Privacy Policy
Last updated October 2, 2026
Trajectory is a study planner. Your plan lives on your phone; the server only sees what an optional feature needs, and we never sell data or use it for advertising.
The short version
- On your phone: your classes, tasks, deadlines, study plan, schedule, sleep window and settings are stored on your device only. There is no cloud copy of your plan.
- Your calendars stay on your phone: if you let Trajectory plan around your iPhone calendars, it reads them on the phone; your events are never sent to us or to the AI.
- AI only when you ask: content is sent for AI processing only after you agree in the app, and only for the request you make.
- Files are deleted after reading: a syllabus you upload is deleted from our storage once it has been read.
- No ads, no tracking: no advertising, analytics or tracking SDKs, and no data sales.
1. Who we are
Trajectory ("we", "us") is an iPhone app for college students. Contact: elijahhaskell@trajectoryapp.org.
2. What stays on your device
Classes, tasks and deadlines, the semester plan and study sessions, calendar blocks, the events read from the iPhone calendars you choose, your sleep window, study guides you generate, and app preferences are stored locally on your device. We do not receive or back them up. Deleting the app deletes them.
3. Account (optional)
You can use Trajectory without an account, including buying and using Trajectory Pro. When you first use something that needs our server (a syllabus import, an AI feature, or a purchase) without being signed in, the app creates an anonymous guest account on our server (a random identifier, no name or email) so files can be read, the free import counted, and your Pro purchase confirmed: RevenueCat receives that random guest identifier with your purchase. Sign in with Apple is no longer offered for new accounts: the app only asks you to sign in to manage a Google Calendar connection, or delete an account, made in an earlier version. If you have signed in with Apple (offered in earlier versions), we keep: your Apple user identifier, the name and email you chose to share with us (Apple may give a private relay address), and when you last signed in. You can sign out, or delete that account in the app, at any time.
We also keep a small account record that holds no plan content: fingerprints (one-way hashes) of the syllabi you imported, so the free plan's one-syllabus limit cannot be reset; the storage names of files you uploaded, so we can delete them; for a guest account, only a one-way hash of a random resume key that stays on your iPhone, so the same guest can come back after a long break; and, if configured, an encrypted Sign in with Apple token, so we can revoke Apple's link to Trajectory when you delete your account.
4. What is sent for AI processing
AI features run only after you consent in the app. For the request you make, the app sends what that request needs to our server, which passes it to Google Gemini through our hosting provider's AI gateway (Manus). Depending on the feature this includes: your message; class, task and course names; due dates; the sessions and events in your Trajectory plan and your recurring commitments; your sleep window; grades you entered; short study-habit notes the app keeps on your phone for personalization; and the syllabus, notes, photos or files you choose. Events from your calendars (read on your iPhone, or synced from a Google Calendar connection made in an earlier version) are never sent. Results come back to your phone. You can turn AI processing off at any time in the app (Privacy policy screen).
5. Uploaded files
A syllabus file or photo you upload for reading is stored temporarily on our hosting provider's storage and is deleted once the reading finishes. Files you attach to Exam Prep or Test Review are kept so they can be read again for that exam, and are deleted when you delete your account. Text you paste is processed in memory and is not saved to our database or file storage. Files uploaded with Trajectory 1.0.6 or earlier were not tracked this way; email us if you want them removed.
6. Calendars (optional)
If you allow calendar access, Trajectory reads the calendars you choose on your iPhone to find busy times. Your events stay on your phone: they are not sent to our server or used for AI requests. You can change which calendars are read or turn this off in the app (Calendars), and remove Trajectory's calendar access in iOS Settings.
If you turn on Apple Calendar export, Trajectory adds your upcoming study sessions (and deadlines, unless you switch them off) to a separate "Trajectory" calendar in your Calendar app, which syncs like your other calendars (for example through iCloud). Trajectory never changes your other calendars or events.
Connecting Google Calendar through our server is no longer offered. If you connected it in an earlier version, Trajectory has read-only access to that calendar: your events are imported so the planner avoids busy times, and Trajectory never creates, changes or deletes Google events. The access tokens and imported events are stored on our server while the connection exists. Disconnecting it in the app (Calendars), or deleting your account, revokes access and deletes them.
7. Purchases
Subscriptions and one-time purchases are processed by Apple. RevenueCat manages entitlements: it receives your purchase receipts and your account's identifier (the random guest identifier, or, when you are signed in, one derived from your Apple user identifier), so Trajectory Pro works for your account. We never see your payment details. Our server asks RevenueCat whether your account has Pro before running Pro features.
8. Logs and security
All traffic uses HTTPS. Our server keeps short technical logs (errors, timings, counts) without the content of your messages or files, and in-memory usage counters for the daily AI allowance.
9. Deleting your data
In the app, Settings → Delete Account & Data permanently deletes your account record, the account record described in section 3, any Google Calendar connection made in an earlier version and its imported events, and the files you uploaded that we still hold, and erases Trajectory data on your device (including the "Trajectory" calendar, if you used Apple Calendar export). If you signed in with Apple and we hold a Sign in with Apple token, it also asks Apple to revoke Trajectory's access; the app tells you whether that happened, and you can always remove Trajectory yourself in your Apple Account settings (Sign in with Apple). Without an account, the same screen erases the on-device data. Purchase records stay with Apple and RevenueCat; cancel a subscription in your App Store settings. You can also email elijahhaskell@trajectoryapp.org for deletion or a copy of your data.
10. Children
Trajectory is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has provided information, contact us and we will delete it.
11. Your rights
Depending on where you live (for example under the GDPR or CCPA), you can request access to, correction of, or deletion of your data, and object to or restrict processing. AI processing is based on your consent, which you can withdraw at any time. We do not sell or share personal information for advertising.
12. Changes
We will update this page and its date when the policy changes. Material changes are also shown in the app.
13. Launch updates (website)
If you join the launch list on trajectoryapp.org, we keep only your email address, stored in a Google Form and Sheet we control, and use it to send Trajectory launch news and occasional product updates. We never sell or share it. Reply “unsubscribe” to any of those emails, or email elijahhaskell@trajectoryapp.org, and we remove your address.