ImmigrationLens Privacy Policy

Last updated: August 10, 2026

ImmigrationLens is operated by Touchstone Technology Consultants LLC (touchstonedata.io).

ImmigrationLens is built so that your immigration case information stays on your device. This policy explains exactly what the app stores, what little it transmits, and why.

The short version

• Your case details, scanned notices, and attorney communication log never leave your device in identifiable form.
• We have no accounts, no sign-in, no advertising, and no third-party analytics.
• When you use optional cloud-assisted analysis, the app sends only an anonymized summary of your case — never your name, receipt numbers, exact dates, or anything you typed.

What the app stores on your device

Case type, filing dates, service center, milestones, scanned USCIS notices (including text recognized from photos), attorney communication entries, reminders, and your language preference. This data is stored in Apple's protected local storage on your device and is encrypted while your device is locked. Photos are processed on your device; text recognition (OCR) happens on your device using Apple's Vision framework. Translation happens on your device using Apple's Translation framework. You can delete any case, notice, or communication entry at any time; deleting a case also deletes its notices, communications, and scheduled reminders.

What we do not collect: the app does not collect financial information, medical information, your contacts, or your device's GPS location. The only location-related data is a place name you choose to type into office search, rounded before it is sent (see below).

What the app transmits, and when

1. Anonymized case analysis (optional). When you run "Analyze My Case" or certain lookups, the app contacts our server with an anonymized profile containing only: the USCIS form number (e.g. "I-130"), the service center as a public category (e.g. "NSC"), your case stage, time intervals rounded to whole weeks (for example "filed about 12 weeks ago" — never the actual date), whether an attorney is engaged, and your app language. Free-text concerns, names, nicknames, receipt numbers, and exact dates are stripped before anything is sent. Our server forwards this anonymized profile to an AI service (Anthropic Claude) to generate the analysis and does not use it to identify you.

2. Live case-status lookup (optional). If you look up a case by receipt number, that receipt number is sent to U.S. Citizenship and Immigration Services' own Case Status system — the same authority that issued it — via our server. We do not store your receipt number on our servers.

3. Office search (optional). If you search for a nearby USCIS office, the place name you type is converted to map coordinates on your device and rounded to roughly a 1-kilometer area before being sent. The app does not use or transmit your device's GPS location.

4. Subscription trial count. If you use the free trials of "Analyze My Case," a single number (how many trials remain) is stored in your personal iCloud key-value storage so it follows your devices. No case information is stored in iCloud.

Purchases

Subscriptions are processed by Apple through the App Store. We do not receive or store your payment details. Manage or cancel your subscription in your device Settings.

What we don't do

• No user accounts and no sign-in.
• No advertising and no advertising identifiers.
• No third-party analytics or tracking SDKs.
• We never sell your data — not for profit and not for any other payment or benefit. This covers identifiable, de-identified, and anonymized data alike.
• No sharing of personal information with third parties for marketing.
• No use of your data to train AI models.

Who receives data, and how they are bound

The short list below is complete. No one else receives any data from ImmigrationLens.

• Apple processes your subscription payments through the App Store, under Apple's own privacy policy. We never see your payment details.
• Anthropic operates the AI service (Claude) that generates optional case analysis. It receives only the anonymized profile described above, uses it only to generate your analysis, and may not use it to identify you or to train models.
• USCIS receives the receipt number you submit when you run a live case-status lookup (when that feature is available). USCIS is the government agency that issued the number.
• Vercel hosts our server and processes requests in transit.
• Upstash stores anonymous usage counters for our server. These counters contain no case information.

Each provider is bound by contract terms covering the data we send it. Third-party use or disclosure of your information — including de-identified, anonymized, or pseudonymized data — is prohibited for any purpose without your active consent. We share nothing with marketers, advertisers, or data brokers.

Your choices about sharing

Every transmission described above is optional and happens only when you start it. If you never run cloud-assisted analysis, a live lookup, or an office search, nothing is sent at all. The benefit of sharing is the feature itself; the limitation is that our reference data may lag USCIS; the risk is small because inputs are anonymized before they leave your device.

One thing to keep in mind: your case details may describe other people, such as family members included in the same petition. Anonymization strips names, dates, and identifiers before anything is sent, which protects them as well as you. Even so, only you decide whether to run analysis on a case that involves others.

Data retention and deletion

Everything the app stores lives on your device (and, for the trial counter only, your personal iCloud). Deleting content in the app removes it immediately; deleting the app removes all locally stored data. Anonymized analysis requests are not linked to your identity and are not retained by us.

• How to permanently delete your data: delete individual items inside the app, or delete the app to remove everything at once. Both take effect immediately. For the trial counter in your personal iCloud, delete the app's iCloud data in Settings → your name → iCloud.
• Server-side data: our servers keep only anonymous usage counters and device-attestation identifiers, which expire automatically within at most 365 days. To request earlier permanent deletion, email joshua@touchstonedata.io; we will complete the deletion within 30 days.
• Dormant data: there are no user accounts, so no dormant-account data accumulates. If you stop using the app, the server-side counters simply expire on their own within at most 365 days.
• Closing your account: there is no account to close. Deleting the app ends the relationship and removes your data.

If there is a data breach

If a breach affects our servers, we will post a prominent notice in the App and on this page. The notice will describe what happened and give you instructions for any steps you should take. Because our servers keep no accounts and no identifiable case data, the risk to you from a server breach is inherently low.

If our company changes hands

If Touchstone is acquired, merges, or winds down, we will notify you before your data is affected. Any new owner must honor this policy for data collected under it. If a new owner will not commit to that, we will give you the opportunity to permanently delete your data — and to save a copy of anything held for you — before any transfer happens.

Children

ImmigrationLens is not directed at children under 13.

Changes to this policy

If we make a material change to this policy or to our Terms of Use, the app will show you a plain-language summary of what changed. It will ask for your active consent before you continue using the affected features. We will also update this page and revise the "Last updated" date above.

California residents (CCPA/CPRA)

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act. You have the rights to know, delete, and correct the information a business holds about you. Because your data stays on your device, you exercise these rights directly in the app; for the little our servers hold, email joshua@touchstonedata.io. We honor these requests for all users, not just California residents, and we will never treat you differently for exercising them.

For users in the EEA and the United Kingdom (GDPR / UK GDPR)

Controller. Touchstone Technology Consultants LLC, a Texas limited liability company, United States — contact joshua@touchstonedata.io.

What we process and why. Most of your data never leaves your device. Our servers process: (a) anonymized case-analysis inputs (form type, week-coarsened day offsets, cadence statistics — no names, dates, or free text), on the legal basis of performing our contract with you; (b) device attestation identifiers and subscription transaction identifiers used to verify genuine devices and subscriptions and to enforce usage limits, on the legal basis of our legitimate interest in preventing abuse and securing the service; and (c) when live case-status lookup is available, the USCIS receipt number you submit, sent to USCIS only, to perform the lookup you requested.

Retention. Usage counters expire on rolling windows of at most 365 days. Anonymized analysis inputs are not retained after processing. We keep no account of you and cannot identify you from what we hold.

International transfer. Our servers are operated in the United States. Where processing involves personal data of EEA/UK users, we rely on appropriate safeguards under applicable data protection law for the transfer.

Your rights. You have the rights of access, rectification, erasure, restriction, portability, and objection. Because your case data lives on your device, most of these are exercised directly in the app (including full deletion). For anything our servers hold, contact joshua@touchstonedata.io and we will respond within one month. You also have the right to lodge a complaint with the supervisory authority of your country of residence.

No profiling with legal effect. We make no automated decisions about you that produce legal or similarly significant effects.

Contact

joshua@touchstonedata.io