VisaPal

Privacy Policy

Effective September 25, 2026 · Last updated September 25, 2026 · VisaPal for iOS and Android · SecondEarth AI, Inc.

1. What stays on your device

Your visa or status, the dates you enter (for example your I-94 admit-until date, visa stamp, passport and work-permit dates), names you give family members, reminder settings, checklist ticks and your Ask conversations. This information is stored only on your device in encrypted storage whose key is kept in the iOS Keychain or Android Keystore. It is not sent to us or to anyone else, except the Ask questions you choose to send as described in section 2. VisaPal never asks for passport numbers, A-numbers, receipt numbers or case numbers.

Reminders are local notifications scheduled on your device. They show the document and days left, never your visa class; “Discreet notifications” hides even that.

2. Ask (optional AI answers)

Ask answers questions about visas from VisaPal’s own content, which is based on official government sources. It is optional: the rest of the app works without it, and nothing is sent unless you ask a question. Before your first question, the app shows this summary and asks you to agree.

What is sent when you ask.

• Your question and the app language.
• Your device’s calendar date.
• A random key the app creates on your device (not linked to your name, email, account or advertising ID) and whether VisaPal Pro is active — used only for the daily free-question limit.
• Up to the two previous questions and answers in the same conversation, so follow-up questions make sense.
• Only if you turn on “Include my plan”: the visa types in your plan and the goals you picked. Your dates, statuses, family details and other profile information are never sent.

Where it goes. Our server runs on Convex (Convex, Inc., United States). It finds the relevant VisaPal content and sends it, with your question (and the earlier turns and plan, if any), through OpenRouter (OpenRouter, Inc., United States) to a Google Gemini model (Google LLC) to write the answer. The random key, the date and the Pro flag are not sent to the AI model. Everything travels over encrypted connections (HTTPS).

What we keep. We don’t store your questions or answers on our servers, and our server logs don’t record them. To enforce the daily limit, the server keeps only a salted, one-way hash of the random key combined with the date, a question count and the time of the last question; these are deleted within 3 days. We also keep a daily total of answered questions with no identifiers. Like any internet service, our hosting provider handles your IP address to deliver the request; we don’t store it.

The AI provider. We configure OpenRouter to send Ask requests only to zero-data-retention endpoints and only to providers that do not collect prompts for training. We don’t use your questions to train AI models, and we don’t sell or share them. OpenRouter’s and Google’s processing follows their own policies: openrouter.ai/privacy and Google Cloud Privacy Notice.

Please don’t include names, passport numbers, A-numbers, receipt or case numbers, or other identifiers in your questions.

Answers are general information, not legal advice, and can be incomplete or wrong. Ask does not assess eligibility, predict outcomes, recommend a visa or a lawyer, or fill out forms. Check the official source shown with each answer and talk to a licensed immigration attorney about your case.

Your conversation. It is stored only on your device in the encrypted storage described above. “New conversation” deletes it, and Settings → “Delete all data” deletes everything.

3. Subscription purchases

Purchases are processed by Apple (App Store) or Google (Google Play). We use RevenueCat, Inc. to manage subscriptions. RevenueCat stores your purchase history (product, price, dates, transaction identifiers and subscription status) linked to a random app user ID generated by the app. It does not receive your name, email or any immigration information. We use this record only to unlock VisaPal Pro and restore purchases. See RevenueCat’s privacy policy at revenuecat.com/privacy.

4. What we do not do

• No account or sign-in.
• No analytics or advertising SDKs, no tracking across apps or websites, no advertising identifier.
• We do not store Ask questions or answers on our servers or use them to train AI models.
• We do not sell or share personal information, including immigration status.

5. International processing

If you use Ask, your question is processed in the United States (Convex, OpenRouter) and by Google, which may process it in the United States or other countries where it operates, each time you send a question. You can avoid this by not using Ask; every other feature keeps working.

6. Links to other websites

VisaPal links to official government sites (for example uscis.gov, travel.state.gov, i94.cbp.dhs.gov) and public lawyer directories. Those sites have their own privacy policies.

7. Deleting your information

Use Settings → “Delete all data” in the app, or delete the app, to erase everything stored on the device, including Ask conversations. Ask’s hashed limit counters are deleted automatically within 3 days and cannot be linked back to you. To ask us to delete your RevenueCat purchase record, email sunwoo@secondearth.io with your App Store or Google Play order ID. Cancelling a subscription is done in your App Store or Google Play account settings.

8. Your rights

Depending on where you live (for example California, the EU/UK or Korea), you may have rights to access, correct or delete personal information and to object to processing. Because we hold only the purchase record and the short-lived hashed counters described above, contact us and we will respond within 30 days.

9. Children

VisaPal is intended for adults and is not directed to children under 13.

10. Changes and contact

We will post changes on this page and update the date above. Contact: SecondEarth AI, Inc., sunwoo@secondearth.io.