Who we are
OathCoach (“we”, “us”) is a study app for the U.S. citizenship civics test, run by OathCoach. This policy covers the OathCoach app for Android and iPhone, our server at api.oathcoach.com and this website. OathCoach is not affiliated with USCIS or the U.S. government.
What we collect
What we collect depends on how you use the app.
| Data | When | Why |
|---|---|---|
| Email address and, with Google or Apple sign-in, your name | Only if you create an account | To sign you in, send one-time sign-in codes and answer support requests |
| Study progress: answers, scores, history, learning stage, settings such as your test and state | Only if you are signed in | To back up and sync your progress between devices |
| Device details: platform, app version, a notification token and a hashed install ID | When the app registers with our server | To send reminders you turned on, keep you signed in and prevent abuse of free trials of paid features |
| Purchase status: product, active or expired, renewal date | If you buy Premium | To unlock Premium on all your devices. We never see your card or payment details |
| Crash reports: error details, device model, OS and app version | When the app crashes or hits an error | To find and fix bugs. Reports do not include your email or answers |
| AI interview text: the questions asked and your typed or transcribed answers | Only when you use the AI officer interview | To run the practice interview and give you feedback |
We do not collect your location, contacts, photos, immigration case details or any government ID number, and we never ask for them.
What stays on your device
The app is offline-first. All questions, your progress and your spaced-repetition schedule live in a database on your phone. Looking up your representative by ZIP code happens on the device, against data the app downloads; the ZIP code you type is not sent to us. If you never sign in, nothing about your studying leaves your phone.
How we use it
- to provide the app: sign-in, backup, Premium, reminders and the AI interview;
- to keep the service secure and stop fraud and abuse;
- to fix crashes and improve reliability;
- to answer you when you contact us.
We do not sell personal data, share it for cross-context behavioral advertising, or use it to build advertising profiles. We do not show ads. Where the law requires a legal basis (for example in the EU or UK), we rely on performing our contract with you, our legitimate interest in a secure and working service, and your consent for optional things like notifications and the microphone.
Service providers
We use a small number of trusted providers who process data only on our behalf and under contracts that limit their use of it:
- Railway: hosts our server and database (United States).
- Google: Google sign-in, Google Play billing and Firebase Cloud Messaging for push notifications only.
- Apple: Sign in with Apple and App Store billing on iPhone.
- RevenueCat: manages subscription and purchase status.
- Amazon Web Services (SES): sends sign-in code emails.
- Sentry: crash and error reports.
- Anthropic: the AI model behind the AI officer interview. It receives interview text through our server, never directly from your phone, and does not use it to train its models.
- Cloudflare: hosts and protects this website.
Some providers are based in the United States, so your data may be processed there. Where required, transfers are covered by standard contractual clauses or equivalent safeguards. We may also disclose data if the law requires it, or to a successor if OathCoach is ever sold, in which case this policy continues to apply.
Voice and microphone
The app reads questions aloud with your phone’s text-to-speech voices. If you choose to answer by voice, the app asks for microphone permission first. Your speech is turned into text by your phone’s speech recognizer, which may use Google’s or Apple’s online service depending on your device settings. OathCoach never receives, records or stores audio. Only the resulting text is graded, on your phone. You can turn the microphone off at any time in your phone’s settings and type instead.
How long we keep it
- Account and synced progress: for as long as your account exists.
- Sign-in sessions: until they expire or you sign out.
- Crash reports: up to 90 days.
- Records of purchases: as long as tax and accounting law requires.
When you delete your account, we delete your account, progress, devices and interview history from our server straight away and ask RevenueCat to delete your purchase record. Backups roll over and are gone within 30 days.
Your choices and rights
- Use it as a guest: no account, no data on our server.
- Delete your account: in the app under Profile › Account › Delete account, or on our account deletion page.
- Notifications: turn them off in the app or in your phone settings. We send at most one a day.
- Access, correction, a copy of your data, or objection: email [email protected]. We answer within 30 days and will not treat you differently for asking.
Depending on where you live (for example California, the EU or the UK), you may have further rights under laws such as the CCPA or GDPR, including the right to complain to your local data protection authority. We honor these requests for everyone, wherever you live.
Security
Data travels over encrypted connections (HTTPS). Sign-in tokens are stored in your phone’s secure storage, and only hashes of them are kept on our server. API keys for paid services never ship inside the app. No system is perfectly secure, but we limit what we collect so there is little to lose.
Children
OathCoach is meant for adults preparing for naturalization and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, email us and we will delete it.
This website
oathcoach.com uses no cookies, no analytics trackers and no ad scripts. Our host, Cloudflare, keeps standard security logs (such as IP address and browser type) to protect the site. If we add analytics later, it will be cookieless and we will update this page first.
Changes
If we change this policy, we will update the date at the top. If a change is significant, we will also tell you in the app before it takes effect.
Contact
Questions or requests about your privacy: [email protected].