Privacy Policy

Effective: August 4, 2026
App: Breakpoint (iOS and Android)
Website: breakpointmaps.com
Operated by: BlueCrest Group, LLC (“BlueCrest,” “we,” “us,” or “our”)

Breakpoint is a fishing intelligence app that provides oceanographic map layers, species hotspot predictions, weather, trip planning, and catch logging. This Privacy Policy explains what information we collect when you use the Breakpoint mobile application (the “App”) or visit our website at breakpointmaps.com (the “Website,” and together with the App, the “Services”), how we use and share it, and the rights and choices available to you. Sections that apply only to the Website (cookies and web analytics) or only to the App are labeled accordingly.

By using the Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App or Website.

1. Information We Collect

1.1 Information you provide to us

• Account information. When you create an account we collect your name, email address, and password. If you sign in with Apple or Google, we receive the name and email address (or private relay email) associated with that account. Authentication is handled through Amazon Cognito; we never see or store your Apple or Google password.
• Profile details. Optional information you add to your profile, such as your home port or unit preferences.
• Fishing activity and content. Trips you plan, waypoints you save, and catches you log — including species, measurements, notes, the date, time, and location of the catch, and any photos you choose to attach. Catch photos are taken or selected only when you initiate it; the App does not access your camera or photo library otherwise.
• Communications. Information you send us when you contact support.

1.2 Information collected automatically

• Precise location. With your permission, we collect your device’s precise GPS location to center the map on your position, record trip routes and waypoints, geotag catches, show weather and marine conditions for your location, and power location-based features. You can use parts of the App without granting location access, but core features will be limited. The App does not track your location in the background when you are not using it.
• Device and technical information. Device model, operating system and version, app version, language, and similar technical identifiers, used for compatibility, support, and fraud prevention.
• Diagnostics and crash data. We use Sentry to collect crash reports and performance diagnostics (error traces, device state at the time of a crash, app version). This helps us find and fix bugs.
• Usage data. Information about how you interact with the App, such as which map layers and features you use, used to improve the product.
• Advertising and analytics identifiers. Mobile device identifiers and related data used for ad-campaign measurement and in-app product analytics — including your advertising identifier (Apple IDFA, collected only if you consent through Apple’s App Tracking Transparency prompt; or Android’s advertising ID), your device’s vendor identifier (IDFV), IP address (used to derive an approximate location such as country or region), install and referral data, in-app events, and a pseudonymous internal account identifier. See Section 5 (“Analytics and Advertising Attribution”) for full detail.
• Map telemetry. Our maps are powered by Mapbox, which may collect limited device and usage telemetry to operate and improve its mapping services, as described in the Mapbox Privacy Policy.

1.3 Purchase information

• Subscriptions. Paid subscriptions are processed by Apple’s App Store or Google Play. We do not receive or store your full payment card details. We use RevenueCat to manage subscription status and entitlements, and receive transaction information such as product purchased, purchase date, renewal status, and an anonymized transaction identifier. RevenueCat also forwards certain subscription events (for example, trial started, subscription renewed or cancelled) to our attribution partner (Adjust) and our product analytics partner (PostHog) — see Section 5.

1.4 Information from third-party services

• Weather data. When you view weather or marine conditions, the coordinates of the requested location are sent to our weather data provider (Vaisala Xweather) to return the forecast. This request is made by the App on your behalf.

1.5 If you visit our website (breakpointmaps.com)

Separately from the App, when you visit breakpointmaps.com we (and our analytics and advertising partners) collect information via cookies and similar technologies, including pages viewed, referral source, approximate location derived from IP address, and device/browser information. See Section 6 for details, including how to control this through our cookie banner.

2. How We Use Your Information

• Provide, operate, and maintain the App and Website — including maps, ocean data layers, hotspot predictions, weather, trip planning, offline downloads, and catch logging;
• Create and manage your account, and authenticate you;
• Process and manage your subscription;
• Sync your trips, waypoints, and catches across your devices;
• Improve the App, including using aggregated and de-identified fishing activity to improve our species prediction models and understand feature usage (see Section 7);
• Measure the performance of our advertising campaigns and attribute app installs and subscriptions to the marketing source that drove them, and understand how people use the App and Website, using the analytics and attribution tools described in Section 5;
• Send you service communications (e.g., account, security, or subscription notices);
• Send you marketing communications, such as product news and feature announcements, where permitted by law — you can opt out at any time (see Section 9);
• Diagnose, fix, and prevent technical issues and abuse;
• Comply with legal obligations and enforce our terms.

3. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

4. How We Share Information

We do not sell your personal information. We do not permit any partner to use your personal information for their own, independent advertising purposes unrelated to Breakpoint. That said, as described in Section 5, we do share certain device and advertising identifiers with our mobile measurement partner (Adjust) and, through Adjust, with the advertising networks that run our ad campaigns (such as Google Ads), so that those networks can measure and report on the performance of our own campaigns. Some privacy laws, including the CCPA, define this kind of campaign measurement broadly enough that it may be considered “sharing” for cross-context behavioral advertising even though we do not consider it a sale and do not allow independent use of the data by those networks — see Section 10.3 for the California-specific disclosure and opt-out. Otherwise, we share information only as follows:

4.1 Service providers

We use a small number of service providers who process data on our behalf under contractual confidentiality and data protection obligations:

4.2 Other circumstances

• Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect rights, safety, or the integrity of our services.
• Business transfers. If BlueCrest is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; this policy will continue to apply, and we will notify you of any material changes.
• With your consent. We may share information for other purposes with your consent.

5. Analytics and Advertising Attribution

This section describes, in one place, the tools we use to measure our marketing and understand product usage, what each collects, why, and the legal basis we rely on. It supplements Sections 1, 3, and 4.

5.1 Ad-campaign attribution (Adjust)

When you install the App after tapping an ad, we use Adjust, a mobile measurement partner, to determine which campaign, ad network, or organic source led to the install, and to measure what you do afterward (such as subscribing) so we can evaluate whether our advertising is working.

• iOS — App Tracking Transparency (ATT). On iOS, Apple requires us to ask for your permission via the ATT system prompt before collecting your IDFA (advertising identifier) or otherwise “tracking” you across apps and websites for advertising purposes. If you tap Allow, Adjust collects your IDFA along with IP address, install time, and in-app events, and shares attribution results with the ad network that served the ad (e.g., Google Ads) so it can measure and optimize the campaign. If you tap Ask App Not to Track (or have not yet responded), we do not collect your IDFA. Instead, attribution relies solely on Apple’s SKAdNetwork or AdAttributionKit frameworks — Apple’s privacy-preserving aggregate attribution frameworks, used automatically and without requiring your consent — which give advertisers only aggregated, privacy-preserving campaign statistics and do not identify individual users or persistently identify your device.
• Android. Android devices have an advertising ID (GPS ADID) that Adjust uses similarly to IDFA, together with IP address and in-app events. You can reset or delete this identifier, or opt out of ads personalization, at any time in your device settings (Section 9.2).
• What is shared with ad networks. Through Adjust, we share campaign-attribution results (for example, “this install/subscription came from campaign X on network Y”) with the ad network that ran the campaign, currently Google Ads, so it can measure and optimize the campaigns we pay for. We do not authorize Adjust or any ad network to use this data for purposes other than measuring and improving the campaigns we run with them.
• Legal basis. Consent, obtained via the ATT prompt (iOS) or equivalent (Android), for identifier-based attribution; SKAdNetwork/AdAttributionKit signals are aggregated and are used regardless of that consent choice.

5.2 In-app product analytics (PostHog)

We use PostHog to understand how people use App features — for example, which map layers, catch-logging flows, or trip-planning tools are used, and where people get stuck. PostHog identifies you using a pseudonymous internal account identifier (not your name, email, or a cross-app advertising identifier) together with in-app events and basic device/app information. RevenueCat also forwards subscription events (e.g., trial started, renewed, cancelled) into PostHog so we can understand how usage relates to subscription behavior.

Legal basis: legitimate interests in understanding and improving the product using a pseudonymous, non-advertising identifier; we rely on consent instead where local law requires it for this kind of analytics.

Hosting region. PostHog is configured on PostHog Cloud in its United States hosting region (PostHog, Inc., United States). See Section 11 for how this affects international data transfers.

5.3 Website analytics and ad measurement (GA4/GTM, Meta Pixel)

On breakpointmaps.com, we use Google Analytics 4 (GA4) and Google Tag Manager (GTM) to understand site traffic and, for visitors who arrive via a Google Ads campaign, to measure that campaign’s performance. These tools use cookies and operate under a consent banner as described in Section 6. GA4/GTM are not used inside the App.

We also use the Meta Pixel and Meta’s Conversions API to measure our Facebook and Instagram advertising. With your consent, the pixel records page views and clicks on the App Store and Google Play buttons and sends them to Meta Platforms, Inc. together with the Meta cookies (_fbp, _fbc). Our own server forwards the same events to Meta through the Conversions API, with any identifiers hashed before sending and each event carrying an id so that Meta counts it once even when both routes deliver it. This lets Meta attribute app installs and sign-ups to the ads that brought you here and improve how those ads are delivered. Neither the pixel nor the Conversions API is used inside the App, and neither runs until you accept advertising cookies in the banner (Section 6). You can withdraw consent at any time via “Cookie Preferences” in the footer, and you can manage how Meta uses data from other websites in your Facebook settings under “Your activity off Meta technologies”.

5.4 Your controls

• In-app Privacy Choices. A “Privacy Choices” setting in App Settings, rolling out in an upcoming app update, will let you turn off Adjust’s collection of your advertising identifier for attribution purposes directly from within the App. Until it ships, the iOS and Android controls below accomplish the same result today.
• iOS App Tracking Transparency. Change your choice anytime in Settings > Privacy & Security > Tracking.
• Android advertising ID. Reset or delete your advertising ID, or opt out of ads personalization, in Settings > Privacy > Ads (path varies by Android version and manufacturer).
• Website cookies and Global Privacy Control. Use the “Cookie Preferences” link in the Website footer, or your browser’s cookie controls, to change your choice (Section 6). If your browser or a browser extension sends the Global Privacy Control (GPC) signal, breakpointmaps.com automatically treats it as an opt-out request (Section 6).
• California residents. See Section 10.3 for the “Do Not Sell or Share” disclosure and opt-out.

6. Cookies and Similar Technologies (Website)

This section applies only to breakpointmaps.com. The App does not use browser cookies (mobile identifiers used in the App are described in Section 5).

Consent banner and Google Consent Mode v2. On your first visit, a cookie banner lets you Accept All, Reject Non-Essential, or manage preferences by category. Until you consent, GA4 and GTM run in Google Consent Mode v2’s “denied” state, meaning no analytics or advertising cookie is set and, where applicable, only limited, cookieless signals are sent to Google for basic modeling purposes, and the Meta Pixel and Conversions API do not run at all. If you reject or later withdraw consent, we stop setting the corresponding cookies going forward (this does not retroactively delete signals already sent to Google before you changed your choice).

Changing your choice. Reopen your preferences at any time using the “Cookie Preferences” link in the Website footer, or block/delete cookies through your browser settings. You can also install Google’s Analytics Opt-out Browser Add-on.

Do Not Track / Global Privacy Control. Browsers do not consistently implement “Do Not Track,” and we do not respond to it. We do honor the Global Privacy Control (GPC) signal on the Website: if your browser or a browser extension sends GPC and you have not already made an explicit cookie choice of your own, we automatically treat it as a request to opt out of the “sale” or “sharing” of your personal information under the CCPA and keep analytics and advertising cookies off — the same result as clicking “Reject Non-Essential” in the cookie banner. The banner remains available afterward so you can still make an explicit choice, including opting in, at any time using “Cookie Preferences” in the footer; an explicit choice you make always overrides the GPC default. See Section 10.3 for the California-specific disclosure.

7. Aggregated and De-Identified Data

We may aggregate or de-identify fishing activity data (for example, catch logs and feature usage) so that it can no longer reasonably be linked to you, and use that data to improve our species prediction models, develop new features, and for research and analytics. We may also publish or share insights derived from such aggregated data (for example, regional catch trends). We commit to maintaining such data in de-identified form and will not attempt to re-identify it.

8. Data Retention

• Account and content data (profile, trips, waypoints, catches, photos) is retained while your account is active, and deleted when you delete your account (see Section 9), except where retention is required by law.
• Purchase records are retained as needed for tax, accounting, and legal compliance.
• Crash and diagnostic data is retained for a limited period (typically 90 days) and then deleted or anonymized.
• Attribution data (Adjust) is retained per Adjust’s standard retention schedule for the purpose of campaign reporting, and is then deleted or aggregated. See Adjust’s privacy policy for specifics.
• Product analytics data (PostHog) is retained while your account remains active, and is deleted upon request when you delete your account (see Section 9).
• Website analytics data (GA4) is retained for 14 months, consistent with the retention setting configured in our GA4 property.
• Aggregated/de-identified data (Section 7) is not subject to deletion because it does not identify you.

9. Account Deletion and Your Choices

9.1 Deleting your account

You can delete your Breakpoint account at any time, directly in the App:

1. Open the App and go to Settings;
2. Tap Delete Account and confirm.

This permanently deletes your account and associated personal data (profile, trips, waypoints, catches, and photos) from our systems, subject to the retention exceptions in Section 8. If you cannot access the App, you can request deletion by emailing privacy@bluecrestgroup.com from the email address on your account, and we will complete the deletion within 30 days.

Deletion propagation. When you delete your account, we also send a deletion request for your associated data to Adjust and PostHog, identified by the internal identifiers those services use for you, within the same 30-day window. Two limitations apply: (1) aggregated, campaign-level attribution results already reported to an ad network (e.g., Google Ads) before your deletion cannot be retracted from that network’s own systems, since they no longer identify you individually; and (2) SKAdNetwork/AdAttributionKit signals were never linked to your identity in the first place and are not affected by deletion.

Note: deleting your account does not cancel an active subscription — manage subscriptions through your Apple App Store or Google Play account settings.

9.2 Your choices

• Location. You can grant or revoke location permission in your device settings at any time.
• Photos/camera. Camera and photo access is only used when you attach a photo to a catch; you can revoke these permissions in device settings.
• Privacy Choices (App). A “Privacy Choices” setting in App Settings, rolling out in an upcoming app update, will let you disable Adjust’s collection of your advertising identifier directly from within the App.
• Ad tracking (iOS). Manage or change your App Tracking Transparency permission anytime in Settings > Privacy & Security > Tracking. Turning this off (or leaving it off) means Adjust does not collect your IDFA, and attribution relies only on aggregated SKAdNetwork/AdAttributionKit signals.
• Ad tracking (Android). Reset or delete your advertising ID, or opt out of ads personalization, in Settings > Privacy > Ads.
• Website cookies and Global Privacy Control. Use the “Cookie Preferences” link in the breakpointmaps.com footer to accept, reject, or change your choice for analytics and advertising cookies at any time (Section 6). The Website also automatically honors the Global Privacy Control (GPC) browser signal as an opt-out where you have not made an explicit choice of your own.
• Marketing emails. You can opt out by using the unsubscribe link in any marketing email or by contacting us. We will still send essential service communications.

10. Your Privacy Rights

10.1 All users

Regardless of where you live, you may contact us at privacy@bluecrestgroup.com to request access to, correction of, or deletion of your personal information.

10.2 European Economic Area, United Kingdom, and Switzerland

You have the right to: access your personal data; rectify inaccurate data; erase your data; restrict or object to processing (including processing based on legitimate interests); data portability; and withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

10.3 California (CCPA/CPRA)

California residents have the right to: know what personal information we collect, use, and disclose; access and receive a copy of it; correct inaccurate information; delete it; and not be discriminated against for exercising these rights.

We do not sell personal information. We also do not permit any advertising partner to use your personal information for its own independent advertising purposes. However, as described in Section 5, we share device advertising identifiers with Adjust and, through Adjust, with the ad networks running our campaigns (currently Google Ads), so those networks can measure and optimize the campaigns we run — this may fall within the CCPA’s broader definition of “sharing” for cross-context behavioral advertising, even though we do not consider it a sale. If you are a California resident, you can opt out of this sharing using any of the following:

• In the App. Use the “Privacy Choices” setting in App Settings (rolling out in an upcoming app update) to disable Adjust’s collection of your advertising identifier for attribution purposes. Until that setting ships, declining Apple’s App Tracking Transparency prompt (iOS) or resetting/limiting your advertising ID (Android) accomplishes the same opt-out today — see Section 9.2.
• On the Website — cookie banner. Decline analytics and advertising cookies using the cookie banner shown on your first visit, or reopen your choice anytime with the “Cookie Preferences” link in the footer (Section 6).
• On the Website — Global Privacy Control. If your browser or a browser extension sends the GPC signal, breakpointmaps.com automatically treats it as this opt-out request and keeps analytics and advertising cookies off, without requiring you to interact with the cookie banner (Section 6).

We do not use or disclose sensitive personal information (such as precise location) for purposes other than providing the services you request. You may exercise your rights, or authorize an agent to do so, by emailing privacy@bluecrestgroup.com. We will verify requests using your account email address.

10.4 Other US states

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, and Texas) have similar rights of access, correction, deletion, and portability, and the right to appeal a refusal, all exercisable through the contact above. Several of these laws also give residents the right to opt out of “targeted advertising” of the kind described in Section 5; the same controls described in Section 10.3 apply.

11. International Data Transfers

We are based in the United States and process data on servers located in the United States. If you use the Services from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country. Where required for transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework certifications of our service providers.

Note on new partners: Adjust GmbH is based in Germany; depending on configuration, attribution data may be processed in the EU, the US, or both. PostHog is configured on PostHog Cloud in its United States hosting region (PostHog, Inc., United States), so PostHog processes our data in the US (see Section 5.2). Google (GA4/GTM/Google Ads) processes data under its own global infrastructure and transfer mechanisms.

EU/UK representative. BlueCrest’s Services primarily target users in the United States. We have not designated a representative under Article 27 of the GDPR (or the equivalent UK GDPR provision) at this time. If our EEA/UK user base grows such that a representative becomes required, we will designate one and update this section, and Section 15 (“Contact Us”), with their contact details.

12. Data Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) for all communication between the App and our servers, managed authentication through Amazon Cognito, access controls, and least-privilege infrastructure practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s Privacy

The App and Website are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal information from children, including through Adjust, PostHog, or GA4/GTM. If you believe a child has provided us personal information, contact us and we will delete it promptly.

14. Changes to This Policy

October 26, 2026 update. This version adds one Website data partner, Meta Platforms, Inc. (Meta Pixel and Conversions API, used to measure our Facebook and Instagram advertising, consent-gated, Website only), in Sections 3, 4.1, 5.3 and 6. Nothing changed for the App.

August 4, 2026 update. This version extends the policy from covering the App alone to also cover the breakpointmaps.com Website, and adds three data partners: Adjust GmbH (install and ad-campaign attribution), PostHog, Inc. (in-app product analytics, hosted in PostHog Cloud’s United States region), and Google Analytics 4 / Google Tag Manager (website analytics and advertising cookies). It also updates the advertising-sharing statements in Sections 4 and 10.3 to reflect that attribution data is shared with ad networks for campaign measurement, adds the Website’s cookie-consent banner and Global Privacy Control handling (Section 6), and adds the in-app “Privacy Choices” setting and the related California opt-out controls (Sections 5.4, 9.2, and 10.3). The version of this policy previously effective July 9, 2026 covered the App only and did not include these partners or controls.

We may update this Privacy Policy from time to time, including as our analytics, attribution, and advertising tools change. If we make material changes, we will notify you through the App or by email before the changes take effect, and update the effective date at the top of this page. Your continued use of the App or Website after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

BlueCrest Group, LLC
Email: support@bluecrestgroup.com

If you have an unresolved privacy concern that we have not addressed satisfactorily, you may contact your local data protection authority.