Privacy Policy

1. Information We Collect

When you use NextStatus AI, we collect only the information necessary to provide immigration tracking, reminders, and legal reference tools:

• Account Information: Name, email address, password hash, preferred language, state, and country of origin.
• Immigration Case & Status Details: USCIS receipt numbers, form types (e.g., I-485, I-765, I-821, N-400), application filing dates, and case milestones you choose to track.
• Document Vault Uploads: Files, notices, and images you voluntarily upload (such as receipt notices, EAD cards, or passports) to organize deadlines and verify expiration dates.
• Customer Support & Communications: Messages, feedback, or inquiries you submit through the in-app assistant or contact forms.
• Technical & Device Data: Device operating system version, app version, IP address, and push notification tokens (when you explicitly opt in) to deliver case status change alerts.

2. How We Use Your Information

We use your data solely to operate, maintain, and provide NextStatus AI services:

• Querying official, publicly available USCIS case status systems on your behalf using your receipt numbers.
• Sending automated push notifications and email reminders for expiring documents, biometric appointments, and renewal deadlines.
• Providing AI-assisted immigration guides, fee calculators, and pathway screeners.
• Maintaining system security, preventing fraud or abuse, and verifying subscription status.

3. No Advertising & No Data Selling

We treat your immigration journey with complete privacy:

• No Advertising SDKs: We do not track users using Google Advertising ID (AAID), Apple IDFA, or third-party ad networks. We do not display third-party advertisements in NextStatus AI.
• We Never Sell Your Data: NextStatus AI does not sell, rent, monetize, or trade your personal information, documents, or immigration case records to third-party data brokers, marketers, or advertisers.
• Trusted Infrastructure Processors: We share data only with verified cloud infrastructure providers (such as Supabase for database storage, Cloudflare for hosting, Stripe/Apple/Google for payment processing, and Apple/Firebase for push notifications) strictly bound by data processing and confidentiality agreements.

4. Community Pulse & User-Generated Content (UGC)

When you participate in our Community Pulse feed:

• Milestone posts are shared anonymously. Your name, email address, and case receipt numbers are never made public.
• All community posts are subject to automated moderation and administrative review.
• Users have in-app controls on every post to report objectionable content and immediately block users, hiding their content from view.

5. Account Deletion & Data Retention (Apple & Google Compliance)

In full compliance with Apple App Store Guideline 5.1.1(v) and Google Play Data Safety policies, you have the complete right to delete your account and all associated data at any time:

You may also request account and data deletion at any time by emailing privacy@nextstatusai.com or support@nextstatusai.com. Requests are verified and fulfilled within 30 days.

6. Data Security & Encryption

We implement industry-standard administrative, physical, and technical safeguards:

• All network communications are encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).
• User document vault uploads are stored in encrypted cloud object storage.
• Database records are isolated using PostgreSQL Row Level Security (RLS), ensuring that only your authenticated account can access your private case data.

7. Children's Privacy

NextStatus AI is an immigration status tracker intended for adult individuals (18 years of age or older). We do not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in the EEA/UK). If we learn that we have collected personal data from a child without verified parental consent, we will delete that information immediately.

9. Contact Us

For any privacy inquiries, data deletion requests, or questions regarding our practices, contact our Data Protection team: