Privacy policy

Grant Lookout is published by Velocity Labs. It stores what it needs to work: your email address, the name you choose, and the searches, saved opportunities and notes you create. It has no advertising, no analytics trackers, and it does not sell or rent your information to anyone. You can delete your account and everything in it at any time.

You can browse and search without an account. If you sign in, we store:

• Your email address, which is how you sign in. We send a one-time code to it; there is no password.
• Your name. A made-up name is given to you when you sign up, and you can change it. Members of an organization you join see it.
• Your notification settings: which alerts you want, your quiet hours, and your time zone, which is used to keep to those hours.
• What you create: saved searches, saved opportunities with their status, and notes.
• Organizations you create or join, who their members are, and invitations you send, which hold the email address you invited.
• A push token for each phone on which you turn notifications on. It lets us send alerts to that phone and identifies nothing else about it.
• The alerts we have sent you, so the app can show them in its inbox.

We do not ask for or store your location, contacts, photos, payment details or any health information.

If you join an organization, its members can see your name, the opportunities saved to that organization, and the notes written on them, signed with the author's name. Owners of the organization can see members' email addresses in full; other members see them partly hidden. An owner's own address is shown in full to every member, so that members know who to ask. Your own saved searches, saves and notes are visible only to you.

A small number of people at Velocity Labs are administrators of Grant Lookout. Their administration pages show totals, such as how many accounts and saved searches exist, with no names or addresses.

To answer a support request, an administrator can look up one account by its exact email address. They then see that address, your name, when you signed up and last signed in, how many saved searches, saved opportunities, registered phones and recent alerts the account has, and the names of your organizations with your role in each. Those pages do not show the contents of your saved searches, saved opportunities or notes, and there is no list of accounts to browse.

From that page an administrator can send a test alert to your phones, to check that alerts are reaching you, can delete your account if you ask us to, and can suspend an account that is being used to abuse the service or other people. A suspended account cannot sign in or be used, and what it holds is kept until the suspension is lifted or the account is deleted. Each lookup and each of these actions is recorded with who made it; the record holds no email address.

An administrator can also search for an organization by its name or part of it. The search shows the names of up to twenty organizations that match, with when each was created and how many members it has. Opening one of them shows how many opportunities are saved to it, how many invitations are waiting, and its members: each one's name, email address, role and joining date. They do not see the opportunities it has saved or the notes on them. When an organization needs help, for example because its only owner cannot be reached, an administrator can remove a member, make a member an owner, or delete the organization. These searches and actions are recorded in the same way.

The people who maintain the service can technically reach what is stored in its database. We do that only when it is needed to fix a problem.

We use a small number of outside services to run the app. Each receives only what its job needs:

• Supabase hosts the database and sign-in, in the United States.
• Resend delivers the sign-in codes and organization invitations we email.
• Expo, and through it Apple and Google, deliver push notifications. They receive your phone's push token and the text of the alert.
• Anthropic provides the AI model that writes summaries of funding notices. It receives the public text of the notice and its listing, and nothing about you: not your name, your email, your searches or your notes. We use a paid service whose terms do not allow it to train its models on what we send.

Like any service on the internet, the computers that run the app and this website receive your device's IP address with each request and keep it for a time in their logs, along with the time and what was asked for. We use those logs only to keep the service running and to investigate misuse.

The opportunities shown in the app are public information published by the US government through Simpler.Grants.gov. They are not about you, and viewing one is not recorded against your account.

This website uses a cookie only to keep you signed in after you sign in here. It sets no advertising or tracking cookies.

You can delete your account from the Account tab in the app or from your account page on this website. Deletion is immediate and removes your profile, saved searches, saved opportunities, notes, push tokens and alerts. An organization you are the only member of is deleted too. Opportunities and notes you added to an organization that still has other members stay with that organization, no longer marked as yours.

Grant Lookout is offered in the United States, to adults looking for funding on behalf of themselves or an organization. It is not directed to children under 13, and we do not knowingly collect information from them.

If this policy changes in a way that matters, we will change the date at the top. Questions, or a request about your information, can be sent to hello@grantlookout.app.