Privacy Policy

Effective date: October 25, 2026

Sonoran Apps LLC ("Sonoran Apps," "we," "us," "our") makes the MigraInfo mobile and web app (the "App") and MigraInfo Pro ("Pro"), a web platform that immigration law firms, nonprofit organizations, consulates and similar organizations use to follow their clients' cases and keep them informed. This Privacy Policy covers both. MigraInfo is an independent product and is not affiliated with USCIS, EOIR, the U.S. Department of Justice or any government agency.

1. Scope and Our Roles

The App. When you use the App, we decide how your information is used to run it, and this policy describes that.

MigraInfo Pro. An organization that uses Pro decides why and how its clients' information is processed. We process that information on the organization's behalf, under the MigraInfo Pro Terms of Service and its Data Processing Addendum. In the words of U.S. privacy laws, the organization is the business or controller and we are its service provider or processor.

If an organization entered your information into Pro. That organization controls its relationship with you, and its own privacy notice may apply as well. We process your information to provide Pro to that organization. This policy does not replace the organization's own privacy obligations, and for information it holds about you, the organization is usually the right place to start (see Privacy Rights).

2. Information We Collect

The App

Account information: your email address and display name, from your Google or Apple account when you sign in. Google or Apple handles the sign-in and manages your credentials; MigraInfo does not receive or store your password.
Case information: USCIS receipt numbers, immigration-court case identifiers (such as an Alien Registration Number), the name on the case, hearing details, nationality (EOIR requires it to look up a court case), any labels you add to a case, and the USCIS office and case category you pick to see processing-time estimates.
Support communications: anything you include when you email us.

MigraInfo Pro

Organization information: the organization's name, type, time zone, settings, branding and billing contact.
Members: the name and email address of each member, from their Google or Microsoft account, and their role.
Clients: names, phone numbers, email addresses, preferred language, and records of consent and opt-outs for text and email alerts.
Cases: USCIS receipt numbers, A-numbers, nationality (for court lookups), case statuses and histories, hearing information, notes, tags, assignments and key dates.
Messages: the content of each text or email sent to a client and its delivery status.
Activity, audit and security records: who changed what and when, sign-in and session events, and server logs.

This information reaches Pro in four ways: an organization's members enter it; a client enters their own name, phone number, email address, language and consent on the organization's sign-up page; USCIS's and EOIR's systems return case information; and the Service generates activity, audit, delivery and security records as it runs.

Collected automatically

In the App: app version, device type and operating system, crash logs, usage analytics and performance measurements (such as app start and network response times), through Firebase Analytics, Crashlytics and Performance Monitoring. The analytics include actions in the App, such as signing in, adding a case, opening an upgrade screen or starting a trial, recorded without case numbers, names or email addresses. On Android, Firebase Analytics may collect the device's advertising ID for these analytics and to measure our own ads (see section 3); you can reset or delete it in your device's Google settings.
Abuse protection: in the App, Firebase App Check confirms that requests come from a genuine copy (Google Play Integrity on Android, Apple App Attest on iOS, reCAPTCHA on the web). Immigration-court lookups, in the App and in Pro, use hCaptcha, which collects device and browser signals to tell people from automated traffic.
A push-notification token, in the App, to deliver status-change and hearing-reminder alerts through Firebase Cloud Messaging.
On the web (app.migrainfo.com and pro.migrainfo.com): no analytics or advertising trackers. The browser keeps your sign-in session and your preferences (language, appearance, last organization) in its own storage. When something goes wrong, the page sends an error report to Google Cloud Error Reporting with the error, the browser type, the page path with any query string or token removed, and the signed-in account's identifier. Our servers keep request logs, including IP addresses and account identifiers, for up to 30 days.
Advertising identifiers: this version of the App shows no ads and includes no advertising software. The advertising ID that Firebase Analytics may collect on Android is used only for analytics and to measure how well our own ads for MigraInfo work, never to show you ads, and the App does not use your location. If a future version adds ads to the free tier, it would collect advertising identifiers (on iOS only with your permission, through Apple's App Tracking Transparency prompt) and approximate location solely to select and measure ads, and this policy will be updated first.
Purchase information: if you subscribe to Premium or Premium+ in the App, RevenueCat processes the subscription together with the app store you used (Apple App Store or Google Play) or, for purchases on the web, Stripe. They share limited status information with us, such as which plan is active. RevenueCat also reports subscription events (such as a trial starting, a trial becoming a paid subscription, or a renewal) to Google Analytics, linked to the App installation rather than to your name or email, so we can measure how the App and our ads perform. Your card or bank-account details are entered with the app store or Stripe and do not pass through or stay on our servers; we keep billing records such as which plan is active and the related Stripe identifiers.

Government case information

When you add a case in the App, or an organization adds one in Pro, the case status comes from USCIS's and EOIR's own public case-status systems, and we store that status and its history so we can show changes and notify you. USCIS receipt numbers are looked up by our servers through USCIS's case-status service. Immigration-court cases are looked up from your device or, in Pro, from the member's browser, by sending the A-number and nationality to EOIR's public automated case information after the hCaptcha check. In both cases only the identifiers needed for the lookup are sent to the agency.

For an immigration-court case, we also add the case's history from EOIR's public court data, which the Department of Justice releases monthly under the Freedom of Information Act (we use a public copy of those releases). EOIR's case-status system gives us the court's internal number for the case, and we use it to find the matching record, which can include the charges, applications for relief and their outcomes, past hearings, appeals, and bond and custody dates. EOIR removes names and A-numbers from these releases. We download the data in full and match it on our own servers, so nothing about the case is sent to anyone to get it. We use the same data to publish statistics about immigration judges and courts, which contain no information about individual people.

3. How We Use Information

To provide the App: case tracking, status-change and hearing-reminder notifications, the Visa Bulletin and news.
To provide Pro to an organization: case monitoring, reminders, team coordination, client notifications, monthly reports, billing and support, on the organization's instructions.
To generate Premium "Case Insights" in the App: if you request this feature, your relevant case information (including the immigration-court record and the published statistics for your judge and court) is sent to our AI provider, Google's Gemini models, solely to generate a plain-language explanation of your case. It is not used to train any third-party model. Pro has no AI feature, and no Pro Customer Data is sent to an AI provider.
To process subscriptions and purchases, through RevenueCat and the app stores or, on the web and for Pro, Stripe.
To keep the service working for everyone, by telling genuine apps and real people apart from automated abuse (Firebase App Check, hCaptcha) and by keeping security logs.
To diagnose crashes and errors and improve the service (Firebase Crashlytics, Analytics and Performance Monitoring in the App; Google Cloud Error Reporting and logs on the web).
To measure how well our own ads for MigraInfo work: Google Analytics tells Google Ads which installs went on to add a case or start a subscription, so our campaigns reach people the App can help. This uses the App installation's identifiers and in-app events, never case numbers, names, email addresses or case details, and it is not used to show you ads.
To send client text and email alerts on behalf of an organization that uses Pro, only with the client's consent.
To respond to support requests.

We do not sell personal information, and we do not use Pro Customer Data for advertising or to train artificial-intelligence models.

4. MigraInfo Pro Client Communications

Organizations use Pro to follow their clients' USCIS and immigration-court cases. With your consent, the organization you work with can have Pro text or email you when something changes: a status update, a new or changed hearing date, or a reminder. These messages are transactional, about your own case. We do not send marketing or promotional messages through Pro.

Text messages

Consent. You opt in by entering your own mobile number and ticking an unchecked consent box on the organization's sign-up page, by agreeing on the organization's intake form or in person (which a staff member records), or, after opting out, by texting START to the same number. We record when you agreed, how, and the consent statement you saw. Agreeing is not a condition of any service.
What we collect. Your mobile number, your name if you give it, your preferred language (English or Spanish), the consent record, and a log of each message sent to you and its delivery status, which is the organization's record of having notified you.
Frequency and cost. Message frequency varies with case activity, usually 1 to 4 messages a month. Message and data rates may apply.
Opting out and help. Reply STOP to any message to stop receiving texts (STOPALL, UNSUBSCRIBE, CANCEL, END and QUIT also work). Reply HELP or INFO for help, or email support@migrainfo.com. To have your number removed entirely, ask the organization you work with or email us.
Who sees your number. Messages are delivered by Twilio, our messaging provider, which receives your number and the message text in order to deliver it. The organization that signed you up sees the messages sent to you. No mobile information, including your number and your text-messaging opt-in consent, is shared with or sold to third parties or affiliates for marketing or promotional purposes.

Email

An organization can also email you case updates and reminders, if you agreed to email on its sign-up page or it recorded the consent you gave it. The emails come from Pro on the organization's behalf; replies go to the organization.
They are delivered by Resend, our email provider, which receives your email address and the message content in order to deliver it.
Every email has an unsubscribe link. Unsubscribing is recorded and enforced: the organization cannot email you through Pro again unless you agree again.

Who is responsible for consent. The organization is responsible for obtaining your consent before it messages you. Pro records the consent information supplied through the service, blocks messages where no consent is recorded for that channel, and enforces STOP replies and unsubscribes. You can also contact the organization about your communication preferences at any time.

5. Shared Cases

An organization that uses Pro can invite you to follow one of its cases in your own MigraInfo App account, through a single-use link. Your account stays yours. The organization learns only that you accepted the link and when; it gains no access to your account, your other cases or your settings. You can stop sharing from the case in the App at any time, and the organization then no longer sees that you follow it.

We do not sell personal information, and we do not share Pro Customer Data for cross-context behavioral advertising. We share information only with:

Google: Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, Performance Monitoring, App Check, Cloud Logging and Error Reporting, Google Sign-In, Google Ads (measuring our own ad campaigns from App analytics), and, for the App's Case Insights only, Gemini (Vertex AI).
Microsoft: Sign-in for Pro members who use a Microsoft account.
Apple: Sign in with Apple, and the App Store for purchases made on iOS.
Google Play: purchases made on Android.
RevenueCat: subscription management for the App, and reporting subscription events to Google Analytics.
Stripe, in two different roles. For App subscriptions bought on the web, Stripe sells the subscription as the merchant of record and handles your billing details under its own privacy policy. For Pro, Stripe is the organization's payment processor: it processes the organization's subscription payments and invoices, and billing details are entered directly with Stripe. In both cases, raw card and bank-account details do not pass through or persist on our servers; we keep billing metadata such as plan status, invoice references and Stripe identifiers.
Twilio: delivery of Pro text messages.
Resend: delivery of email, including Pro client emails and the emails we send to App users and Pro members.
hCaptcha (Intuition Machines, Inc.): human verification for immigration-court lookups.
USCIS's and EOIR's public systems: only the case identifiers needed for the lookup you or an organization asked for.
Law enforcement, courts or other parties, only when the law requires it or to protect our legal rights, and for Pro Customer Data as the Data Processing Addendum describes.

7. Your Choices and Communication Controls

Text alerts: reply STOP to any message (see Pro client communications).
Email alerts from an organization: use the unsubscribe link in any email.
Notifications in the App: disable push notifications in your device settings.
Shared cases: stop sharing from the case in the App.
Analytics identifiers: on Android, reset or delete your advertising ID under Settings, Google, Ads. The App shows no ads and asks for no tracking permission on iOS.
Account and case data: delete individual tracked cases in the App, or delete your account (see below).
Pro members: choose your daily digest and instant-alert emails in Settings.

8. Privacy Rights

Depending on where you live, including under California and other U.S. state privacy laws, you may have the right to access, correct or delete your personal information, or to opt out of certain uses. To exercise these rights for information we hold about you as an App user, email privacy@migrainfo.com. We will not treat you differently for exercising them.

If your information was provided to MigraInfo Pro by an organization you work with, you should generally contact that organization first; it decides how your information is used, and it can view, correct and export your record. We assist the organization with applicable privacy requests as described in our Data Processing Addendum. You can still write to us at privacy@migrainfo.com, and we will pass your request to the organization or answer it ourselves where that is appropriate.

9. Account and Data Deletion

Your App account. Delete it in the App (the account or profile screen, Delete account) or email support@migrainfo.com from the address on the account. We delete your account, every tracked case and your notification tokens within 30 days, except where the law requires us to keep something longer. Step by step, with what is deleted and what is kept: Delete Your Account.
A tracked case in the App. Remove it from the case's menu. It is deleted from your account within 8 days; until then, adding it again brings back its name and notes.
An organization's Pro account. An owner requests deletion in the organization's Settings. Everything the organization holds in Pro, including its clients, cases, messages and logs, is deleted 30 days later unless the request is cancelled in that period. Members and clients get no copy; export the data first.
Your record in an organization's Pro account. The organization can stop messaging you, and you can opt out yourself. To have your record removed from an organization's account, ask the organization, or email privacy@migrainfo.com and we will work with it.

10. Data Retention

The App. We keep your case data for as long as your account is active, so we can keep monitoring it and notifying you. A removed case is deleted within 8 days; a deleted account within 30 days, as described above. Once no MigraInfo user follows a case any more, we also delete our copy of its status, history and court record.

MigraInfo Pro. We keep an organization's data while it is active. If its trial ends without a subscription, we delete the data 90 days after the trial ends. If a paid subscription is cancelled or ends, we keep the data for 90 days so the organization can export it or reactivate, then delete it. In both cases the organization's owners and admins get an email 14 days before. An owner's deletion request is carried out after 30 days, as described above. Copies in database backups expire within 7 days of deletion; operational logs and error reports are kept for up to 30 days. We keep data longer only where the law requires. The Pro Terms and Data Processing Addendum use the same periods.

11. Children's Privacy

The App. The App is not intended for children under 13 (or under 16 where local law sets that age), and we do not knowingly let such children create their own accounts. If you believe a child has created an account, contact us and we will delete it.

MigraInfo Pro. Immigration cases often involve families, so an organization may need to enter information about a minor, for example a child who is a dependent on a case it handles. The organization is responsible for having the legal authority to provide and process that information, and we process it on the organization's behalf under the Data Processing Addendum. That is not a child using an online service, and it does not change the rule above for the App.

12. Security

We protect information with Google Cloud's security infrastructure and our own safeguards: encryption in transit and at rest, access limited to each account's or organization's own data, all changes made through our servers, and audit logs for organizations. Our security page describes the measures for Pro. No method of transmission or storage is completely secure.

13. Changes to This Policy

We may update this policy. We post the updated version here with a new effective date, and tell App users and organizations about material changes in the product or by email.

14. Contact Us

Sonoran Apps LLC, privacy@migrainfo.com