THE TRAJECTORY METHOD

PRIVACY POLICY · EFFECTIVE JULY 22, 2026 · V1.1

The Trajectory Method (“the app,” “we”) is a private daily journal. Privacy isn't a compliance section for us — it's the product. People don't write honestly in a journal they don't trust. So this policy is short, in plain English, and true.

THE ONE-SENTENCE VERSION

Everything you write stays on your device. We don't collect it, transmit it, sell it, or see it.

WHAT THE APP STORES (ALL LOCALLY, ON YOUR DEVICE)
  • Your journal entries, formatting, and sketches
  • Your goals, habits, and daily check-ins
  • Your day history (past pages, moods, streaks)
  • Your profile name and photo, if you set them
  • Your settings (theme, fonts, reminders, quote source)
  • Your app PIN — stored only as a salted hash, never as the digits you typed
  • Trial engagement data (which days you opened the app, wrote, or checked goals) — used only on-device to calculate your earned discount. The score itself never leaves your device; at most, the discount tier you unlocked is reflected in which Google Play offer you purchase.

None of this content leaves your phone. There is no Trajectory server. We have no database of users. If you've written your deepest fears into the app, we couldn't read them if we wanted to — and we don't want to.

WHAT WE DO NOT DO
  • No accounts (you never give us your name or email)
  • No analytics or advertising SDKs, no ad identifiers
  • No selling or sharing of data — there is nothing to sell
  • No reading, scanning, or AI-training on your journal content
  • The app talks to exactly one outside service — the subscription processor described below — and it never receives a word you've written
DEVICE FEATURES THE APP USES

Biometric unlock (fingerprint / face) — handled entirely by your device's operating system. The app only receives a yes/no answer; it never sees, stores, or has access to your biometric data.

Photos — if you set a profile photo, the picker runs on-device and the image stays on your device.

Notifications — the daily reminder is a local notification scheduled on your device. Nothing is sent over the internet. You can turn it off in Settings, and the app works fully without notification permission.

Backups — the export file is created on your device and saved wherever you choose. It contains your journal, so treat it with the same care — we never receive a copy.

SUBSCRIPTIONS (GOOGLE PLAY + REVENUECAT)

Payments are processed by Google Play Billing. Google handles the payment; we never see your card number or billing details, and Google's own privacy policy governs that transaction.

To validate purchases and remember your membership across reinstalls and devices, the app uses RevenueCat, a subscription-management service acting as our service provider. What RevenueCat receives:

  • A random, anonymous ID generated for your install — not your name, email, or anything about you (we don't have those to give)
  • Your purchase and subscription state (what you bought, when it renews)
  • Basic device context that comes with any internet request: device model, OS version, app version, language, and — transiently — your IP address

That's the full list. No journal content, goals, moods, scores, or settings are ever sent — to RevenueCat or anyone else. RevenueCat's privacy policy: revenuecat.com/privacy.

DELETING YOUR DATA

Your data is yours to destroy: uninstall the app, or clear the app's storage in your device settings, and everything on the device is gone — permanently. Because we keep no copies, there is nothing for us to delete on a server, and no way for us (or anyone) to recover it. Back up before you uninstall if you want to keep your journal. Subscription records held by Google Play and RevenueCat are governed by their policies; cancelling and uninstalling ends the flow of purchase data.

CHILDREN

The Trajectory Method is not directed at children under 13, and we do not knowingly collect information from anyone (of any age — see above).

WHAT COULD CHANGE

If we ever add optional accounts and sync (planned as an opt-in feature), this policy will change before that feature ships, the in-app policy link will be updated, and sync will be off unless you turn it on. Local-first will remain the default.

CONTACT

Questions? Write to hello@jmethodapps.com.

Summary for humans: it's your journal. It lives on your phone. We can't read it. The only thing that ever leaves is proof that you paid — attached to a random ID, not to you.