Privacy Policy

Last updated: June 2, 2026

Starry Ambition LLC ("Harbor," "we," "us," or "our") operates the Harbor mobile application and this website (the "Service"). We respect your privacy. This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and the rights you have.

1. Information We Collect

We collect only what is needed to provide the Service:

• Account information: an identifier, email and name obtained when you sign in with Apple or Google. You may use Apple's "Hide My Email" feature.
• Case information (sensitive): the USCIS receipt number(s) you choose to add, the associated case status we retrieve from the official USCIS API, and any nicknames, notes, document checklists or reminders you create.
• Preferences: language, Visa Bulletin watches (category, country of birth, priority date), policy subscriptions, citizenship-prep progress, and an optional N-400 filing date and U.S. state.
• Device push token: used to deliver notifications.
• Limited diagnostics: basic, non-identifying technical logs used to operate and secure the Service.

2. How We Use Your Information

We use your information solely to provide and improve the Service: to retrieve and display your official case status, send you status-change and Visa Bulletin notifications, track priority dates, provide citizenship-test prep, show policy updates, and respond to your requests. We do not use your information for advertising and we do not track you across other apps or websites.

3. AI and Automated Processing

Some features use a third-party AI provider (Anthropic) to (a) produce plain-language, general explanations of official status codes, and (b) translate public policy summaries and evaluate citizenship-practice answers. We send the AI provider only general, non-personal information — such as a form type, an official English status code, a public policy summary, or your practice answer to a civics question. We never send your receipt number, name, account identifier, or any other personal identifier to the AI provider. AI output is general information, clearly labeled, and is not legal advice or a prediction about your specific case.

4. How We Share Information

We do NOT sell your personal information and we do NOT share it for cross-context behavioral advertising. We share information only with service providers that help us run the Service, under contractual confidentiality obligations:

• Cloud hosting and database (Cloudflare) to operate the Service.
• Apple and Google to authenticate your sign-in.
• Apple Push Notification service to deliver notifications.
• Anthropic for the limited, non-personal AI processing described above.
• USCIS and other U.S. government public sources, which we query to retrieve official status and public data.

5. Disclosures Required by Law

We may disclose information if required to do so by law or valid legal process, or to protect the rights, safety and security of our users, the public, or Harbor.

6. Data Security

We take reasonable measures to protect your information. Sensitive personal information (such as receipt numbers) is encrypted at rest, and encryption keys are not stored in our source code. Access is limited. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Data Storage and Location

We intend to store personal data on infrastructure located in the United States. Public reference data (such as Visa Bulletin and policy data) is stored separately from your personal data.

8. Data Retention

We retain your personal data while your account is active and as needed to provide the Service. When you delete your account, we delete your personal data, typically immediately.

9. Your Rights and Choices

You have the right to access, correct and delete your personal data, and to control notifications. Depending on where you live, you may have additional rights:

• Deletion: you can permanently delete your account and all associated data at any time, in the app under Account → Privacy Policy & Terms → Privacy Policy.
• Access / portability: you may request a copy of your personal data by contacting us.
• Notifications: you can turn off push notifications in the app at any time; in-app records are still kept in your Notification Center.
• California residents (CCPA/CPRA): you have the right to know, access, correct and delete your personal information, and the right not to be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.

10. Account Deletion

In-app account deletion permanently removes your account and associated data. If you signed in with Apple, we also revoke the associated Apple token. You can also request deletion by contacting support@starryambition.com.

11. Children's Privacy

Harbor is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us so we can delete it.

12. International Users

The Service is operated from the United States. If you access it from outside the United States, you understand your information will be processed in the United States.

13. Data Breach Notification

If a data breach affects your personal information, we will notify you as required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes and, where required, obtain your consent before they take effect.

15. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at support@starryambition.com.