Privacy Policy

1. Who we are

Grant is operated by Metedata LLC, a company formed in Wyoming, United States. Our registered mailing address is 30 N Gould St Ste N, Sheridan, WY 82801, United States. Our development team is based in New York, United States.

Grant is independent and is not affiliated with, endorsed by, or operated by USCIS, DHS, or any government agency. Grant does not provide legal advice. Contact us at support@metedata.com.

2. Account storage and documents

Grant stores receipt numbers, case names, notes, manual history, status information, and uploaded documents in your Grant account on our backend. It also keeps a local copy on your device. This lets your signed-in Mac and iPhone show your synced content. USCIS credentials remain on our backend; the apps do not receive them.

Before account sync or importing supported case data, the app explains the account service and asks you to actively accept this Privacy Policy and the Terms. This includes the necessary processing by the named recipients in section 5. You can read both policies before deciding. Documents in your iCloud Drive remain separate from your Grant account until you choose to upload them. Uploading creates a separate account copy and keeps the iCloud original.

The app can keep limited account-specific references to iCloud receipt folders after sign-out so a later document upload can resume. Explicitly clearing local data or deleting the account removes those references. Deleting your Grant account does not delete files in your own iCloud Drive, exported files, or device backups you control.

3. What we collect and why

Notes and documents can contain sensitive personal, immigration, health or financial information if you put it there. Only provide information you need to organize your cases and have authority to share. Grant does not request your location, contacts, photo library or advertising identifier. Apple handles payments; we do not receive your full payment-card number.

We do not sell, rent or exchange user data for money or other value. This includes identifiable, de-identified, anonymized and pseudonymized data. We do not share user data for targeted advertising or use case data, notes or documents to train machine-learning models. Grant has no advertising SDKs. Apple may send us app diagnostics if you choose to share them with developers in your device settings.

4. USCIS requests and shared status data

The private test service uses the official USCIS sandbox with test receipt numbers. Live case tracking in Grant depends on production approval. When live access becomes available, our backend will send USCIS only the receipt numbers you authorize us to check. We do not send your Grant email, case nickname, notes, manual entries or documents to USCIS.

The backend may reuse a status response when several authorized users track the same receipt. It also records status changes it observes. One user's identity, notes, manual entries, documents or relationship to a case is not shown to another user. A receipt number can identify someone else's case: tracking or sharing it without permission can affect that person's privacy. Only track your own case, a family member's case with permission, or a client's case when authorized.

A missing status does not tell us why USCIS withheld or could not return information. We show an unavailable or unrecognized state without inferring a reason. Official USCIS notices and instructions remain the source to use for decisions and deadlines.

5. Who receives information

Your active acceptance of the account policies authorizes the processing needed to operate Grant, as described in the table above. Optional actions, such as uploading a document or sending a support message, remain your choice.

Providers that process information on our behalf must follow contractual limits on its use and disclosure, keep it confidential, and apply security safeguards consistent with the protections described here. Cloudflare and Google provide these commitments through their applicable data-processing agreements. We do not authorize providers to sell Grant user data or use it for advertising.

Apple separately manages Apple Accounts, App Store payments and user-controlled iCloud files under its own terms. USCIS operates under its government rules. Your agreement with Grant does not replace those terms. You can read the providers' policies: Cloudflare, Apple and Google.

We authorize third-party use or disclosure of user information only with your active consent, for the specific purposes you accepted. This applies to identifiable, de-identified, anonymized and pseudonymized data. Necessary service processing includes account security and fraud prevention as described here. A new purpose or recipient outside those accepted uses requires a separate choice from you. A legal requirement or an urgent threat to safety may require disclosure without consent. We limit such disclosures to what is necessary and provide notice when the law permits.

We do not create or share de-identified, anonymized or pseudonymized user datasets for advertising, sale, research or other purposes unrelated to operating Grant. Internal account identifiers, shared case status records and limited operational logs are used only for the service purposes described here and remain subject to these privacy protections.

Our providers operate internationally. Information may be processed in the United States and other countries where they operate. Grant does not promise that all data stays in the United States.

6. How long we keep information

Google may retain deleted support-mail copies for up to 180 days after we permanently delete them, subject to legal retention requirements. This is separate from the normal support-message retention period above.

Cloudflare database recovery copies can retain deleted records for up to 30 days. Recovery copies are restricted to service recovery and expire under the provider's recovery schedule. They are separate from the active account database. A specific legal, billing, fraud or security matter may require a limited record beyond the periods above; we restrict its use to that purpose.

7. Deletion, access and your choices

Delete your Grant account: open Grant Settings, then Account, then Delete Account. Once the server accepts the request, account access is revoked and removal of account data begins. Uploaded-file cleanup is retried if storage is temporarily unavailable. The app removes its account cache and all cases and notes stored locally by the app on that device.

For up to 180 days after deletion, another signed-in device can receive a confirmed deletion notice when it reconnects. It then removes local cases and notes, including unsynced changes, downloaded documents and recovery copies. A device that stays offline longer, or no longer has a valid sign-in session, may not receive the notice. Your separate iCloud files and exported copies remain under your control.

To remove data from a signed-out device, open Settings, then Account, then Clear Local Data. This permanently removes local cases, notes, downloaded documents and recovery copies, including unsynced work. Save anything you need first. It does not delete your server account, separate iCloud files or exported copies.

An ordinary expired session keeps local work until you sign back in to the same account or choose to clear it.

Your link to each tracked receipt is removed. Shared USCIS status may remain while another user tracks that receipt, or for up to 30 days after the last tracker leaves. It does not retain your account relationship. Limited cleanup and purchase records follow section 6. Deleting your account does not cancel an Apple subscription; cancel that separately in your Apple Account subscription settings.

Export your account data: in Grant Settings, open Account, then Export Account Data. Choose a folder to save your account data and uploaded documents. The export does not include unsynced local changes or separate iCloud files. Avoid editing your account on other devices until it finishes, and keep the saved folder private.

You can also export from the policy update screen without accepting the updated policies. Export or save anything you need before deleting your account or clearing local data.

Request help: email support@metedata.com from your account address for an export, permanent deletion or help correcting data. You do not need to accept a policy update to make a request. We may verify ownership before acting. Do not email passwords, sign-in codes, identity documents or full receipt numbers unless we explain why they are needed and how to provide them securely.

We aim to acknowledge requests within 7 days. We normally complete verified access or deletion requests within 30 days, or sooner when applicable law requires. If we need proof of account ownership, we will explain what is needed and request it promptly. If the law permits an extension, we will tell you the reason and the new deadline.

If a storage outage delays file cleanup, we retry the removal and track it until resolved. We will tell you if your request needs more time and why. The separate recovery copies and limited records described in section 6 follow their stated retention periods.

You can edit case names, notes and manual history, remove a case or uploaded file, disable notifications, or choose an Apple relay email. Case deletion removes that account's associated content; cleanup retries if a file cannot be removed immediately. Skipping an optional document upload keeps that document out of the account service. Not creating a Grant account avoids account storage but prevents the account-based tracking and sync features.

Depending on where you live, you may have rights to access, correct, delete, restrict processing, object, appeal a decision or complain to a privacy authority. Contact us to exercise these rights. We do not discriminate against you for doing so.

8. Security and incidents

We use HTTPS, provider encryption at rest, backend-only USCIS credentials and access controls. We limit administrative access to those who need it. No service is perfectly secure. If a breach affects your information, we will notify you without unreasonable delay, explain what happened and provide practical steps you can take. We will use your account email or another available contact method. If a legally binding restriction delays notice, we will notify you as soon as the law permits. We will notify regulators when required.

9. Children

Grant is not directed to children under 13, and we do not knowingly allow them to create accounts. A parent or guardian may track a child's case using the adult's account. Contact us if you believe a child under 13 created an account so we can address it.

10. Ownership changes and closure

If Grant changes ownership, we will notify account holders at their account email before their data transfers. If the law prevents advance notice, we will notify you as soon as it permits. A successor must honor this policy's commitments or ask for your active consent to different uses. We will provide a way to request an export and deletion before the transfer.

If Grant closes, we will notify you, give you a reasonable opportunity to retrieve your data securely, and delete account data subject to the limited retention rules above.

11. Policy changes

For every published revision of this Privacy Policy or the Terms, including wording corrections, the app shows a plain-language summary and asks you to actively accept the updated policies before account sync continues. We record the policy versions and the time of your acceptance. Silence or continued use does not count as agreement.

You can decline and use Export Account Data or Delete Account in the update screen, or email support for help. These options do not require acceptance of the update. Sign out instead stops sync and keeps your local work on that device.

The revision date and change note identify each update.

12. Contact and policy history

Metedata LLC · Registered mailing address: 30 N Gould St Ste N, Sheridan, WY 82801, United States · support@metedata.com.

September 26, 2026, revision 2: the Terms clarify user responsibilities, product and support limits, software rights, misuse restrictions and liability limits. This policy's data collection, use, sharing, consent, security, retention, deletion and notice commitments are unchanged. Every published policy revision still requires active acceptance before account sync. Export and deletion remain available if you decline. Public release and USCIS production access remain pending.