Privacy Policy
Last updated: August 6, 2026
Short version: we collect what is needed to check your case and reach you, we do not sell anything to anyone, and you can have it all deleted.
CaseCheck is operated by Immigrant App Inc, 848 Brickell Ave, Suite 800, Miami, FL 33131, United States. Questions about this document: [email protected].
What we collect
- Your email address — it is your login and the main place we write to.
- Your password, stored only as a scrypt hash. We cannot read it, and neither can anyone who steals the database.
- Case details you enter: the nine-digit A-Number and country of citizenship.
- What the court publishes about those cases: hearing date, court, judge decision, and the history of changes.
- Channel identifiers you connect: Telegram id and username, WhatsApp number, phone number for text messages.
- Technical records: sign-in times, the browser string of a session, and server logs kept for security.
We do not ask for documents, photographs, immigration files, or family details. Do not send them to us.
Why we collect it
To do the one thing you asked for: look up a case, watch it, and tell you when it changes. Email is also used for sign-in codes and account notices. Payment data is used to keep your subscription current.
Who else touches your data
- Railway — hosting and the database.
- Resend — delivery of email (sign-in codes, alerts).
- Stripe — payments. Card details go to Stripe directly; we receive only the fact of payment and the plan.
- Telegram, WhatsApp, and the SMS carrier — only if you connect those channels, and only to deliver messages to you.
We do not sell personal data, we do not share it with advertisers, and we do not build profiles for marketing. We disclose data only if the law requires it.
Cookies and local storage
One cookie holds your signed-in session — without it you could not stay logged in. Your language choice is a cookie; the light or dark theme is stored in your browser only. There are no advertising or tracking cookies on this site.
How long we keep it
Account and case data live for as long as your account exists. Sign-in codes expire in ten minutes. Session records expire after thirty days. Support messages are kept so we can follow up on them.
Deleting your data
Remove a case from inside your account and its history goes with it. To delete the whole account, write to [email protected] from the address on the account — we delete it and the cases attached to it. Payment records are kept where accounting rules require, without case details attached.
Security
Traffic is encrypted in transit. Passwords are hashed with a salt. Sessions are signed cookies that a browser script cannot read. Sign-in always asks for a code from your email, so a leaked password alone is not enough to get in.
Children
The service is for adults. If a case concerns a minor, an adult must hold the account.
Changes
If this policy changes, the new version appears here with a new date, and account holders are told by email when the change is material.
Contact
Questions about your data: [email protected].