Privacy Policy

Overview

StatusPal is operated by Dream TKY Trading LLC, a limited liability company organized under the laws of the State of New Mexico ("Dream TKY Trading LLC," "we," "us," or "our"). Dream TKY Trading LLC is responsible for the information described in this policy.

StatusPal helps you track your U.S. immigration case status. You don't need an account to use it — there's nothing to sign up for, and nothing to close later. This policy explains what information we collect, how we use it, and the choices you have. It covers the app, the contact form on this website, and the visitor notifications described under "Third-Party Services."

Information Stored On Your Device

We store your receipt numbers, nicknames, status history, and any notes you add only on your device. We also store your notification, background-refresh, Pro, language, and theme preferences there, along with your push token if Content & News Notifications are on (see "Notifications" below). None of this is uploaded to an account, because StatusPal doesn't have one.

Information Sent To Our Servers

When you add or refresh a case, we send your receipt number to our backend proxy, hosted on Render. The proxy asks USCIS's official Case Status API for your case status, then sends the answer back to your device.

We treat your receipt number as Personally Identifiable Information. See "Receipt Numbers (Personally Identifiable Information)" below for how we use, transmit, store, and protect it.

Receipt Numbers (Personally Identifiable Information)

We treat your USCIS receipt number as Personally Identifiable Information (PII), because it can be used to look up information about your immigration case.

How we use it. We use your receipt number only to get your case status from USCIS's official Case Status API. We don't use it for analytics, advertising, or any other purpose, and we never sell or share it with anyone other than USCIS.

How it's transmitted. When you add or refresh a case, the app sends your receipt number over an encrypted HTTPS connection to our backend proxy, hosted on Render. The proxy then sends it over HTTPS to USCIS's Case Status API and returns USCIS's answer to your device the same way.

How it's stored. We don't store receipt numbers on our servers. The proxy holds your receipt number in memory only for that one request, then discards it. It isn't written to a database or file, and case status responses aren't cached. The only lasting copy is on your own device, until you remove the case, use "Clear All Cases," or uninstall the app.

How it's safeguarded. Receipt numbers are encrypted in transit with HTTPS. Our proxy doesn't write receipt numbers to its logs. When it logs an error from USCIS, it first removes receipt numbers and other identifying details from the message. The operational alerts we send ourselves contain only generic information, such as an HTTP status code and a count, and never request data. Render, our hosting provider, may keep short-lived standard request logs for security and uptime; we don't use those logs for case data.

Protection from unauthorized access. The proxy accepts requests only from the StatusPal app with a valid access key, and it limits how many requests any one client can make. The credentials for USCIS's Case Status API are kept only on our server, never in the app, so the app can't call USCIS directly and those credentials can't be pulled out of it. Only Dream TKY Trading LLC can manage the server and its settings.

Feedback You Send Us

If you submit feedback from inside the app, through Menu → Contact / Feedback, we store your message on our servers — along with your email address, if you choose to give one.

We use Supabase, our database and hosting provider, to store this. We keep feedback for up to 24 months, then delete it automatically. See "Requesting Deletion Of Your Data" below if you'd like it removed sooner.

Messages sent through the contact form on this website are handled differently. See "Messages Sent Through This Website" below.

Messages Sent Through This Website

The contact page on this website has a form. If you use it, we collect the name, email address, and message you type in. We don't ask for anything else, and we never need your USCIS receipt number to help you, so please don't include it unless it's necessary.

We store these messages in Supabase, our database and hosting provider. Only we can read them, and access is protected by a password and two-step verification. We use your details only to read and reply to your message, and to limit spam — for example, by capping how many messages one email address can send per hour. Supabase may keep short-lived technical logs, such as IP addresses, for security and reliability. We don't use those logs for anything else.

This is different from feedback sent from inside the app. Website messages are not deleted automatically. We keep them until we delete them ourselves or you ask us to, and we manage this by hand. See "Requesting Deletion Of Your Data" below.

You can also email us directly at statuspaluscis@gmail.com. If you do, we hold your email, including your email address, in our email account and keep it the same way: until we delete it or you ask us to.

Anonymous Usage Analytics

We log a small number of anonymous events: the app opening, a case being added, a case being refreshed. Each event is tagged only with a randomly generated device ID and a timestamp.

This ID isn't derived from your device's hardware, and it isn't linked to your name, email, or case data. We store these events using Supabase, our database and hosting provider, and keep them for up to 24 months before deleting them automatically.

We use this data only to count how many people use the app. We never use it to identify or track an individual person.

Third-Party Services

StatusPal sends requests to USCIS and the U.S. Department of State (for the Visa Bulletin). Each is governed by its own privacy policy.

We use two infrastructure providers: Render, which hosts the backend proxy described above, and Supabase, which stores feedback, website contact-form messages, anonymous analytics data, and push tokens. Both are bound by the commitments in this policy — see "Data Sharing" below.

For the app's Content & News Notifications only, we also use Expo's push notification service and Google's Firebase Cloud Messaging to deliver notifications to Android devices, as described in "Notifications" below.

This website also uses ntfy.sh, a push-notification service, for our own internal visitor analytics. When you load a page on this website, your browser contacts ntfy.sh directly to send us a notification. That notification contains only the path of the page you visited (for example, "/blog/"), and nothing else — no name, email, cookie, or other identifying data. Because your browser connects to ntfy.sh directly, ntfy.sh can see your IP address, as any web server you connect to can. We don't receive your IP address from these notifications, and ntfy.sh's handling of connection data is governed by its own privacy policy.

StatusPal does not show ads today. If we add ads later, we'll update this policy first to name the ad provider and explain what it collects. StatusPal Pro will continue to remove ads.

Notifications

Case-update notifications are created on your device, by the app itself. They don't go through any push-notification server or third party, and the Content & News setting below doesn't affect them.

Content & News Notifications (Android only, for now) are different: we send them from our servers when we publish an announcement. They're on by default, and you can turn them off anytime in Menu. While they're on and you've allowed StatusPal to show notifications, the app registers a push token with our servers.

A push token is a random identifier that Expo's push notification service issues for this installation of the app. It's a per-device identifier: it lets a notification find your device, but it doesn't contain your name, email, receipt numbers, or case data. We store only the token itself, when it was first registered, and when it was last seen, using Supabase. It isn't linked to your analytics device ID, your feedback, or anything else we hold. Opening the app refreshes the "last seen" date, at most once a day.

To get a token, the app contacts Expo's servers directly, which (like any server) see your device's IP address. To deliver a notification, we send the token and the announcement's title and message to Expo, which passes it to Google's Firebase Cloud Messaging, which delivers it to your device. Every device receives the same announcement text; nothing in it is personalized.

We delete your token from our servers when you turn off Content & News Notifications in Menu, or the next time you open the app after turning off notifications for StatusPal in your device's settings. If the app isn't opened for 180 days, we delete the token automatically. If you uninstall the app, the token stops working, and we delete it when Expo reports it's no longer valid, or after 180 days at the latest.

Data Sharing

We do not sell your data. In the app, we only share your receipt number with USCIS, as described above, to fetch your case status. If Content & News Notifications are on, we also share your push token, along with each announcement's title and message, with Expo and Google's Firebase Cloud Messaging, only to deliver those notifications.

We don't let the providers we work with for the app — Render, Supabase, Expo, and Google — use or share your data, including de-identified or anonymized data, without your active consent. All are bound by the same privacy commitments made in this policy.

ntfy.sh, which this website uses for visitor notifications, is different. It's a public service that we have no formal agreement with, so it isn't bound by this policy. It receives only the path of the page you visited, as described under "Third-Party Services" above, and its handling of connection data, such as your IP address, is governed by its own privacy policy.

Your Data-Sharing Choices

In the app, StatusPal shares only three things: your receipt number, sent to USCIS to look up your case; anonymous analytics events, stored via Supabase; and, if Content & News Notifications are on, your push token, as described in "Notifications" above.

Sharing your receipt number is required — without it, we can't retrieve your case status. Analytics sharing carries very little risk, because it's never linked to your name, email, or case data. Its main limitation: because it's anonymous, we can't always match a specific analytics event back to a specific deletion request.

If you'd rather not share analytics data at all, the only way to opt out today is to not use the app. Your push token is optional: turn off Content & News Notifications in Menu, and it's deleted from our servers. Case-update notifications keep working either way.

Data Retention

Your saved cases stay on your device until you clear them — using "Clear All Cases" in the Menu — or uninstall the app. "Clear All Cases" only removes your cases and their history; uninstalling also removes your preferences and everything else stored locally.

We keep feedback submissions and anonymous analytics events on our servers for up to 24 months from when they're created, then delete them automatically. We keep a push token only while Content & News Notifications are on, and delete it automatically once the app hasn't been opened for 180 days. See "Requesting Deletion Of Your Data" below if you'd like yours removed sooner.

Messages sent through this website's contact form, and emails sent to us directly, are the exception: they are not deleted automatically. We keep them until we delete them ourselves or you ask us to.

Requesting Deletion Of Your Data

StatusPal doesn't have accounts, so there's no account to delete. On-device data is already in your control — clear your saved cases anytime with "Clear All Cases," or uninstall the app to remove everything else it stores locally, including your preferences.

To delete your push token from our servers, turn off Content & News Notifications in Menu — no request needed.

To request deletion of feedback or analytics data stored on our servers, contact us through Menu → Contact / Feedback. Tell us the approximate date you used the app and, if you gave one, the email address on your feedback. We will locate and permanently delete matching records within 30 days.

Because analytics events don't contain your name or email, we can only delete records we can reasonably match to your request.

To request deletion of a message you sent through this website's contact form, or by email, use the contact page or email us at the address above. Tell us the name and email address you used and roughly when you wrote. We will locate and permanently delete matching messages within 30 days.

Data Breach Notification

If a data breach affects your information, we will notify you. We'll do this as soon as reasonably possible after we learn of it — by email if you've given us one through feedback or the website contact form, or by a notice in the app if we have no other way to reach you.

We'll explain what happened, what information was involved, and what steps you can take to protect yourself.

If Our Business Is Sold Or Ends

If StatusPal is ever sold, merged, or shut down, any data we hold may transfer to the new owner. We will require that owner's privacy practices to be at least as protective as this policy.

Alternatively, we will give you the chance to request that your data be securely deleted or downloaded before any transfer happens. We'll notify users of this kind of change through the app or the contact information you've given us.

Children's Privacy

StatusPal isn't directed at children. We don't knowingly collect information from them.

Sensitive Information

StatusPal does not collect genetic information, health information, or family-history information of any kind. Because we never collect this kind of data, sharing it is not something this policy needs to address.

Changes To This Policy

If we make a material change to this policy, we'll ask for your active consent before it takes effect — for example, with an in-app prompt you have to acknowledge. We'll include a short, plain-language summary of what changed.

The "Last updated" date above always reflects the most recent revision.

Contact

Questions about this policy? Contact Dream TKY Trading LLC through Menu → Contact / Feedback (in the app), via the contact page on this website, or by email at statuspaluscis@gmail.com.

← Back to home