CitizenshipShortcut is operated by TaxUS Enterprises LLC (“we”, “our”, or “us”). This policy covers our website and iOS/Android mobile app. Website accounts, purchases, and server-saved progress are different from the mobile app’s optional accounts, local study data, and store purchases. The sections below distinguish those practices.
1. Website information and services
On the website, we collect your email address when you create an account or join our mailing list, and your name if you provide it. Our authentication services, including Clerk and supported social sign-in providers, handle sign-in and session security. Social sign-in can provide your name, email, and profile image; we do not receive your social-provider password.
Website quiz answers, questions seen, XP, streaks, account-linked study progress, and access status may be stored in our server database to support returning sessions. Website AI study features process the questions and responses you submit to provide practice feedback. The mobile-only local-storage and per-request AI rules below do not describe every website feature.
Website Family study profiles share the buyer’s login and store independent learning histories. They are not separate login accounts and should not be confused with native mobile local-only study storage.
Website payments, email, and referrals
- Stripe: website purchases and subscriptions, including legacy subscriptions, are processed through Stripe. We keep payment/access references and status needed to deliver purchases and manage billing, not your full payment-card number, CVC, or bank-account details. See Stripe’s Privacy Policy. Website billing is separate from native mobile store purchases.
- Mailchimp: newsletter sign-ups and associated subscription preferences are used to send the requested civics emails and manage mailing-list participation. You can unsubscribe using the link in an email. See Mailchimp’s Privacy Policy.
- Affiliate/referral services: website referral identifiers, campaign links, cookies or local storage, and purchase attribution can support referral commissions. Our website includes PromoteKit tracking. See PromoteKit’s Privacy Notice.
Website analytics, cookies, and logs
Our website records page visits, anonymous browser identifiers, referrers, campaign information, and interactions in first-party analytics. We use Google Analytics to understand website usage, devices, and approximate location. Replit-hosted website analytics can also collect pageviews and configured interaction events. Website analytics and referral tools can use cookies or local storage; authentication uses cookies or session storage to keep you signed in. Google Analytics can set cookies such as _ga. See Google’s Privacy Policy.
Where enabled in the website’s configuration, Meta Pixel measures marketing and conversion activity and can process browser/device identifiers and website interactions. See Meta’s Privacy Policy. These website marketing tools are distinct from the limited mobile app-owned conversion records.
Servers and service providers can process IP addresses, request/device information, and security logs for delivery, debugging, abuse prevention, and fraud protection. These website records do not all follow the mobile app-owned 90-day retention schedule described below. Browser settings can restrict cookies or clear local storage, but doing so may affect sign-in, saved preferences, and attribution.
2. Mobile app: optional accounts and local study data
The mobile app works without an email/password account. If you choose to create an account, Clerk provides authentication, email verification, recovery, and session security. The app does not persist plaintext passwords. Signing in does not cloud-sync your local study or immigration information, and does not merge the login account with the separate RevenueCat purchase identity.
On native devices, profile dates, selected language, study and diagnostic progress, interview-practice answers, and optional guided N-400 preparation drafts are stored locally, encrypted with AES-256-GCM. Encryption keys and native session tokens use operating-system secure storage. Browser previews do not provide equivalent native secure-storage protection. Local encryption does not protect copies you deliberately export to other destinations.
3. Mobile app: optional OpenAI features and speech recognition
AI practice and separate N-400 writing feedback
AI practice sends the selected language, displayed practice question, and deliberately submitted typed answer through our API to OpenAI, after explicit per-request consent. You can decline and continue without that AI request.
Optional N-400 writing feedback separately requires AI permission and explicit submission. Only the passage you deliberately enter or paste, up to 1,200 characters, is submitted with necessary form-edition and consent metadata. Saved drafts, other answers, and documents are not automatically uploaded.
Our application does not insert these mobile AI passages into its database. This does not mean OpenAI or infrastructure providers retain nothing: OpenAI’s default API abuse-monitoring retention may be up to 30 days, with longer retention for applicable legal or security/safety exceptions. Other provider processing and any applicable API application-state retention depend on the service and settings in use. We do not promise zero retention. See OpenAI’s Privacy Policy and its API data controls and retention documentation.
AI is educational preparation support, not legal advice, an eligibility decision, or a substitute for a human interpreter where USCIS requires one. CitizenshipShortcut is independent of USCIS and is not a government service or law firm.
Optional speech recognition
Speech recognition starts only when you request it. The operating-system speech provider may process audio on-device or through its network service; recognition is not promised to be exclusively on-device. Apple, Google, or another applicable operating-system speech provider handles that processing under its own terms and privacy practices.
The app does not save raw audio recordings or partial recognition results. Recognized practice text becomes saved study progress only after you review it and explicitly confirm. Typing remains available. See Apple’s Siri and Dictation privacy information andGoogle’s Privacy Policy.
4. Mobile app: store purchases and SDK processing
Native mobile purchases use the Apple App Store or Google Play and RevenueCat for a one-time lifetime mobile unlock, not a recurring mobile subscription. Mobile and website purchases are separate offers. We do not receive full payment-card or bank-account details from native store purchases.
RevenueCat processes pseudonymous customer IDs, purchase history, receipts or purchase tokens, entitlements, restoration, fraud-prevention information, and purchase analytics. SDK initialization occurs even without a purchase; you do not need to buy anything for SDK requests to occur.
Native SDK requests also contain technical and device context. On iOS, the purchase SDK includes the Identifier for Vendor (IDFV), which is different from the advertising identifier IDFA. Clerk processes authentication and security metadata, potentially including IP/device information and approximate location derived from IP addresses, not a GPS permission. These provider records are not limited to our app-owned conversion event fields.
See RevenueCat’s Privacy Policy,Clerk’s Privacy Policy,Apple’s Privacy Policy, andGoogle’s Privacy Policy.
5. Mobile app: limited app-owned analytics and feedback
Limited app-owned conversion records use fixed event labels, anonymous identifiers, platform/app-version information, and fixed error categories. They exclude profile dates, selected language, answers, scores, practice content, emails, payment details, and arbitrary error messages. These records are retained for 90 days with scheduled cleanup.
Optional study-feedback reports contain selected issue/context fields and the message you deliberately submit. They are stored separately for 90 days and are not sent to OpenAI for processing. Do not include private immigration details in a feedback report. Temporary anonymous-user/IP rate limits help prevent abuse.
These field restrictions and 90-day retention apply to app-owned records, not all Clerk, RevenueCat, store, speech-provider, or other provider records. Provider security, purchase, legal, backup, and retention obligations are separate.
6. Mobile app: N-400 drafts, PDF exports, and receipt checks
Guided N-400 drafts are preparation aids, not official filings or eligibility determinations. User-initiated PDF exports create an unencrypted temporary file in app cachebefore opening the system share sheet. Files from interrupted sessions may remain until removed or cleared by the operating system.
Externally saved or shared copies are controlled by their destinations. Deleting a draft cannot remotely erase exported copies. Consider the privacy of the device, recipient, cloud service, or other destination before saving or sharing a PDF.
USCIS receipt-number format checks are local. The app opens a fixed official USCIS page without transmitting or embedding the receipt number; you enter it again on that official site, which has its own privacy practices.
7. Mobile account deletion and other data controls
These controls do different things; resetting study progress is not account or purchase-data deletion:
- Reset Study Progress clears local study/profile/draft data and its encryption key, but preserves purchase identity and access.
- Delete Anonymous Data removes current-identity app-controlled analytics, feedback, and applicable user-based rate-limit records, and clears pending conversion events. It is not a request to erase every provider’s records.
- Settings → Your Account → Delete account deletes the optional Clerk account and current-device app-controlled activity, then clears local study/draft data and generated-print cache after confirmed deletion. Uncertain deletion outcomes preserve local progress for recovery.
- RevenueCat customer-data deletion is a separate support request and may affect lifetime access. It is not performed by Reset Study Progress.
Request mobile account deletion by email
As an accessible alternative, email contact@citizenshipshortcut.com from the account’s associated email with subject “CitizenshipShortcut mobile account deletion.”We need to verify ownership before acting; we may use the associated-email request and existing account records and, if needed, a reply from that address to confirm your request. Never send passwords, verification codes, immigration documents, or an N-400 draft. For separate RevenueCat deletion, specify that request so support can explain the access implications.
Account deletion does not refund purchases or remotely erase data on other devices. Apple/Google store transaction records and externally exported copies are not controlled by us. Separate providers may retain records for their own security, legal, purchase, or backup obligations. See our Terms of Service for the distinction between website billing and mobile purchases.
8. Hosting, security, retention, and service providers
Replit provides infrastructure hosting the API and app-controlled database records, including server-stored website records and mobile app-owned conversion/feedback records. Native local study storage is different from that hosted database. See Replit’s Privacy Policy. Other providers named above process information to supply authentication, AI, purchases, email, analytics, and speech recognition.
We use information to deliver study features, maintain accounts and purchase access, send requested emails, respond to support, and detect abuse. Website account and progress records are generally retained while needed to provide those services. Other records may need to remain for legal, accounting, fraud-prevention, dispute, or backup purposes. Processing locations and provider retention depend on the infrastructure and services involved.
The mobile app-owned schedules above are not a promise that all information everywhere is erased within 30 or 90 days. Deletion requests and retention exceptions are handled in light of applicable law and the data and provider involved. No storage or transmission method can guarantee absolute security.
9. Your choices, children’s privacy, and contact
You can request access to, correction of, or deletion of personal information we control by contacting contact@citizenshipshortcut.com. We verify ownership before sharing or deleting account information and respond according to applicable law. Never send passwords, verification codes, immigration documents, or drafts. Use the separate mobile deletion controls where appropriate.
Website newsletter subscribers can unsubscribe using the link in any email. Holders of website Stripe subscriptions, including legacy plans, can manage cancellation through the website’s billing controls; the lifetime mobile unlock has no recurring subscription to cancel. Purchase refunds and third-party records follow the applicable provider and offer terms.
CitizenshipShortcut is intended for adults preparing for naturalization. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can address it.
We may update this policy as our services or practices change. The “Last updated” date identifies this version. Questions: contact@citizenshipshortcut.com. TaxUS Enterprises LLC — Euclid, Ohio, USA.