The short version: CaseSignal has no accounts and no servers of ours. Your USCIS sign-in and your case data stay on your device. We cannot see them, because they are never sent to us.
What stays on your device
Your USCIS session. When you sign in to my.uscis.gov inside the app, the resulting session cookie is stored in the iOS Keychain on your device.
Your USCIS email and password, only if you choose to save them for sign-in autofill. They are stored in the Keychain and used solely to prefill the USCIS sign-in form. You can clear them in Settings.
Your case data — receipt numbers, statuses, event history, appointment notices, and the names USCIS returns. Cached on your device so the app works offline and can show the widget.
Notifications are generated on your device by comparing the case data it already has. No push service is involved and no notification content leaves your phone.
Where the app connects
The app makes network requests to exactly two places:
my.uscis.gov — your own USCIS account, using your session, to read your cases. This is a direct connection between your device and USCIS. Your use of that site is governed by USCIS's own policies.
mycase-data.pages.dev — a static file host (Cloudflare) from which the app downloads two public reference files: community wait-time statistics and the monthly visa bulletin dates. These are plain downloads. The app sends no case data, no identifiers, and no account information with them. As with any web request, the host receives technical details such as your IP address and the time of the request; we do not use these to identify anyone and we do not build profiles from them.
What we do not do
No analytics, no advertising, no third-party tracking SDKs. The app contains none.
No CaseSignal account, login, or user database — there is nothing to breach.
We do not sell, rent, or share your information, because we do not receive it.
No tracking across other apps or websites.
Deleting your data
Delete the app from your device. That removes the cached case data, the stored session, and any saved credentials. Signing out inside the app removes the stored session on its own. Because none of it was ever sent to us, there is nothing for us to delete on our side.
Children
CaseSignal is not directed at children and does not knowingly collect information from anyone under 13.
Changes
If this policy changes, the updated version will be posted on this page with a new date.