Privacy policy.

Information we collect

Account information includes your email address, name, account identifier, and any profile image provided by your sign-in provider. For email-and-password accounts, we store a password hash, not your plaintext password. Apple or Google may provide an account identifier, email, name, profile information, and authentication tokens. Apple’s private relay email is supported where available.

App information includes the companies you add to your watchlist, account preferences, search terms, and requests needed to retrieve market information. Search terms and results may be cached to serve searches efficiently. Some preferences, session credentials, and cached content are stored on your device.

Purchase information includes subscription product, store, transaction identifiers, purchase and expiration dates, and subscription status. Apple or Google processes mobile payments. RevenueCat validates purchases and helps restore access. We do not receive full payment-card details. Stripe may process billing information for existing web subscriptions.

Technical information includes IP addresses, request and error logs, app and operating-system versions, device or installation identifiers used by service providers, and information needed for security, app delivery, and subscription troubleshooting. Expo receives an installation identifier and may receive fatal-error details when checking for updates. RevenueCat records subscription-screen views and interactions to operate purchases and measure subscription performance.

We also receive information you send in support, privacy, feedback, or beta-access requests. Do not send passwords, payment-card details, or brokerage credentials.

How we use information

We use information to create and secure accounts, synchronize watchlists, provide market content, validate subscriptions, restore purchases, deliver app updates, answer requests, prevent abuse, diagnose errors, and meet legal obligations. Service emails include verification and password-reset messages. A beta-access request may be used to contact you about beta availability.

Market explanations and AI

Some explanations are generated using third-party AI services, currently Z.ai. Our server sends a ticker, market statistics, and relevant source text to generate an explanation. We do not include your account name, email address, or personal watchlist in those prompts. Explanations can be inaccurate and are not personalized investment advice.

Service providers and sharing

Providers process information to deliver the service. These include Vercel for hosting and request processing; Neon for our database; Expo for app builds and updates; Resend for service emails; Apple and Google for sign-in, distribution, and purchases; RevenueCat for subscriptions; and Stripe for existing web billing. Market-data and AI providers receive requests for the content they supply. Providers may also process information under their own policies when you interact directly with them.

We may disclose information when legally required, to protect people or service security, in connection with a business transaction subject to appropriate protections, or at your direction. We do not sell personal information or share it for cross-context behavioral advertising. The app does not request permission to track you across other companies’ apps or websites.

Cookies and device storage

The marketing website does not currently use advertising pixels or optional analytics cookies. Hosting services still process technical request information. Authentication uses necessary cookies or tokens; the mobile app stores session credentials using the operating system’s secure storage. Subscription and app-update services use information needed for their functions. Clearing device storage or uninstalling the app does not delete your server account.

Retention and deletion

We retain account and watchlist information while your account is active and as needed to provide the service. Open Account → Delete account in the app to remove your account, sessions, linked sign-in records, watchlist, and membership records, and request deletion of your RevenueCat customer record. We revoke Apple sign-in authorization when the necessary authorization is available. For older accounts without it, we provide instructions to remove Apple access manually; this does not prevent deletion of your Breakpoint account. Some service-provider deletion work may finish asynchronously.

Subscription cancellation is separate from account deletion. Apple, Google, and payment providers may retain transaction records under their own policies and legal obligations. Backups and operational logs may persist until they expire under the applicable provider’s retention settings. We may retain limited records needed for legal obligations, security, disputes, or demonstrating how a request was handled; we do not use those records to restore a deleted account.

If you cannot use the app, follow the account-deletion link below. You may request deletion of particular information without closing your account by contacting us; removing information necessary for a feature may prevent us from providing that feature.

Your choices and rights

You can update your name in Account and add or remove watchlist entries in the app. Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, withdraw consent, or appeal a privacy-request decision. Contact admin@breakpointfinance.com to exercise a right or appeal a response. We may verify account ownership before acting; never send your password. We will not discriminate against you for exercising an applicable privacy right.

Where European or UK data-protection law applies, processing may rely on providing a requested service or contract, legitimate interests in operating and securing the service, legal obligations, or consent where required. You may complain to your local data-protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

International processing and security

We and our providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. Where required, transfers must use appropriate legal safeguards. We use measures such as encrypted connections, restricted access, password hashing, and secure device storage to help protect information. No system can guarantee absolute security.

Children and younger users

Breakpoint accounts are for people age 13 or older, or the higher minimum age required to consent to personal-data processing where they live. The service is not directed to children under that age, and we do not knowingly collect their personal information. We do not offer a parental-consent verification flow. If you believe a child below the applicable minimum age has provided information, contact us so we can investigate and delete it.

External links and changes

Linked news sources and third-party sites have their own privacy practices. We may update this policy as the service changes, revise the effective date, and provide additional notice or obtain consent where required for a material change.