Data Protection and GDPR

This page supplements our Privacy Policy. Where a data protection regime applies to you — such as the GDPR in the European Economic Area, the UK GDPR, or India's Digital Personal Data Protection Act — the rights described below apply to your personal data, and we will honour them regardless of where you are located.

We have chosen to extend the same rights to every user rather than only to those who can legally demand them.

breakoutstructure.com is responsible for the personal data described here. All data protection enquiries, including requests to exercise your rights, go to support@breakoutstructure.com, and we aim to acknowledge them within 4 hours.

We have not appointed a Data Protection Officer and have not appointed an EU or UK representative. We are stating that plainly rather than implying a function that does not exist.

• Identity and contact data — name, email address.
• Account and authentication data — credentials, session records.
• Subscription data — plan and status. Payment details are handled by Apple or Google and never reach us.
• Product configuration data — instruments, markets, timeframes, alert rules and the risk value you set.
• Usage data — features used, actions taken, timestamps.
• Technical data — IP address, device and operating system information, app version.
• Communications data — support messages and correspondence.

We do not process special category data, we do not collect broker or exchange credentials, and the website itself collects nothing at all.

• Providing the Service and managing your account — contract.
• Verifying subscription status with the app store — contract.
• Security, debugging and service improvement — legitimate interests.
• Service and security messages — contract.
• Responding to support requests — contract.
• Accounting, tax and legal record-keeping — legal obligation.

We rely on consent for nothing at present, because we send no marketing and set no non-essential cookies. If that changes we will ask for consent before it does.

We retain personal data only as long as necessary for the purpose it was collected for. Account, configuration and usage data is retained while your account is active. On account closure we delete or anonymise it, other than records we must keep to satisfy a legal or tax obligation, or to establish, exercise or defend a legal claim.

Support correspondence is retained for as long as needed to handle the matter and any follow-up arising from it.

Access

You can request confirmation of whether we process your data and a copy of it.

Rectification

You can ask us to correct data that is inaccurate or incomplete.

Erasure

You can ask us to delete your data where it is no longer necessary, where you withdraw consent, or where you object and no overriding ground applies.

Portability

Where processing is based on consent or contract and carried out by automated means, you can receive your data in a structured, commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible.

Objection and restriction

You can object to processing based on legitimate interests, and ask us to restrict processing while an objection or an accuracy dispute is resolved.

Withdrawing consent

Where processing relies on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it.

Complaint

You can complain to your local data protection supervisory authority. We would appreciate the chance to address the matter first at support@breakoutstructure.com.

Email support@breakoutstructure.com from the address on your account. We may need to verify your identity before acting. We aim to acknowledge within 4 hours and to complete the request within the period required by the law that applies to you — one month under the GDPR, extendable by two further months for complex requests, in which case we will tell you. There is normally no charge.

The infrastructure we use may process personal data in countries other than your own. Where data is transferred out of a jurisdiction that restricts such transfers, we rely on an appropriate safeguard recognised under that jurisdiction's law, such as standard contractual clauses or an adequacy decision.

You can request details of the transfers relevant to your data at support@breakoutstructure.com.

We use third parties to process personal data on our behalf under terms that restrict their use of it. They fall into these categories:

• App distribution and payment processing — Apple and Google.
• Hosting and infrastructure — for the website, the application backend and its databases.
• Message and notification delivery.
• Customer support tooling.

A current list naming each provider is available on request at support@breakoutstructure.com. We will give notice of material changes.

The website sets no cookies and runs no tracking. There is nothing to consent to. See our Cookie Policy.

Traffic is encrypted in transit using TLS, and access to systems holding personal data is restricted to those who need it to operate the Service.

Where a personal data breach occurs and applicable law requires notification, we will notify the relevant supervisory authority and, where the risk to you is high, notify you directly, within the timeframes that law sets.

support@breakoutstructure.com