Privacy Policy
Breadcrumbs Mobile
Version 1.4 | Effective Date: October 22, 2026
Introduction
Breadcrumbs Mobile ("the App") and its associated website (the "Map Viewer") is developed and operated by Extensible Labs LLC ("we", "us", "our", "Company"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the App.
By using the App, you agree to the collection and use of information as described in this policy. This policy applies to all users worldwide and is designed to comply with data protection laws including the EU General Data Protection Regulation (GDPR) and similar privacy frameworks.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us using our support form.
Information We Collect
Information You Provide
- Account Information — Your Apple ID display name and email address (used for Sign in with Apple authentication and account identification)
- Recipient Contact Information — Names, phone numbers, and email addresses of people you configure to receive your status messages. Your recipient list is stored on your device. If you use One-Tap messages (Pro), each message's recipients are sent to our server so it can deliver the message; we do not store their full phone numbers or email addresses, but we keep a delivery record containing each recipient's name and a masked number or address (for example, •••1234).
- Custom Messages — Any custom messages you configure for status buttons (OK, Help, SOS, or user-defined buttons) These are stored only on your device, not on our servers.
- Preferences — Your unit preferences (speed: knots/mph/m/s, altitude: feet/meters), tracking interval, enabled buttons, and other app settings
Information Collected Automatically
Roughly speaking, if information appears on your track map, we have collected it automatically.
- GPS Location Data ("breadcrumbs") — Latitude, longitude, altitude, heading, speed, and accuracy. Collected when you press a status button or when auto-tracking is enabled.
- Timestamps — The date and time of each breadcrumb or status message
- Device Information — Device platform (iOS/Android) and unique app session identifier
- Auto-Track Session ID — A unique identifier grouping breadcrumbs within a single auto-tracking session (used for map generation)
- Message Type and Content — The type of message sent (ok, help, sos, autotrack, etc.) and any custom message text.
Diagnostic Information
- On-device diagnostic log — The App keeps a diagnostic log on your device, including crash and performance reports that iOS provides to the App (Apple MetricKit). This log is not sent to us automatically. If you choose to send it using "Send Logs" in Settings, it is encrypted and attached to an email that you send from your own mail account. It may contain your name and email address, recent locations, device and network details, subscription status, and a record of App activity. We use it only to diagnose and fix problems you report.
- Apple crash reports — If you have chosen in your device settings to share analytics with app developers, Apple may provide us with crash reports for the App. Apple controls this sharing; see Apple's Privacy Policy.
We do not use third-party analytics, advertising, or crash-reporting services, and we do not track you across other companies' apps or websites.
How We Use Your Information
Breadcrumb Tracking and Map Generation
Data collected: Location (latitude, longitude, altitude, heading, speed, accuracy), timestamps, device platform, auto-track session ID, message type.
Purpose: To store your location data on our server, generate interactive maps showing your tracked routes, and enable historical map viewing.
Legal ground: Performance of contract (you are using a location tracking service). For users in the EEA, UK, or similar GDPR-equivalent jurisdictions, we also rely on legitimate interest in providing you the location tracking and mapping services you have requested.
Status Messages (OK, Help, SOS, Custom Buttons)
Data collected: Location, timestamp, message type, custom message content (if provided), your name.
Purpose: To send status messages to your configured recipients (via SMS or email), record status events on our server, and facilitate emergency communication. With One-Tap messages (Pro), our server sends the messages for you: SMS through Twilio and email from our mail server. Recipient names, phone numbers, and email addresses are used only to deliver that message.
Legal ground: Performance of contract (core feature you are using). For emergency-related messages, we also rely on legitimate interest in facilitating emergency communication and search and rescue operations.
to be clear, we do not guarantee or warrant any emergency services.
Auto-Tracking
Data collected: Location, timestamps, at intervals configured by you (1 to 120 minutes), device platform.
Purpose: To continuously record your location while auto-tracking is enabled, with no messages sent to recipients. Data is stored on our server for map viewing and analysis.
Legal ground: Consent. You must explicitly enable auto-tracking, and you can disable it at any time.
Third-Party Service Providers
We use the following third-party services to deliver the App:
Authentication and Account Services
- Apple Sign in with Apple — We use Apple's Sign in with Apple for authentication. Your Apple ID information (name, email) is processed by Apple. See Apple's Privacy Policy for details on how Apple handles your data.
App Store and Subscriptions
- Apple App Store (StoreKit) — The App is distributed through the Apple App Store, and Pro subscriptions are sold and managed by Apple through Apple's In-App Purchase / StoreKit system. Apple processes your purchase and handles billing, renewals, and cancellations; we do not receive or store your payment card details. We receive subscription status (active/inactive) to enable Pro features. You manage or cancel your subscription through your Apple ID account settings in the App Store, not through us. See Apple's Privacy Policy for details on how Apple handles purchase data.
- RevenueCat — We use RevenueCat to validate purchases and manage subscription status. RevenueCat receives your account identifier (the anonymous identifier assigned by Sign in with Apple), your purchase and subscription history from Apple, and basic device information (such as device model, operating system version, and IP address). RevenueCat reports subscription status to our server. It does not receive your location data or breadcrumbs. See RevenueCat's Privacy Policy.
Messaging Services
- Twilio — SMS messages pass through Twilio in two cases: (1) when SMS fallback is enabled and used (e.g., on satellite networks), your device texts breadcrumb data to our Twilio number, and Twilio receives your phone number and the SMS body (location, timestamp, message); and (2) when you use One-Tap messages (Pro), our server sends your status message to your recipients through Twilio, and Twilio receives the recipients' phone numbers and the message text (which may include your name and location). Twilio uses this data to deliver the messages. See Twilio's Privacy Policy for details on SMS handling and retention.
- Native iOS/Android Messaging — When you do not use One-Tap messages, SMS and email messages to recipients are composed in, and sent by, your device's own SMS and email apps. These messages do not pass through our servers or Twilio.
App Updates
- Expo (EAS Update) — The App checks Expo's update service for software updates when it starts. These requests include your IP address and technical details about the App and device (such as App version, update channel, and platform), but no account, location, or breadcrumb data. See Expo's Privacy Policy.
Weather Data (Pro)
- When you request weather or winds aloft information, our server sends the relevant coordinates or airport identifiers to public weather data providers (Open-Meteo, the U.S. National Weather Service at weather.gov, and aviationweather.gov) to retrieve forecasts and observations. These requests come from our server, not your device, and do not include your name, account, or other identifying information.
Server Infrastructure
- Breadcrumb data is stored on our own database server running on premises in the United States.
Data Storage and Security
- Breadcrumb data (location, timestamps, messages) is stored on our server in a database located in the United States.
- Your app settings and locally-configured recipient lists are stored only on your device using device encryption, not on our servers.
- We use HTTPS for all communications between the App and our server to encrypt data in transit.
- Failed breadcrumb sends are queued locally on your device and retried automatically; queued data is not sent to third parties.
Data Retention and Deletion
Core (Free) Tier Users
Automatic deletion no earlier than 2 months: All breadcrumbs and status messages are
automatically deleted from our server no earlier than 2 months after the date they were received, regardless of account activity.
Request earlier deletion: Core (free) users may request deletion of their data at any time before the 2-month window expires by
using the "Delete Account" feature in the App or by
submitting a request via our support form.
We will process support-form deletion requests within 30 days.
Data download: Core (free) users cannot use a self-service portal
but may request a copy of their undeleted, stored data by contacting us.
Pro Tier Users
Retention while subscribed: Breadcrumbs and status messages are retained as long as your subscription remains active, enabling historical map viewing and analysis.
Automatic deletion after inactivity: If your Pro subscription is inactive for 2 or more years, all associated breadcrumbs and status messages will be automatically deleted.
Data management: Pro users can access, export, and delete their data via account
management features in the App and the Map Viewer, or by contacting us for assistance.
Data deletion: Pro users may request deletion of their data at any time before the 2-month window expires by
using the "Delete Account" feature in the App or by submitting a request via our support form. We will process support-form deletion requests within 30 days
Account Deletion
Deleting your App account via the mobile device operating system or signing out will not immediately delete stored breadcrumbs - breadcrumbs continue to be managed under the retention schedule above.
For immediate deletion, use the Delete Account button in the App, or contact us via our support form.
Note that Delete Account and signing out remove your data from our servers and clear your sign-in credentials from the device, but data stored only on your device — your recipient contact lists, custom button messages, and app preferences — remains on the device. To remove that local data, uninstall the App.
Your Data Rights
You have the right to:
- Access your data: Request a copy of all personal data we have stored about you
- Delete your data: Request deletion of your breadcrumbs and status messages at any time (Core/free users within the 2-month window, Pro users anytime during subscription or after request)
- Control collection: Disable auto-tracking or stop pressing status buttons to prevent future data collection. You control when and whether data is sent.
- Revoke permissions: Revoke location permissions for the App through your device settings at any time
- Data portability: Request that we export your breadcrumb data in a portable format
To exercise any of these rights, submit a request via our support form. Please specify your request type (Data Access, Data Deletion, Data Export, etc.) and include your Apple account email for verification. We will respond to your request within 30 days.
Information Sharing
We do not sell, trade, or rent your personal information to third parties or use it for marketing purposes.
Your information may be shared in the following limited circumstances:
- Recipients you choose: Status messages (SMS and email) are sent to contacts you configure in the App.
- Twilio: SMS fallback messages and One-Tap SMS messages pass through Twilio for delivery, as described under "Messaging Services" above.
- Service providers: The providers described under "Third-Party Service Providers" above (such as RevenueCat for subscriptions) receive only the data described there, and only to provide their services to us.
- Emergency situations: In the event of an emergency, we may disclose your location and emergency information to search and rescue authorities or emergency responders if doing so could assist in your safety.
We do not guarantee or warrant notification of any emergency services.
- Legal requirements: We may disclose information if required by law, court order, or government request, or to protect the safety or rights of users or the public.
- Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will provide notice if this occurs.
Children's Privacy
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that personal data has been collected from a child under 13, we will take steps to delete the information and terminate the child's account.
International Data Transfers
The App is operated in the United States. Your personal data is collected and stored on servers located in the United States. If you are accessing the App from outside the United States (including the EEA, UK, or Switzerland), you acknowledge that your data will be transferred to, stored in, and processed in the United States, which may have different data protection laws than your country of residence.
By using the App, you consent to the transfer, storage, and processing of your data in the United States in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page and post the updated policy on this website.
We will also notify you in the App: when the policy version or effective date changes, the App presents the updated Terms of Use and Privacy Policy on next launch and asks you to acknowledge them before you continue. This in-App notification applies to all users, both Core (free) and Pro. Your continued use of the App after acknowledging the changes constitutes acceptance of the updated policy.
Data Controller and Contact Information
Extensible Labs LLC
3440 N. Plantation River Dr.
Boise, Idaho, 83714, USA
Support Form: support.php
For data protection inquiries, GDPR requests, or to exercise your data rights, please use the support form above.
Apple, App Store, and Sign in with Apple are trademarks of Apple Inc., registered in the U.S. and other countries. Android and Google Play are trademarks of Google LLC.