targeted advertising. We do not give de-identified user data to anyone else. The statistics in the app come from public government data. The only exception is judge check-ins, which come from users and are shown without names or IDs.

Who Receives Data

We use these service providers to run the app:

• Supabase: database, sign-in, and server functions.
• Cloudflare: website hosting and security.
• Apple: App Store purchases, notifications, Sign in with Apple, DeviceCheck, Private Cloud Compute for Ask, and iCloud if you turn it on.
• Google: Google Play purchases, Firebase Cloud Messaging, Sign in with Google, Vertex AI and the Gemini API for AI features, moderation, and translation, and ML Kit on Android.
• Anthropic: Claude, for Ask and AI answers in the community.
• hCaptcha: abuse protection for EOIR lookups.

We send government agencies only what a lookup needs. Your A-Number and nationality go from your device to EOIR. USCIS receipt numbers go from our server to USCIS.

We share data with a provider only to run a feature you use. Our providers may use it only to provide their service to us, and they must protect it. Under their business terms, our AI providers do not use it to train their models. We do not let any other company use your data for its own purposes without your consent.

Some services work under their own privacy policies:

• Apple and Google process purchases, sign-in, and notifications under the agreements you have with them.
• hCaptcha uses the signals it collects to fight abuse across its service.
• On Android, you can translate community posts on your device with Google ML Kit. The text stays on your device. ML Kit sends Google limited diagnostic data, such as device model, OS version, app version, an installation ID, performance data, and the languages used. Google uses it to run and improve ML Kit.

We may disclose information if the law or a valid legal process requires it. When the law allows, we will tell the affected users first.

Your Choices

Each choice has benefits and risks:

• Ask: You get answers based on our data and your case dates. Your question goes to outside AI providers, so leave personal details out. You can use the app without Ask.
• Signing in to the community: Your posts follow you across devices, and you can delete them later. Your account is linked to your Apple or Google sign-in. If you stay anonymous, no name is shown, but you may lose the ability to delete posts in the app.
• Attaching your case card: Others can understand your situation better. Someone who knows you might recognize you from your court, judge, stage, and month.
• iCloud sync: Your case data is backed up and synced. A copy is kept in your iCloud, encrypted end to end.
• USCIS tracking: You get status alerts. Your receipt number is stored on our server.
• Notifications: You get timely updates. Your push token is stored on our server. You can turn them off at any time.
• Crash reports: You help us fix problems. You can turn them off in iOS Settings, under Privacy & Security, Analytics & Improvements, Share With App Developers.

Information About Other People

If you enter information about someone else, you are sharing their data. This includes a family member’s receipt number, a post that mentions someone, or a summary you share. Please get their permission first. Never post another person’s A-Number, name, or contact details.

User-Initiated Sharing

If you tap Share Redacted Summary, the app creates a summary of your case with personal details removed and opens the iOS share sheet. Only what you choose to send goes to the app or person you pick. Their own privacy practices apply. AsylumTracker never shares tracked case records on its own.

How Long We Keep Data

• On your device: until you delete it or delete the app.
• Usage events and crash summaries: no set end date; not linked to your name.
• Server logs: 7 days.
• Ask: as described in the Ask section (up to 24 months, without any link to you after 4 days).
• AI case analysis: not stored on our server.
• USCIS case status: until no device follows the receipt number; inactive devices after 365 days.
• Push tokens: until you turn notifications off, unfollow, or the token stops working.
• Community accounts and posts: until you or we delete them. Accounts you stop using, including anonymous ones, are not deleted automatically. You can delete yours in the app or by email.
• Judge check-ins: until you remove them.
• Referral program: link data for 24 hours; codes, redemptions, and rewards with no set end date.
• Purchase records: as long as needed for purchases, taxes, and accounting.
• Web report builder: until you delete it; contents are erased right away.
• Backups: Supabase keeps daily backups for 7 days, so deleted data can remain in a backup for up to 7 days.

How to Delete Your Data

In the app, you can:

• remove tracked EOIR and USCIS cases;
• turn off notifications and unfollow courts;
• delete your posts and comments, and, if you signed in, your whole community account;
• remove your judge check-ins;
• turn off iCloud sync, which deletes the iCloud copy;
• delete the app, which removes the data stored on your device.

You can also email [email protected]. Tell us what to delete, such as a receipt number or a link to a post. Most of our data is not linked to a name, so we may ask for details that help us find it. We will never ask for your A-Number or passwords. We complete deletion requests within 30 days and confirm by email. See also our Account Deletion page.

Security

We use encrypted connections and access controls. API keys stay on our servers, never in the app. We collect as little as we can. No system is perfectly secure, so please do not share more than a feature needs.

If a Data Breach Happens

If a breach affects your personal information, we will tell you without unreasonable delay, as the law requires. We will notify you in the app, by email if we have your address, and on this page. We will also notify the authorities when the law requires it. The notice will say what happened, what data was involved, and what you can do.

Children

AsylumTracker is not meant for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has given us personal information, email us and we will delete it.

Your Privacy Rights

You can email us to ask what personal information we have about you, to get a copy, or to correct or delete it. We offer this to every user, wherever you live, including California residents under the California Consumer Privacy Act (CCPA). We respond within 30 days, and using these rights never changes how the app treats you.

If Our Business Changes

If Eigenbit LLC merges, is sold, or sells AsylumTracker, user data may move to the new owner. The new owner must keep the promises in this policy, or ask for your consent before using data in new ways. We will tell you in the app and on this page before any data moves, so you can delete your data first.

If we close AsylumTracker, we will announce it in the app and on this page first. After closing, we will delete the data on our servers, except records the law requires us to keep.

Changes to This Policy

When we change this policy, we post the new version here with a new date and a short plain-language summary of what changed.

If a change is material, we will show you the summary in the app and ask for your agreement before it applies to you. Examples are collecting new data, using data for a new purpose, or sharing it with a new kind of recipient. If you do not agree, the rest of the app keeps working, but a feature that depends on the change may stay off. We will not use data collected earlier in a materially different way without your agreement.

Government Affiliation and Legal Disclaimer

AsylumTracker is not affiliated with EOIR, USCIS, DHS, DOJ, or any other government agency. Information in AsylumTracker is for general information only and is not legal advice. Talk to a qualified immigration attorney about your case.

Contact

For privacy questions, email [email protected].