Legal

Privacy Policy

Last updated: August 26, 2026

Overview

ColdWork ("the App") is a focus tool built for developers, students, and anyone serious about getting work done without distractions. ColdWork has a free tier with core blocking, plus a paid Pro tier.

ColdWork is available in two forms: an Android mobile application distributed through Google Play, and a web dashboard where you can create an account and manage your membership. This policy explains what data is collected in each context, how it is stored, and your rights regarding that data.

The short version:Your focus data (screen time, blocklists, session history) stays on your device. Creating a ColdWork account (used by the Android app and the web dashboard) stores your email, subscription plan, and a daily "last seen" heartbeat on our servers so your membership works across devices. We do not sell your data. You own your data and can delete your account and all server-side data at any time, from inside the Android app (Settings → Delete account) or from coldworkapp.com/account.

Who We Are

ColdWork is developed and maintained by caparim. Both surfaces (the Android app and the web dashboard) use a ColdWork account with a free tier and an optional paid Pro tier, described under Payment Data.

Data Collection: App vs Web Dashboard

Android Mobile App: your focus data (screen time, app usage, blocklists, session history) is processed and stored only on your device and is never uploaded. The app does use your ColdWork account, so it transmits the following to our servers:

  • Account credentials: your email and password (hashed by Supabase Auth) when you sign in
  • Anonymous launch ping: a random device identifier and the date, once per day, so we can count active installs
  • Signed-in heartbeat: your account id, email, and a "last seen" timestamp so we can see the app is being used
  • Synced focus sessions: if you use remote/cross-device sessions, the session timing needed to sync them

Web Dashboard: If you create an account or use the web dashboard, we collect the following:

  • Email address: required for account creation and login
  • Password: securely hashed by Supabase Auth; we cannot see it
  • Full name: optional, for personalization
  • Subscription plan: which tier (e.g., Free) you're currently on
  • Account timestamps: when you created your account and last signed in
  • Language preference: the language you select in settings

We do not use cookies, tracking pixels, analytics tools (like Google Analytics), advertising networks, or IP logging on the website.

Android App: Data Stored Locally on Your Device

The ColdWork Android app stores the following data locally on your device using standard Android app storage. Except for the account and sync data described above, this data never leaves your device.

  • Blocklist: websites and apps you choose to block during focus sessions
  • Session history: timestamps and durations of your focus sessions
  • Settings: your preferences such as break duration and blocking behavior
  • Strict Mode configuration: apps and sites permitted during Strict Mode

All data is stored in the app's private storage directory. You can clear this data at any time via Android Settings → Apps → ColdWork → Clear Data. Uninstalling the app removes all stored data automatically.

Android permissions the app requests:

  • Usage Access: reads which app is in the foreground and daily screen time so ColdWork can block distracting apps, enforce app limits, and show your stats. This data is processed locally and never transmitted.
  • Accessibility Service (optional): detects when a blocked app or short-form feed opens during a focus session so the block screen can appear, and protects the app from being uninstalled mid-session when Uninstall Protection is on. It does not read, store, or transmit the content of your screen.
  • Display Over Other Apps: allows ColdWork to show a blocking overlay and the floating session timer when a restricted app is opened
  • VPN Service: filters blocked websites using on-device DNS filtering during a session. Your traffic is not routed through any external server, and no browsing data is collected or transmitted.
  • Device Admin (optional): powers Uninstall Protection, which prevents the app from being removed during an active Strict Mode session. You can disable it at any time outside a session.
  • Notifications: shows focus reminders and the ongoing-session status notification
  • Battery optimization exemption: keeps the blocking service running during a session
  • Query installed apps: lists the apps on your device so you can choose which ones to block. The list is displayed locally and never uploaded.
  • Internet: used for account sign-in, Google Play Billing purchases and membership checks, and the analytics described above

Apart from the account and analytics data listed in "Data Collection", none of these permissions are used to collect personal data or send anything to external servers.

Web Dashboard: Data Stored on Our Servers

When you create an account on the ColdWork web dashboard, your data is stored securely on Supabase, a PostgreSQL database service. This includes your email, your subscription plan and its status. All data is encrypted in transit (HTTPS) and at rest.

You own your data. You can download, export, or delete your account and all associated data at any time by contacting us at business694200969@gmail.com or through your account settings.

Data retention: We retain your account data as long as your account is active. If you delete your account, your data is permanently deleted within 30 days.

System-Level Access

To block distracting apps on Android, ColdWork uses the Usage Access permission to detect when a blocked app enters the foreground, then displays a blocking overlay over it. To block websites, ColdWork intercepts network requests at the device level during an active session. All blocking is temporary and active only while a session is running. No permanent changes are made to your device.

Quote Source

ColdWork uses the following quote source:

  • Local quote bank - motivational quotes are bundled inside the App and do not call an external quote API.

No external quote service, analytics platform, or advertising network is used for quotes.

Payment Data

Pro is purchased inside the Android app through Google Play Billing. Payment details are handled entirely by Google Play; we never see or store your card or bank information. We receive only the purchase token and subscription state that Google Play sends us, so your membership can be activated on your account.

Your subscription is billed, renewed, refunded and cancelled through Google Play, from your Google Play account settings.

Children's Privacy

ColdWork is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created a ColdWork account, contact us and we will delete it.

Data Sharing and Sales

We do not sell, rent, trade, or share any user data with third parties. The only services that process your account data are our infrastructure providers (Supabase for authentication and database hosting, and Google Play Billing for purchases made inside the Android app), acting on our behalf.

Your Rights

Under GDPR (European Union), CCPA (California), and similar privacy laws, you have the right to:

  • Know what data is collected about you (listed in full in this policy)
  • Delete your account and all server-side data: use Settings → Delete account in the Android app, or the Delete account button on coldworkapp.com/account. Deletion is immediate and permanent.
  • Delete your local data: clear the app's data or uninstall it
  • Opt out of data sales: we do not sell data
  • Access a copy of your data: contact us and we will export your account data

Transparency

ColdWork is built with transparency in mind. If you have questions about how the App handles your data or want to verify any claim in this policy, contact caparim directly.

Changes to This Policy

If this privacy policy changes, the updated version will be posted on this page with a new "Last updated" date. We recommend checking this page occasionally.

Contact

If you have questions about this privacy policy or the App's data practices, you can reach caparim at:

business694200969@gmail.com