Privacy Policy

Last updated October 8, 2026

Trajectory is a study planner. Your plan is saved to your Trajectory account, so it is there on any iPhone you sign in to. We never sell data or use it for advertising.

1. Who we are

Trajectory ("we", "us") is an iPhone app for college students. Contact: elijahhaskell@trajectoryapp.org.

2. Your plan: on your phone and in your account

Trajectory works from the copy of your plan on your iPhone and saves that plan to your account on our server when it changes. The saved plan holds what you put into Trajectory and what Trajectory plans from it: classes and recurring commitments, tasks and deadlines, the semester plan and study sessions, your sleep window and planning settings, the syllabi you imported (their text and the dates read from them), Exam Prep notes, and the study guides and practice exams you generated. We keep one saved plan per account and replace it each time; we keep no older versions, apart from our hosting provider's automatic database backups, which are kept for about a week.

These are never saved to your account and stay on your iPhone: the events read from the iPhone calendars you choose; a calendar link from your school (for example Canvas), if you add one; the short study-habit notes the app keeps for personalization; your AI-processing choice; and your reminders. (For a school calendar link, the saved plan only records which of its items became tasks, never the link.)

Signing out removes your plan from that iPhone. It stays saved in your account and comes back when you sign in again. Deleting the app does not delete your account or your saved plan: use Delete Account & Data in the app first (section 9).

3. Your account

Trajectory needs an account, which you create by signing in with Apple. We keep: your Apple user identifier, the name and email you chose to share with us (Apple may give a private relay address), and when you last signed in. You can sign out, or delete your account in the app, at any time.

Besides your saved plan, we keep a small account record that holds no plan content: fingerprints (one-way hashes) of the syllabi you imported, so the free plan's one-syllabus limit cannot be reset; the storage names of files you uploaded, so we can delete them; and, where we hold one, an encrypted Sign in with Apple token, so we can ask Apple to revoke its link to Trajectory when you delete your account.

4. What is sent for AI processing

AI features run only after you consent in the app. For the request you make, the app sends what that request needs to our server, which passes it to Google Gemini (Google's paid Gemini API: Google processes it to produce the answer and does not use it to improve its products, though it may keep it for a limited time to detect abuse). Depending on the feature this includes: your message; class, task and course names; due dates; the sessions and events in your Trajectory plan and your recurring commitments; your sleep window; short study-habit notes the app keeps on your phone for personalization; and the syllabus, notes, photos or files you choose. Events from your calendars (read on your iPhone, or synced from a Google Calendar connection made in an earlier version) are never sent. Results come back to your phone. You can turn AI processing off at any time in the app (Privacy policy screen).

5. Uploaded files

A syllabus file or photo you upload for reading is stored temporarily in our private file storage and is deleted once the reading finishes. Files you attach to Exam Prep or Test Review are kept so they can be read again for that exam, and are deleted when you delete your account. Text you paste is processed in memory for the reading. What was read (the syllabus text and its dates, or your Exam Prep notes) becomes part of your plan, on your iPhone and in your saved plan (section 2). Files and account records from before October 2026 stayed with our previous hosting provider (Manus) and are deleted when that service is closed; email us if you want yours removed sooner.

6. Calendars (optional)

If you allow calendar access, Trajectory reads the calendars you choose on your iPhone to find busy times. Your events stay on your phone: they are not sent to our server or used for AI requests. You can change which calendars are read or turn this off in the app (Calendars), and remove Trajectory's calendar access in iOS Settings.

If you turn on Apple Calendar export, Trajectory adds your upcoming study sessions (and deadlines, unless you switch them off) to a separate "Trajectory" calendar in your Calendar app, which syncs like your other calendars (for example through iCloud). Trajectory never changes your other calendars or events.

Connecting Google Calendar through our server is no longer offered. If you connected it in an earlier version, Trajectory has read-only access to that calendar: your events are imported so the planner avoids busy times, and Trajectory never creates, changes or deletes Google events. The access tokens and imported events are stored on our server while the connection exists. Disconnecting it in the app (Calendars), or deleting your account, revokes access and deletes them.

7. Purchases

Subscriptions and one-time purchases are processed by Apple. RevenueCat manages entitlements: it receives your purchase receipts and your account's identifier (one derived from your Apple user identifier), so Trajectory Pro works for your account on any iPhone you sign in to. We never see your payment details. Our server asks RevenueCat whether your account has Pro before running Pro features.

8. Logs and security

Our server, database and file storage are hosted by DigitalOcean in the United States. All traffic uses HTTPS, and the database that holds accounts and saved plans is encrypted at rest by our hosting provider. Our server keeps short technical logs (errors, timings, counts) without the content of your plan, messages or files, and in-memory usage counters for the daily AI allowance.

9. Deleting your data

In the app, Settings → Delete Account & Data permanently deletes your account, your saved plan, the account record described in section 3, any Google Calendar connection made in an earlier version and its imported events, and the files you uploaded that we still hold, and erases Trajectory data on your device (including the "Trajectory" calendar, if you used Apple Calendar export). Where we hold a Sign in with Apple token, it also asks Apple to revoke Trajectory's access; the app tells you whether that happened, and you can always remove Trajectory yourself in your Apple Account settings (Sign in with Apple). Deleted data leaves our database at once and our hosting provider's automatic backups within about a week. Purchase records stay with Apple and RevenueCat; cancel a subscription in your App Store settings. You can also email elijahhaskell@trajectoryapp.org for deletion or a copy of your data.

10. Children

Trajectory is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has provided information, contact us and we will delete it.

11. Your rights

Depending on where you live (for example under the GDPR or CCPA), you can request access to, correction of, or deletion of your data, and object to or restrict processing. AI processing is based on your consent, which you can withdraw at any time. We do not sell or share personal information for advertising.

12. Changes

We will update this page and its date when the policy changes. Material changes are also shown in the app.

13. Launch updates (website)

If you join the launch list on trajectoryapp.org, we keep only your email address, stored in a Google Form and Sheet we control, and use it to send Trajectory launch news and occasional product updates. We never sell or share it. Reply “unsubscribe” to any of those emails, or email elijahhaskell@trajectoryapp.org, and we remove your address.