Graywing Labs

Harrier privacy policy.

Last updated October 19, 2026. Applies to the Harrier iOS app (listed as "Harrier: GovCon Opportunities").

The short version

Harrier needs an account so your bid profile and saved opportunities follow you between devices. We store that profile, the notices you save or dismiss, and the sign-in email you give us. Nothing else. No analytics SDKs, no ads, no selling or sharing of your data, and no tracking across other apps or sites.

Not affiliated with the government

Harrier is an independent product of Graywing Labs (a division of Harrison Federal LLC). It is not affiliated with, endorsed by, or connected to SAM.gov, the General Services Administration, or any federal agency. Opportunity notices shown in the app come from the public data SAM.gov publishes; the app itself never signs you in to SAM.gov or acts on your behalf there.

Your account

You sign in with Sign in with Apple or an emailed link. Either way we store one email address for your account. With Sign in with Apple you can choose "Hide My Email," and we then only ever see the private relay address Apple creates for you. We never see your Apple password.

What the app stores on our servers

  • Your bid profile: the NAICS codes, set-asides, keywords, agencies, places of performance, notice types, contract value range, and due-date window you choose. This is what the matching runs on.
  • Your decisions: which notices you saved, dismissed, or opened. Saves and dismisses also tune your feed ("Learned from your swipes"). You can mute or reset that learning in Profile at any time.
  • Partners you bookmark: the firm names you save in the Partners tab.

This data lives in a Postgres database hosted by Supabase in the United States, under row-level security so each account can read only its own rows. The opportunity notices themselves are public SAM.gov data and are not tied to you.

Services the app talks to

  • Our backend (Supabase), for sign-in, your profile, and the opportunity feed.
  • USAspending.gov, a public U.S. government API, when you search for a firm in the Partners tab. The search term you type is sent to that API; nothing about your account is.
  • SAM.gov, only when you tap a link to open a notice in your browser.
  • Apple, for Sign in with Apple and, once subscriptions launch, for payment. Apple handles billing; we never see your card.

What we don't do

No analytics or crash-reporting SDKs. No ads. No location access. No contacts access. No selling, renting, or sharing of your data with anyone, and no use of it beyond running Harrier for you.

Beta (TestFlight) builds

If you're testing Harrier through TestFlight, Apple may share crash logs and any screenshots or comments you choose to send through TestFlight's feedback feature with us. That's governed by Apple's TestFlight terms, and we use it only to fix the app.

Deleting your account

Email us from the address on your account (or, for Hide My Email users, from any address with your relay address included) and we'll delete your account, profile, decisions, and bookmarks within a few days. Signing out alone does not delete anything.

Questions

Reach us at [email protected] about this policy or a deletion request.