Information stored on your device
CaseLuma may store the following locally on your device:
- Saved USCIS receipt numbers
- Custom case labels and notes
- Case status snapshots and review dates
- Checklist, reminder, language, appearance, and privacy-lock preferences
Receipt number lookups
When you check a USCIS receipt number, CaseLuma may send that receipt number to a secure CaseLuma backend so the backend can request status data from USCIS. USCIS API credentials are not stored in the iPhone app.
The backend receives only the information needed to complete the lookup and operate the service, such as the receipt number, request time, endpoint, response status, trace IDs, and basic diagnostics. Backend logs mask receipt numbers where possible and do not store USCIS client secrets, OAuth tokens, or private Apple keys.
Push status alerts
If you enable status update alerts, CaseLuma may send saved receipt numbers and a device push token to the CaseLuma backend so it can check for status changes and send notifications to your device.
You can turn status alerts off in the app. You can also disable notification permission in iOS Settings. Turning alerts off removes the active backend subscription for that device.
What CaseLuma does not collect
- No account password is required by the current app.
- No account profile is required by the current app.
- No biometric data is collected by CaseLuma.
- No USCIS API secrets are stored in the iPhone app.
- The current app flow does not upload immigration documents.
- CaseLuma does not collect geolocation, financial information, medical information, genetic information, family history information, user contacts, Social Security numbers, Alien Registration Numbers, passport numbers, or full immigration documents.
Retention
- Local saved cases, labels, notes, snapshots, reminders, and preferences remain on your device until you delete them in the app or remove the app from your device.
- For one-time receipt lookups, CaseLuma does not keep backend case snapshots unless the case is registered for optional status alerts.
- For optional status alerts, the backend keeps the receipt number and device push token while alerts are enabled.
- Push delivery events are normally deleted after 30 days.
- Rate-limit records are normally deleted after 2 days.
- Disabled device registrations are normally deleted after 30 days.
Deletion requests
You can delete saved cases from the app settings. You can also remove the app from your device to delete locally stored app data handled by iOS.
To request deletion of backend data associated with status alerts, email [email protected]. CaseLuma will process verified backend deletion requests within 30 days unless a longer period is required for security, fraud prevention, legal compliance, or dispute resolution.
CaseLuma does not currently create user accounts, so there is no account to close and no separate dormant-account profile to retain. If account features are added later, this policy will be updated before launch of that feature.
Sharing
CaseLuma does not sell personal information for money or other valuable consideration.
CaseLuma may share limited information with service providers and official sources only as needed to operate the app:
- Apple, for App Store distribution, in-app purchases, DeviceCheck, and push notifications.
- Cloudflare, for secure API hosting, database storage, routing, and operational security.
- USCIS, when a receipt number is submitted for a case status lookup or status alert check.
These providers may process data only to provide their services, protect their systems, comply with law, or as described in their own applicable terms. CaseLuma does not authorize third parties to use or disclose user information, including de-identified, anonymized, or pseudonymized data, for advertising, resale, or unrelated purposes without active user consent.
CaseLuma does not share genetic data, family history data, or contacts because the app does not collect those categories. Users should avoid emailing full immigration documents, Social Security numbers, Alien Registration Numbers, passport numbers, or other sensitive documents unless specifically requested for support.
Choices
- You can use CaseLuma without creating an account.
- You can choose not to save a case locally.
- You can turn optional status alerts off.
- You can choose not to export or share a case summary.
- You can request backend deletion by email.
Some choices limit app functionality. For example, status alerts require a receipt number and push token, and live case checks require sending a receipt number through the secure backend to USCIS.
California privacy
If California privacy laws apply to you, you may request access, correction, deletion, or information about how personal information is handled by contacting [email protected]. CaseLuma does not sell personal information.
Security incidents
If CaseLuma learns of a data breach involving user information, CaseLuma will notify affected users as required by law and provide instructions for reasonable next steps, if any.
Business transfer
If CaseLuma or its operator is sold, merged, reorganized, or transferred, users will be notified of the change. User information will remain subject to privacy protections consistent with this policy, or users will be offered a reasonable way to delete applicable backend data before materially different policies apply.
Policy changes
CaseLuma may update this policy as the app changes. Material changes will be posted on this page with an updated date and a plain-language summary where appropriate. If a change materially expands data collection, data sharing, or third-party use, CaseLuma will request active consent through the app, email, or another clear user action before applying that expanded use where required or appropriate.
Children's privacy
CaseLuma is not directed to children under 13.
Contact
Questions about privacy can be sent to [email protected].