Privacy Policy

What we never collect

We do not collect your location, your contacts, your photo library, your payment details, or your organization’s legal registration (EIN, UEI or SAM.gov).

The app has no advertising and no third-party analytics or tracking SDKs, does not use the advertising identifier, and we do not track you across other apps or websites. We do not sell or share your personal information.

Optional details you add

Profile: a name, an organization and a photo, to personalize the app. The photo you pick is cropped, resized and re-encoded on our server, which removes its metadata such as location; only the picture is kept.

Sharing signature (Pro and Pro+): a name, title, organization, email, phone number and website. We add them to the end of the opportunities you choose to share, so the person who receives them knows they came from you.

Sign in with Apple: if you use it, we receive and keep only the anonymous identifier Apple gives us for this app, to recognize your account on another iPhone. We do not ask Apple for your name or email.

These details are stored on our server with your account and are deleted with it. They are never sent to AI models and never used in usage data.

What we keep on our server

A random account identifier created on your device (stored in the iOS Keychain) and sent with each request.

Your plan (Free, Pro or Pro+), your time zone (to send alerts in the morning, your time) and, if you allow notifications, a notification token for this device.

What you set up in the app: each profile’s organization type, the name you give it and its filters; the topics you write; the opportunities you save, hide or mark as read; the folders you create; and the alerts we prepare for you.

When the account was created and when it was last used.

Only if you agree to share usage data (we ask when you set up the app, and you can change it anytime in Settings > Privacy), anonymous usage events: when the app opens and how long it stays open, which screens are viewed, actions such as opening, saving, sharing or hiding an opportunity and how they were done (swipe, menu, button), how many letters a search had and how many results it gave (never what you typed), notifications opened, and errors, together with the app and iOS versions. They are kept for up to 400 days.

Changes of plan (Free, Pro or Pro+), to know how many people subscribe or cancel, and server errors, without any data from the request.

Like any web service, our server writes technical logs with the IP address and time of each request. We use them only for security and to fix errors, and keep them for 30 days.

How we use it

To run the app: to match federal opportunities to your profiles and topics, to show your lists, to send the alerts and weekly summary you asked for, and to apply the limits of your plan.

Usage events are used only in aggregate, by us, to understand how the app is used, which features help, and to find and fix errors. They are never used for advertising or to track you elsewhere.

To find and check matches, the text of your topics and your organization type are sent to our AI provider, DeepInfra, Inc. (United States), which runs the AI models for us and, under its terms, does not store this data or use it to train models. We tell you this when you choose your topics. Profile and folder names, your personal details and usage data are never sent to the AI models. Summaries are written from the public Grants.gov listings.

What stays on your device

Deadline reminders are scheduled as local notifications on your iPhone and never reach our server. Your theme choice and a few display preferences are also stored only on the device.

Our website and launch list

Our website, littlehand.app, is hosted by Cloudflare, Inc. It sets no cookies and has no advertising or tracking. We count visits with Cloudflare Web Analytics, which does not use cookies and does not identify you. Like any website, Cloudflare processes your IP address to deliver the pages and protect them from attacks.

Launch list: until LittleHand is available on the App Store, you can leave your email address on the website. We keep only the address, the page you signed up from and when, and we use it once, to email you when LittleHand is available; then we delete the whole list. If that has not happened within 12 months, your address is deleted anyway. We process it because you asked us to (your consent), and you can withdraw it at any time by writing to us. It is stored on our server, is never shared or sold, and is not linked to any app account.

Who else processes it

Our server is hosted by Render Services, Inc., on servers in the United States, and our website by Cloudflare, Inc. Apple processes payments for subscriptions, delivers notifications and runs Sign in with Apple; we receive only whether your subscription is active, never your payment details. Subscription status is also managed through RevenueCat, which receives your anonymous account identifier and your purchases. We disclose data to authorities only when the law requires it.

How long we keep it

Until you delete your account. Deleting it in the app (Account > Delete my account and data) removes your profiles, topics, matches, saved opportunities, folders, alerts, profile details, photo and signature from our server at once, and disconnects Sign in with Apple. Copies in backups are overwritten within 7 days.

Your rights

You can see and change your profile, signature and settings in the app, and delete all of your data at any time. You can turn off usage data in Settings > Privacy; doing so also deletes the usage events already collected. Depending on where you live (for example under the GDPR in the EU and UK, or state laws such as California’s), you may also have the right to access, correct, export or delete your data, and to object to its use.

We process your data because it is needed to provide the service you asked for. To exercise your rights, write to us; we may ask for your account identifier to find your data. You can also complain to your data protection authority.

California and other U.S. states

In the last 12 months we have collected these categories of personal information, all from you and only to provide and improve the app: identifiers (the account identifier, the Apple identifier if you Sign in with Apple, and the notification token); contact details you choose to add (name, title, organization, email, phone number, website); a photo you choose to add; your email address, if you join the launch list on our website; and app activity (usage events, if “Share usage data” is on). We do not collect sensitive personal information.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so. We keep each category only as long as described above.

California residents, and residents of other states with similar laws, can ask to know, correct or delete their personal information, and will not be treated differently for doing so. You can delete everything yourself in the app, or write to us; an authorized agent can also make a request on your behalf.

Children

LittleHand is meant for organizations and professionals. It is not directed to children, and we do not knowingly collect data from them.

Changes and contact

If we change this policy in an important way, we will tell you in the app before it applies.

Saturnino José González Aguilera, C/ Dámaso Alonso 17, 04009 Almería, Spain. Email: [email protected].