Privacy and your data.

What we store

• Your in-progress plan (courses, goal, school or transfer school, and major) — so you can resume.
• Named plan copies include their labels, coursework, GPA, goals, colleges, majors, and planning preferences. They remain on this device when account plan storage is unavailable; the planner shows where they are saved.
• If you connect Canvas: an encrypted access token, connection and sync records, course identifiers and terms, enrollment states, available grades and scores, confirmed catalog matches, and calculated progress flags. Assignment details pass through the server to estimate ungraded work. If you enable assignment reminders, we also save assignment identifiers, titles, course labels, due dates, and reminder tasks; we do not copy submission contents into those tasks. Disconnecting Canvas deletes the connection data and synced grades and stops assignment reminder emails. Coursework copied into your plan and saved tasks remain until you remove them.
• Your student/advisor experience choice and any fictional or device-only records you add in the public advisor demo.
• If an advisor creates an online caseload record: the advisor’s student label, optional reference ID, pathway, target, status, next action, meeting time, and private advisor note. The one-time connection code is shown once; only a cryptographic hash and its last four characters are stored.
• If a student claims an advisor code: the connection time and the student’s four sharing choices (academic profile, coursework, plan, and tasks/progress). Advisors receive a read-only, field-limited snapshot only while that connection remains active.
• Your third-party opportunity searches and local application tracker — kept on this device and not sent to job boards until you choose a link.
• With an account: the private career profile, applications, counselor conversations and memory, weekly tasks, reminder choices, and term check-ins you choose to save.
• If you separately join the Talent Pool: an expiring, student-controlled snapshot containing only the academic and career fields you select. Verified employers can filter that snapshot for an approved opening; they do not receive your account ID, email, full profile, or transcript.
• A history of requirement checks, stamped with the data version — so “what did it tell me?” is answerable.
• Anonymous usage events (no names, no emails, no GPA values).
• If you request a paid-plan launch notification, we store your email and request date for that notification. This does not create an account or purchase. Contact us to remove the request; account-linked requests are removed when that account is deleted.
• If you join a school waitlist, we store the school name, its state, your email, and the request date. Selecting a directory school also records its public institution ID and city so similarly named schools stay distinct. These requests help prioritize coverage and provide school updates; they do not establish an official transfer pathway. Contact us to remove a signup. Linked requests are deleted with your account.
• If you request a missing major, we store your selected college, optional transfer destination, intended major, email, and request date. This helps prioritize source review; it does not confirm a pathway or launch date. Contact us to remove a request. Account-linked requests are deleted with your account.
• A pathway coverage request, if you submit one — its contact and school details are sent to our server to prioritize source research and notify you when that exact path becomes available. The private owner dashboard receives grouped counts and does not receive names, emails, or coursework.
• Wrong-answer reports you file, with the planning result they are about.
• For an approved photo or scanned-PDF read: Amazon Bedrock (AWS) or Anthropic processes the file and returns text. DegreeLume does not write the original file to its storage; only rows you confirm enter your plan.
• With account sync: your current plan and, when account plan storage is available, named plan copies protected by account access controls. Deleting your data below removes these records and the account itself.

Sensitive information

• We do not ask for Social Security numbers, dates of birth, government IDs, or FAFSA data.
• A transcript header can still contain a name, address, or student ID. Crop or cover that header before taking a photo when possible, or paste the course-history text to keep the document local.
• The AI reader sends no account email with the file and is instructed to return course rows only.
• Advisor access never includes passwords, authentication data, Canvas tokens, billing, reminder settings, private check-in answers, or AI counselor conversations. Private advisor notes are not shown in the student connection screen.
• Talent Pool GPA and course grades are self-reported and optional. They are never copied from an uploaded transcript, and each field must be deliberately enabled by the student.
• The Talent Pool is limited to students who attest that they are at least 18. We do not collect a birth date, protected characteristics, health information, financial history, or government IDs for hiring filters.

Advisor connections

Your controls

The device export is a single JSON file containing the data stored in this browser. Deletion is immediate and unrecoverable; it removes your saved plan, unsupported-school coursework organizer, opportunity tracker, planning history, events, pathway requests, and reports from this device.

Accounts, plainly

The planner and the tools open with a free account (Google, Apple, or an email link — no password); a read-only shared plan opens without one. Saving and syncing a plan, persistent counselor history, reminders, applications, or Talent Pool preferences live on that account. The same rules carry with it: account deletion hard-deletes linked server records and there is no resale. Optional AI processing is disclosed at the feature before anything is sent. This service is for students 13 and older.