Privacy Policy

Last updated: September 12, 2026 · Indigo Biosolutions LLC, a Pennsylvania limited liability company, doing business as CitizenPass

The short version

• We never require your A-Number or receipt number. Every core feature — timelines, predictions, the brief, civics practice — works without them.
• Optional official case tracking. If you choose to add a receipt number to see USCIS’s official status, it is encrypted with AES-256-GCM before storage; only the last 4 characters are ever displayed, and deleting the case removes the encrypted value permanently. We never collect A-Numbers at all.
• We never sell your data. Not to advertisers, not to law firms, not to anyone.
• Timeline submissions are published only in aggregate — never individually, and never tied to your name. If you add an email address so we can tell you when your office moves, we hold that address with your submission; ask us and we delete both.
• Your tracker inputs (office + filing date) stay in your own browser unless you create an account.

What we collect

Account and weekly brief: your email address. Preferences: your chosen field office and email settings. Community timelines: milestone dates + field office, stored without any link to your account by design — plus an email address, only if you ask to be told when your office moves, and an optional free-text note. Please don’t put receipt numbers or personal details in that note; we filter what we can catch, and we delete the rest on request. Tracked cases (opt-in): an encrypted receipt number and the status text USCIS returns. Pro accounts: the matter labels and dates an attorney enters for their own roster, visible only to that account. Payments: handled entirely by Stripe; we never see or store your card number.

We do not run website analytics. There is no Google Analytics, no advertising pixel, and no cross-site tracking on this site. If that changes, we will say so here before it does.

What we use it for

Sending the weekly brief you asked for, computing aggregate office statistics, operating your account, and providing the features you paid for. That’s it. We do not use your data to train AI models.

Who we share it with

Service providers only, each processing data on our behalf: Supabase (database and sign-in), Stripe (payments), Resend (sending email), Vercel (hosting), and Cloudflare (domain and inbound email forwarding).

We also use Anthropic and Perplexity to write the weekly brief. These process published government information and public reporting only — your email address, account, timeline submissions, and tracked cases are never sent to them.

We disclose data if legally compelled, and we will tell you unless we are prohibited from doing so.

How long we keep it

Account data for as long as you have an account, and for a short period afterwards in backups. Tracked cases until you delete them. Aggregate, anonymous timeline statistics indefinitely — these contain no link to you and cannot be traced back to an individual.

Your choices

Unsubscribe from the brief at any time using the link in any email or on your account page. Email support@citizenpassusa.com to delete your account, your email address, any tracked cases, and any timeline submission you made. We will confirm when it’s done. Aggregate statistics, which contain no link to you, remain.

Depending on where you live, you may have additional rights to access, correct, or export your data. Email us and we will honour them regardless of where you live.

Children

CitizenPass is intended for adults applying for U.S. naturalization and is not directed to children. We do not knowingly collect information from anyone under 18.

Contact

Indigo Biosolutions LLC d/b/a CitizenPass
175 Strafford Avenue, Suite One, Wayne, PA 19087, USA
support@citizenpassusa.com