OnePath Privacy Policy

Our Commitment

OnePath is an immigration information app built with your privacy in mind. We believe your immigration data is deeply personal, and we have designed the app to keep it that way.

What Data We Collect

OnePath collects the following types of data:

• On-device profile data: Immigration purpose and goals, country of citizenship, current visa status, checklist progress, and compliance tracking data. This data is stored only on your device and never transmitted to our servers.
• Anonymous analytics data: App usage patterns, screens viewed, features used, device type, operating system version, app version, and approximate city-level location derived from IP address. This data is collected through Mixpanel and contains no personally identifiable information.
• USCIS case status queries: When you voluntarily use the case status feature, your receipt number is transmitted in real time to the USCIS API. This data is not stored by OnePath.

We do not collect your name, email address, phone number, passport information, Social Security number, financial information, medical information, or any other personally identifiable information.

What Data Stays on Your Device

All information you enter during onboarding and while using the app is stored locally on your device using secure on-device storage. This includes:

• Your immigration purpose and goals
• Country of citizenship
• Current visa status
• Checklist progress
• Compliance tracking data

This data never leaves your device and is not transmitted to any server, except as described in the Case Status Lookup section below.

USCIS Case Status Lookup

OnePath offers an optional feature that allows you to check your USCIS case status by entering your receipt number (e.g. EAC2390123456).

When you use this feature:

• Your receipt number is sent securely to the U.S. Citizenship and Immigration Services (USCIS) API on your behalf
• USCIS returns your case status directly to your device
• We do not store your receipt number on our servers
• We do not store your case status results
• The query is made in real time and discarded immediately after delivery to your device

This feature is governed by USCIS's own privacy policy, available at uscis.gov/privacy.

Anonymous Analytics — Mixpanel

We use Mixpanel (mixpanel.com) to collect anonymous usage data to improve the app. Mixpanel is our only third-party data processor. The data shared with Mixpanel includes:

• Which screens are viewed
• Which features are used (e.g., tapping a pathway, switching tabs)
• General device information (OS version, app version)
• Approximate location (city-level, from IP address)

Mixpanel does not receive:

• Your name, email address, or phone number
• Your exact immigration status or visa details
• Your passport or document information
• Any information that could identify you personally

Mixpanel is bound by our data processing requirements and may not use or disclose your data for any purpose other than providing analytics services to OnePath. Mixpanel's privacy policy is available at mixpanel.com/legal/privacy-policy.

Analytics data is used solely to understand which features are most useful and to improve the app experience. We do not share analytics data with any other third party, marketer, or partner.

Third-party disclosure: We do not authorize any third party, including Mixpanel, to use or disclose your information — including de-identified, anonymized, or pseudonymized data — for any purpose without your active consent.

How We Use Your Data

Data collected by OnePath is used exclusively for the following purposes:

• Personalizing your in-app experience based on your immigration situation
• Providing relevant pathways, checklists, and timelines
• Querying USCIS on your behalf when you use the case status feature
• Improving app features through anonymous usage analytics

We do not use your data for advertising, marketing, profiling, or any commercial purpose beyond operating the app.

No Accounts Required

OnePath does not require you to create an account, sign in, or provide an email address. There is no user registration system.

No Data Selling or Sharing

We do not sell, rent, trade, or transfer your personal data to any third parties for profit or any other monetary transaction. We do not display advertisements. We do not use your data for marketing purposes. The only third party that receives any data from OnePath is Mixpanel, solely for anonymous analytics as described above.

We do not share de-identified, anonymized, or pseudonymized data with any third party, marketer, or partner without your active consent.

Data Retention

OnePath does not maintain a server-side database of user data. All profile data is stored on your device and remains there until you delete it.

Anonymous analytics data collected through Mixpanel is retained for up to 36 months, after which it is automatically deleted from Mixpanel's servers.

If your app is dormant (not used) for an extended period, your on-device data remains on your device until you uninstall the app or manually reset it. OnePath does not delete dormant on-device data remotely.

USCIS case status query data is never retained. Queries are made in real time and immediately discarded after the result is returned to your device.

Data Deletion

You can permanently delete all app data at any time using either of these methods:

• In-app reset: Go to Settings (gear icon on home screen) and tap "Reset App and Start Over." All locally stored data is permanently deleted immediately.
• Uninstall the app: Uninstalling OnePath from your device removes all locally stored data immediately.

Because OnePath does not maintain a server-side user database, deletion is instant and complete. There is no account to close and no server-side data to request removal of.

To request deletion of anonymous analytics data held by Mixpanel, contact us at onepathworld@gmail.com and we will process your request within 30 days.

Data Breach Notification

In the unlikely event of a data security incident that affects your information, OnePath will notify affected users promptly via an in-app notice and, where required by law, via direct communication. We will provide a description of the incident, the type of data involved, steps we have taken to address the incident, and recommended actions you may take to protect yourself.

Because OnePath stores no personally identifiable information on our servers, the risk of a data breach affecting your personal immigration data is minimal. Your on-device data is protected by your device's own security features.

Transfer of Ownership

If OnePath or Trillology LLC is acquired, merged, or its assets transferred to another company, we will notify users via an in-app notice and update this privacy policy at least 30 days before any transfer takes effect. The acquiring company will be required to honor the terms of this privacy policy or provide users with the option to permanently delete their data before the transfer occurs.

If OnePath ceases operations entirely, users will be notified and all server-side data (anonymous analytics) will be securely deleted within 90 days.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: You have the right to know what personal information we collect, use, and disclose about you.
• Right to Delete: You have the right to request deletion of your personal information. See the Data Deletion section above for instructions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. OnePath does not sell personal information.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your CCPA rights.

To exercise any of these rights, contact us at onepathworld@gmail.com. We will respond to verifiable requests within 45 days.

Your Data Sharing Choices

You are in full control of your data. Here is a summary of your choices:

• On-device data: You control all profile data. You can reset or delete it at any time from Settings.
• Case status queries: This feature is entirely optional. You are never required to enter a receipt number.
• Analytics: Anonymous analytics help us improve the app. No personally identifiable information is included in analytics data.

Sharing your immigration status or case information through OnePath carries inherent sensitivity. We strongly recommend keeping your device secure and using a device passcode to protect your on-device data from unauthorized access.

Children's Privacy

OnePath is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided information through the app, please contact us at onepathworld@gmail.com and we will take steps to remove that information.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you through an in-app notice and update the "Last updated" date at the top of this page.

For significant changes, we will seek your active consent before the new policy takes effect. We will provide a plain-language summary of what has changed so you can make an informed decision.

Continued use of the app after notification constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy, want to exercise your data rights, or need to report a concern, contact us at:

onepathworld@gmail.com

Trillology LLC
Sunrise, Florida, United States

We will respond to all privacy-related inquiries within 48 hours.