Privacy Policy

About this policy

This policy explains how FillOut handles information in its immigration form preparation app and at fillout.net. FillOut is an independent service and is not affiliated with USCIS or another government agency.

Account and contact information

Creating an account requires your email address, phone number and password. Existing profiles may also contain a name you previously provided. Supabase processes authentication and stores account details; Resend delivers sign-in, verification and account recovery emails. We use account information to identify you, protect access and provide the services you request.

Drafts on your device

Your answers, form drafts and PDF editing data are stored in app or browser storage on your device. Drafts are separated by account, are not separately encrypted by FillOut and do not automatically sync between devices. Signing in or opening a form does not by itself upload your draft. Keep your device secure and save copies of documents you need before clearing storage or reinstalling.

Information you send to FillOut

When you choose Send for review, your completed PDF, a snapshot of your answers, account identifier and submission details are uploaded to our private backend hosted by Supabase. Authorized FillOut team members can read submissions, request corrections and make an approved file available in your account. Forms may contain sensitive information such as addresses, dates of birth, immigration history and government identifiers. Submit only information needed for your form.

Messages and contact requests you choose to send are also stored by the service and can be read by authorized team members. Chat is correspondence with the FillOut team. It is not a confidential attorney-client relationship.

Attorney requests you authorize

An attorney request is free to submit. Before sending it, we ask for your separate, explicit consent to share your contact details, selected form and question with independent attorneys. The FillOut owner reviews and manually forwards requests; the app does not automatically transmit them to a lawyer. The attorneys may then contact you directly. They handle information they receive under their own professional and privacy obligations. An attorney request does not create representation or an appointment.

Purchases

Apple processes iOS in-app payments. RevenueCat and our backend use your FillOut account identifier, product and transaction identifiers, purchase state and related technical information to verify a purchase and associate it with one application. We do not receive your full payment card details. Our purchase integration does not send your form answers or PDFs to RevenueCat.

Apple and RevenueCat maintain their own transaction records under their policies. See Apple Privacy Policy and RevenueCat Privacy Policy.

Hosting, security and service providers

GitHub Pages hosts this website. Supabase provides account and backend services, Resend delivers account emails, and Expo provides app delivery and updates. These providers may process network and technical information needed to operate their services, such as IP addresses, device or app version and request logs. The website does not include advertising trackers or an advertising analytics SDK. Access to submitted documents and messages is restricted, but no service can promise absolute security.

Retention and deletion

Local drafts remain until you remove them, delete the account from that device, or clear its app or browser storage. Submitted reviews, PDFs and messages remain in the active service until removed through account deletion or service administration; there is no automatic expiry promised here.

Use Account → Delete account in the app to delete your account and its active contact requests, chat and submitted review/PDF records. The app also clears that account’s drafts and pending purchase records on the device used for deletion. Copies you exported, files held by recipients and local copies on other devices are not removed. Backups and provider records may remain under their respective retention processes.

Limited purchase, transaction and webhook records may remain to prevent transaction reuse, resolve payment issues and operate the service. Account deletion does not automatically erase Apple or RevenueCat records or issue a refund. We do not promise complete anonymization of all retained technical records or a fixed deletion period for provider backups.

Your choices and privacy requests

You can review and update available account details in Account, choose whether to submit a document or message, and delete your account. To ask about access, correction or deletion of information, contact the FillOut team through the Support page. We may need to verify account ownership before acting on a request. We will post changes to this policy here with an updated date.

Support and privacy contact: peoplechat2@gmail.com.