Privacy policy

⚠️ Please read this first

US Citizenship Prep is a private study tool. We are NOT part of the U.S. government. We are not affiliated with, endorsed by, or connected to USCIS, the Department of Homeland Security, or any government agency.

We do not give legal or immigration advice. Nothing in this app can tell you whether you qualify for citizenship. Practicing here does not guarantee you will pass the real test. For advice about your own case, talk to a licensed immigration attorney or a DOJ-accredited representative. Be careful: some people ("notarios") charge money for immigration help they are not qualified to give.

This policy explains what information we collect, how we use it, and how you can delete it. We wrote it in plain English on purpose. If anything is unclear, email us and we will explain. The last section, Details: what this browser and our servers keep, lists every item and how long it is kept.

---

The short version

• We never record or store your voice. Ever. Only text.
• We store your study progress and practice results so you can see how you're doing.
• We never ask for your A-Number, Social Security number, passport number, or any documents. Please don't type them into the app.
• For interview practice, we encourage you to use made-up personal details.
• We don't sell your information or show ads.
• You can delete your account and everything in it, by yourself, at any time.

---

1. Who we are

US Citizenship Prep ("we," "us") is a subscription web app that helps people practice for the USCIS naturalization test — the civics questions, practice quizzes, a daily study session, and a mock interview with a fictional officer.

Contact: uscitizenshipprepmedia@gmail.com

2. What we collect

Your account

• When you create an account: your email address and a display name (we suggest one from your email; you can change it in Settings). If you continue with Google, Google tells us your name, your email address and a link to your profile picture. You don't need a password; if you add one in Settings, our auth provider stores only a scrambled version of it (a hash), and we never store or log it ourselves.

Your study profile (you choose what to enter)

• Display name, interface language (English or Spanish)
• The date you filed (or plan to file) Form N-400 — used only to pick the right test version (2008 or 2025)
• Your U.S. state — used only to show the right state-specific answers (like your governor and state capital)
• Your interview date, if you enter one (Home counts down to it), and what motivates you, if you pick anything in onboarding
• Study settings: study mode, daily goal, audio autoplay

Your practice data

• Study progress: which questions you've studied, your mastery scores, bookmarks, and a log of your practice attempts (whether you marked a question as known or answered it in a quiz or a mock interview, whether it was correct, and when). When you undo an answer, your account also keeps a short record that it was undone (when the answer was given and which kind of practice it came from), up to 100 per question, so it stays undone on all your devices.
• Quiz results: your scores and your answers (the choice you picked, or the words you typed or said, as text)
• Lessons, English practice and saved words: your place and answers in lessons, what you typed in English practice, the words you saved, and today's practice session, so you can pick up where you left off on any device
• Mock interview results: your scores, outcomes, and — this is important — the text of your civics answers (what you typed, or the text transcript of what you said). You see this text in the interview's report, where you can also dispute a grade you think was wrong. We also keep it with the saved result, until you delete that result or your account; the app does not show this saved copy anywhere.
• Disputes: if you press "I believe my answer was correct," we save that question and your answer text so it can be reviewed. A dispute stays until you delete your account, even if you delete that interview's result.

Mock interviews saved to your results

Our server saves a mock interview to your results (Settings → Your results) once it has ended with at least one civics answer.

• Right away when you give the answer that finishes it, or choose End interview. (A guided practice whose last answer you can still take back with "That's not what I said" waits; see the next point.)
• Otherwise, later — for example, when you left in the middle and it timed out. It is saved at the latest the next time you start a mock interview or sign out after it has ended, as long as that is within about an hour of your last answer. An interview that was not saved by then is deleted.

Signing out never stops or undoes these saves. You can delete any saved interview (section 8). The exact rules are in the Details section.

Technical information

• Your IP address, your account id and, for sign-in and password-reset requests, your email address, used briefly to prevent abuse (rate limiting). Each of these records is deleted within about 2 days after the last request it counted.
• Your sign-in sessions: for each device where you are signed in, the IP address and browser it signed in from, kept until you sign out there or delete your account.
• Server logs, kept by our hosting providers for up to 30 days: the requests made to our site and database, with IP addresses, request IDs and account IDs. A logged web address can include your email address (for example, on the page where you enter a sign-in code). Logs never contain passwords or audio.
• A copy of your study data, and work not yet saved to your account, kept in this browser (see below).

What this browser keeps

To be fast, and to keep your work safe when your connection drops, the app keeps some data in this browser:

• a copy of your study data, and any work not yet saved to your account. It leaves your device only when the app sends it to your account. It is removed when you sign out here or delete your account here (with rare exceptions), and at a few other times, all listed in the Details;
• in each browser tab, your mock interview in progress and your last report, with your answers. Your N-400 practice answers stay there and are never sent to us.

When you sign out here, the app first sends your unsaved work. If some still cannot be sent, it asks you before doing anything: Try again, or Sign out and erase them. The Details section lists everything this browser keeps, and when it goes.

We use only essential cookies: the ones that keep you signed in, one that remembers if you chose Español, and one that tells the sign-in page you were signed out somewhere else. No advertising cookies, no tracking cookies, no analytics cookies.

3. Your voice and your microphone

This is the most important section.

• We never record your voice. We never store audio. We never build "voiceprints." There is no camera use at all.
• When you choose to answer by speaking, we ask for microphone permission and then use your browser's built-in speech recognition to turn your speech into text. Only that text is sent to our servers, and your N-400 practice answers are not sent to us at all: they stay in your browser tab.
• Your browser may send your audio to its maker to do the transcription. This is how browser speech recognition works, and it happens outside our systems:
  • Chrome sends audio to Google for recognition.
  • Microsoft Edge sends audio to Microsoft.
  • Safari sends audio to Apple.
  • Their privacy policies apply to that processing: Google, Microsoft, Apple.
• You never have to use your voice. Every spoken exercise has a "type instead" option that works exactly the same way. If you type, no audio goes anywhere.

4. What we deliberately do NOT collect

• A-Numbers, Social Security numbers, passport or green-card numbers
• Document uploads of any kind
• Audio or video recordings
• Your camera is never turned on
• Card numbers or bank details (payments happen on Stripe's page; we keep only your subscription's details, such as its status, plan and renewal date, and Stripe's ids for your customer record and subscription)
• Your answers in N-400 practice, and to the full simulation's opening questions (before the civics part): they stay in your browser tab and are never sent to us
• Real personal history for interview practice — we encourage you to use fictional details (a made-up address, job, and family) when rehearsing N-400 questions. The practice works exactly the same.

Please help us keep it this way: don't type real case numbers or sensitive personal details into practice answers. The app never needs them.

5. How we use your information

• To run the app: save your progress, grade your practice answers against the official answer key, and show you your results
• To sign you in, including emailing you one-time sign-in codes and password-reset links
• To run your subscription (through Stripe)
• To pick the right test version and state-specific answers for you
• To prevent abuse (rate limiting by IP address, by account and, for sign-in and password resets, by email address)
• To fix problems (server logs)

That's it. We do not sell your information. We do not share it for advertising. We do not use it to train AI models.

6. Who helps us run the app (processors)

We use a small number of companies to operate the service:

About the interviewer videos: the fictional officer you see is a set of video clips we created in advance using HeyGen's avatar service. They are served as ordinary static video files. No user data is ever sent to HeyGen.

Our database and the server functions that run the app are in Montréal, Canada (Supabase and Vercel). Requests to our site first pass through Vercel's worldwide network, which may check your sign-in cookie at a location near you. The other companies above handle what they receive in their own locations.

7. How long we keep things (retention)

A few small records are kept longer: for example, a note that you deleted a quiz result, or a record of an account deletion. This browser keeps copies too. The last section, Details: what this browser and our servers keep, lists every item, on our servers and in this browser, with exact times.

8. Deleting your data

Go to Settings → Delete account. This immediately deletes your account and everything connected to it on our servers: your profile, study progress (with its undo records), quiz results, interview results and transcripts, lessons, English practice and saved words, disputes, notes of deleted quizzes, your former guest's id, and any live practice session. If something stops the deletion (for example, your subscription cannot be canceled right then), Settings tells you, so you can try again. We test this deletion path automatically.

If you have a subscription, deleting your account cancels it first, at once (the rest of the week you paid for is not refunded). If you ever started a Stripe checkout, it also deletes your customer record at Stripe; Stripe keeps its own invoice and tax records under its own rules.

A few things are not deleted at once: a short record of the deletion, if you ever started a Stripe checkout (it holds no email, name or study data), and rate-limit records (within about 2 days) and server logs (up to 30 days), which expire on their own. The Details section describes each one.

In this browser, deleting your account also removes your study data and your work not saved yet, once our server confirms the deletion; only the bookkeeping described in the Details section, and your language choice, stay. Other browsers where you were signed in follow the rules for when you are signed out somewhere they cannot see (see Details).

To delete a single practice test or mock interview instead, go to Settings → Your results, which lists your 50 most recent of each (email us for older ones). Deleting a mock interview there also deletes what our server still keeps of its live session. Disputes you filed during that interview are not deleted with it: they stay until you delete your account. When you delete a practice test, we keep a note that it was deleted (see Details).

If you can't sign in, email us and we will delete it for you.

9. Your privacy rights

You have these rights no matter where you live — email us or use the in-app tools:

• See the information we have about you
• Correct it (most of it you can edit in Settings)
• Delete it (Settings → Delete account, or email us)
• Get a copy of it in a portable format
• Object to or limit certain processing

If you are in the EU/UK (GDPR): our legal bases are (a) performing our contract with you — running the study tool you asked for; (b) our legitimate interest in keeping the service safe (rate limiting, abuse prevention); and (c) your consent for microphone use, which you can decline at any time by typing instead. You also have the right to complain to your local data protection authority.

If you are a California resident (CCPA/CPRA): the categories we collect are identifiers (email, account ID, IP), commercial information (your subscription's status and plan), and your activity within the app (progress, results, answer text). We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. You have the rights to know, delete, correct, and to not be discriminated against for using your rights. We honor requests directly; you may also use an authorized agent.

We will never treat you worse for exercising a privacy right.

10. Security

Your data is protected by row-level security (each account can only reach its own rows), server-side-only credentials, and scores that our servers grade themselves: mock interviews are graded only on our servers, and every saved quiz result is graded again there. No security is perfect, but we designed the app so the most sensitive things — your voice, your documents, your case details — are never collected in the first place.

11. Children

This app is for adults preparing for naturalization. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

12. Changes to this policy

If we change this policy, we will update the date at the top and, for meaningful changes, show a notice in the app. We will never quietly start selling your data — that would require your explicit consent, and it is not something we plan to do.

13. Contact

Questions, requests, or complaints: uscitizenshipprepmedia@gmail.com

---

Details: what this browser and our servers keep

This section gives the exact rules behind sections 2, 7 and 8. Times kept in this browser are measured by this device's clock.

On our servers

Deleted quiz results. When you delete a single quiz result, we keep a note that it was deleted (your account, the quiz's id, and when), so a copy still waiting in one of your browsers is not saved again. The note is deleted with your account.

Guests. Starting a mock interview without an account signs this browser in as a guest, with no email or name. If you then create an account with your email address, the guest's practice moves to it, and your account keeps that guest's id (a guest can never sign in again), so your browsers can move the guest's unsaved work to your account; that id is deleted with your account. A guest with no saved study progress, quiz results or interview results is deleted 7 days after it started, with everything else it left (such as lessons, an open interview or a dispute). A guest with saved study progress or results is kept until it is deleted (Settings → Delete account, while still signed in as that guest) or moves to an account you create.

Record of an account deletion. If you ever started a Stripe checkout, deleting your account leaves a short record so that an interrupted deletion can be finished: your former account id, how far the deletion got, and when. While the deletion is unfinished, it also holds the ids Stripe used for you and any error message; these are cleared once the deletion is complete. It holds no email, name or study data.

When a mock interview is saved to your results. Our server saves a mock interview once it has ended with at least one civics answer; an interview with no civics answer is never saved.

• Finished, or ended early: saved at once, when you give the answer that completes its civics questions, or when you choose End interview.
• A guided practice whose last answer you can still take back: when your last answer was spoken and graded not correct, its card can offer "That's not what I said", so the practice is not saved yet. It is saved when you choose See your results, leave or close the page showing that card, start another interview, open the mock interview page again, or sign out on any device.
• Closed because you started a newer interview (up to 3 can be open at once): saved right after that start.
• Left unfinished: an interview you leave in the middle stays open on our server, so you can pick it up again; signing out does not end it. Once it has timed out (30 minutes without an answer, or 2 hours after it started, whichever comes first), it is saved when you ask for its report, or the next time you start an interview, open the mock interview page, or sign out on any device.

Opening the mock interview page counts unless it only reopens your last report or opens N-400 practice. Each start, page opening or sign-out saves up to five such interviews. These saves can only happen while our server still keeps the interview: up to about an hour after your last answer. An interview that was not saved by then is deleted with its live session. A save that fails is tried again on these same occasions, and when this browser is told that a save is still pending, it also keeps asking for it in the background while the app's pages are open, for up to an hour. Signing out, even with Sign out and erase them, never stops or undoes these saves: signing out is one of the occasions that trigger them.

In this browser

To make the app fast, and to keep your work safe when your connection drops, the app keeps some data in this browser's own storage. It leaves your device only when the app sends it to your account (cookies go with each request to our site). Except for data kept for one tab (which goes when the tab closes) and cookies (which expire on their own), things are removed while this site is open in this browser, or the next time it is opened; if it is never opened again, they stay until you clear this browser's data.

The table gives the short answer; the notes after it explain.

Your study data. For example: a copy of your progress, mastery scores and saved questions; which questions you viewed; your place in lessons; unfinished quizzes, with the answers you have given so far; answers you are still typing; lesson and English practice work; your saved words; today's practice; your recent results and mock-interview counts; and notes that keep this copy in step with your account. It is removed from this browser:

• when you sign out here (a sign-out that fails, for example because you are offline, removes nothing);
• when you delete your account here;
• when another account, or a guest, opens one of the app's pages (Home, Learn, quizzes, today's practice, the mock interview, N-400 practice or Settings) in this browser;
• when this browser next shows the sign-in page after you were signed out somewhere it could not see (for example, you chose Sign out on another device, or your sign-in expired), as long as it still holds that ended sign-in or found out about it within the last day.

Otherwise it stays.

Your onboarding answers (your study plan: when you file, your state, how confident you feel, what motivates you, your interview date and your language) are removed once they are saved to an account (yours, or, if you answered without an account, the account that next signs up or finishes onboarding in that tab), when someone signs out or deletes an account on this browser, or when the sign-in page cleans up after a sign-out elsewhere. Answers you gave while signed in are also removed when another account uses the app here. Otherwise they stay.

Work not saved to your account yet. This covers:

• answers, undos and saved-question changes;
• finished quizzes, with the answers you gave;
• lesson, English practice, saved-word and today's practice work your account does not have yet (for example, because you were offline);
• a short list of mock interviews whose results are still being saved: only each interview's id and when this browser learned that its save was pending, at most 10 (the oldest goes first).

While you are signed in, the app keeps trying to send this work whenever its pages are open, and removes each piece from this browser once your account has it. At most 20 finished quizzes wait (the oldest goes first), and a quiz that still cannot be sent after 30 days, and whose sending has failed on at least 5 separate page loads, is let go. An interview leaves the list once its save is settled, when our server no longer has it, or an hour after this browser learned that its save was pending. If this browser's storage is full, some of this work may be held only in the open tab's memory, and it can be lost if that tab closes before the work is sent or stored.

When you sign out here:

1. The app first tries to send your unsaved work (for up to about 3 seconds), and asks your other open tabs of this site whether they hold some that only they have (see Checking your other tabs below).
2. If all of it is sent, you are signed out and your study data is removed from this browser.
3. If some is still unsent, nothing is removed yet, and you are asked: Some answers aren't saved yet.
   • Try again sends it again and checks again. It never signs you out.
   • Sign out and erase them signs you out and, once that goes through, removes your study data and that unsaved work from this browser. If the sign-out does not go through (for example, you are offline), nothing is erased. Copies your other tabs hold only in their memory are dropped as soon as those tabs hear about it, or when they wake up within 30 days of the erase (this browser remembers up to 20 erases).
   • If your sign-in has already ended, the work cannot be sent now: you are asked to Sign in again (it is sent once you are back in the app), or to Sign out and erase them.
   • Closing the question changes nothing: nothing is signed out or removed.
4. Erasing removes only this browser's copy. It does not remove anything already saved to your account. A save that was already on its way when you chose to erase, and our server's own save of a mock interview that has ended (see When a mock interview is saved to your results above), may still reach your account.
5. Signing out ends your sign-in on every device. Other browsers where you were signed in keep their copy for now (see Your study data above and When nobody can be asked below).

After a sign-out where everything had been sent, a little can still stay behind, kept as described in the next part: work you did while the sign-out was going through that had not reached your account when it finished, and work another tab held only in its memory if that tab did not answer in time (for example, because it was asleep in the background).

When nobody can be asked. If you are signed out somewhere this browser cannot see (for example, you chose Sign out on another device, or your sign-in expired), or another account starts using the app here, nobody can be asked about your unsaved work. It then stays in this browser, so it can reach your account the next time you sign in here and open the app, but only for a while: it is removed the first time the app's pages are opened here once it has been kept for more than 30 days (counted from the first time the app's pages found it) and counted on at least 5 full loads of the app's pages in this browser, by anyone. Moving between pages inside the app, and the public pages, do not count. If the app's pages are never opened here again, it stays until you clear this browser's data. The list of interviews being saved follows its own one-hour rule above.

This tab only. These are kept for the current browser tab (in its session storage):

• your mock interview in progress: its id, how you are answering, and your answers to the full simulation's opening questions (before the civics part), which are never sent to us;
• your last mock-interview or N-400 practice report, including your answers (your N-400 practice answers are never sent to us);
• for about an hour at most, a note that a guest signed up in this tab (the guest's id and when), used once when your new account first opens the app's pages in this tab;
• two small notes: that your study plan was made in this tab, and the last sign-out mark this tab saw (see below).

They last only as long as the tab (a browser that reopens a closed tab may restore them with it). The interview, the report and the guest note go sooner: when anyone signs out on this browser (a tab that was asleep, or reopened, drops them as it comes back), when another account opens the app's pages in this tab, or when you delete your account here. The plan note goes when the plan is saved or cleared, and when anyone signs out on this browser.

Bookkeeping that holds none of your study data.

• A sign-out mark: a random value that changes each time someone signs out on this browser, when the sign-in page cleans up after a sign-out elsewhere, and when an account is deleted here, so every open tab of this site stops syncing for the account that left. It names no account. It starts with "deleted-" when that change erased unsaved work or deleted an account. It stays.
• A list of erased accounts: each time someone chooses Sign out and erase them, or deletes their account here, the app notes a short code made from the account's id (not the id itself, and it cannot be turned back into the id, though anyone who already knows the id could match it), the time, and that sign-out mark. This stops a tab that was asleep from bringing erased work back. At most 20 entries; each is removed 30 days after the erase.
• A list of unsaved work kept for accounts not signed in here: the names that work is stored under (they include those accounts' ids), when each was first kept, and how many page loads have counted. Each entry goes when its work does, or when its account opens the app here again; the list goes when it is empty.
• Two small notes: a short code made from the id of the account last found signed in here (not the id itself), so your other open tabs notice when another account signs in and remove a mock interview or report kept for it; and, after an error removed your sign-in here, a note of only that fact, so a sign-out that follows keeps your unsaved work instead of erasing it. Neither holds study data.

Checking your other tabs. When you sign out or choose Try again, this tab asks your other open tabs of this site, inside your browser, whether they hold unsaved work for your account that only they have (because this browser's storage was full). The messages carry only their kind, random ids for the question and the tab, your account's id, whether to send, and, in answers, a yes or no and whether more is coming; nothing is stored. A tab that holds such work sends it to your account and then says whether any is left; nothing else is sent to us. Tabs that do not answer within about a quarter of a second (for example, a tab asleep in the background) are not waited for: what they hold is dealt with when they wake, as described above. If your sign-in has already ended, the tabs are asked without sending anything.

Cookies. We use only essential ones:

• Sign-in cookies keep you signed in (some of them also help a sign-in or a password reset finish). They are removed when you sign out or delete your account here, or when this browser learns that your sign-in has ended; the browser keeps them at most 400 days.
• A language cookie (uscp_lang=es) remembers that Español was chosen on this browser, for up to a year, or until the app is set to English here. It is not removed when you sign out, so the pages you see signed out stay in Spanish.
• A signed-out cookie (uscp_signed_out=1) is set when this browser learns that your sign-in was ended elsewhere or expired. It says only that, nothing about your account, so the sign-in page can remove your study data. It lasts at most a day, and the sign-in page removes it once it has cleaned up.

There are no advertising, tracking or analytics cookies.