ColdWork · Lock in, ship more.

Legal

Privacy Policy

Last updated: July 4, 2026

Overview

ColdWork ("the App") is a focus tool built for developers, students, and anyone serious about getting work done without distractions. ColdWork is available as a free tier with core features, with advanced capabilities coming soon.

ColdWork is available in three forms: a standalone Electron desktop application for Windows, an Android mobile application distributed on Google Play and as a direct APK download, and a web dashboard where you can create an account and manage your subscription. This policy explains what data is collected in each context, how it is stored, and your rights regarding that data.

The short version:Your focus data (screen time, blocklists, session history) stays on your device. Creating a ColdWork account (used by the Android app and the web dashboard) stores your email, subscription plan, and a daily "last seen" heartbeat on our servers so your membership works across devices. We do not sell your data. You own your data and can delete your account and all server-side data at any time, from inside the Android app (Settings → Delete account) or from coldworkapp.com/account.

Who We Are

ColdWork is developed and maintained by caparim. The Electron desktop app is free and requires no account. The Android app and web dashboard use a ColdWork account with a free tier and optional paid tiers (Pro and Lifetime) for additional features.

Data Collection: Apps vs Web Dashboard

Electron Desktop App: collects no personal data. No account is required, no telemetry is sent, no cookies or tracking pixels are used, and no IP addresses are logged.

Android Mobile App: your focus data (screen time, app usage, blocklists, session history) is processed and stored only on your device and is never uploaded. The app does use your ColdWork account, so it transmits the following to our servers:

  • Account credentials: your email and password (hashed by Supabase Auth) when you sign in
  • Anonymous launch ping: a random device identifier and the date, once per day, so we can count active installs
  • Signed-in heartbeat: your account id, email, and a "last seen" timestamp so we can see the app is being used
  • Synced focus sessions: if you use remote/cross-device sessions, the session timing needed to sync them

Web Dashboard: If you create an account or use the web dashboard, we collect the following:

  • Email address: required for account creation and login
  • Password: securely hashed by Supabase Auth; we cannot see it
  • Full name: optional, for personalization
  • Subscription plan: which tier (e.g., Free) you're currently on
  • Habit data: habits you create and track, and when you log completions
  • Account timestamps: when you created your account and last signed in
  • Language preference: the language you select in settings

We do not use cookies, tracking pixels, analytics tools (like Google Analytics), advertising networks, or IP logging on the website.

Desktop App: Data Stored Locally on Your Device

The ColdWork Electron desktop app stores the following data locally using electron-store, which saves a JSON file in your operating system's standard app data folder. This data never leaves your machine and is never transmitted to our servers.

  • Blocklist: websites and apps you choose to block during focus sessions
  • Session history: timestamps and durations of your focus sessions
  • Screen time data: which apps had foreground focus and for how long (last 30 days, then auto-deleted)
  • Settings: your preferences such as break duration, theme, startup behavior, and keyboard shortcuts
  • Custom rules: any app-triggered blocking rules you configure
  • Strict Mode configuration: allowed apps and sites for Strict Mode

All of this data is stored in plain JSON at:

%APPDATA%\coldwork\config.json

You can view, edit, or delete this file at any time. Uninstalling the app removes it automatically.

Android App: Data Stored Locally on Your Device

The ColdWork Android app stores the following data locally on your device using standard Android app storage. Except for the account and sync data described above, this data never leaves your device.

  • Blocklist: websites and apps you choose to block during focus sessions
  • Session history: timestamps and durations of your focus sessions
  • Settings: your preferences such as break duration and blocking behavior
  • Strict Mode configuration: apps and sites permitted during Strict Mode

All data is stored in the app's private storage directory. You can clear this data at any time via Android Settings → Apps → ColdWork → Clear Data. Uninstalling the app removes all stored data automatically.

Android permissions the app requests:

  • Usage Access: reads which app is in the foreground and daily screen time so ColdWork can block distracting apps, enforce app limits, and show your stats. This data is processed locally and never transmitted.
  • Accessibility Service (optional): detects when a blocked app or short-form feed opens during a focus session so the block screen can appear, and protects the app from being uninstalled mid-session when Uninstall Protection is on. It does not read, store, or transmit the content of your screen.
  • Display Over Other Apps: allows ColdWork to show a blocking overlay and the floating session timer when a restricted app is opened
  • VPN Service: filters blocked websites using on-device DNS filtering during a session. Your traffic is not routed through any external server, and no browsing data is collected or transmitted.
  • Device Admin (optional): powers Uninstall Protection, which prevents the app from being removed during an active Strict Mode session. You can disable it at any time outside a session.
  • Notifications: shows focus reminders and the ongoing-session status notification
  • Battery optimization exemption: keeps the blocking service running during a session
  • Query installed apps: lists the apps on your device so you can choose which ones to block. The list is displayed locally and never uploaded.
  • Internet: used for account sign-in, membership checks, and the analytics described above

Apart from the account and analytics data listed in "Data Collection", none of these permissions are used to collect personal data or send anything to external servers.

Web Dashboard: Data Stored on Our Servers

When you create an account on the ColdWork web dashboard, your data is stored securely on Supabase, a PostgreSQL database service. This includes your email, subscription plan, and habit tracking data. All data is encrypted in transit (HTTPS) and at rest.

You own your data. You can download, export, or delete your account and all associated data at any time by contacting us at business694200969@gmail.com or through your account settings.

Data retention: We retain your account data as long as your account is active. If you delete your account, your data is permanently deleted within 30 days.

System-Level Access

Windows desktop app:To block distracting websites, ColdWork modifies your system's hosts file at:

C:\Windows\System32\drivers\etc\hosts

This is a standard, well-documented method used by many parental control and focus applications. The App adds entries between clearly marked comments (# ColdWork-START and # ColdWork-END) and removes them when the session ends or the App quits. No permanent changes are made to your system.

To block distracting desktop apps, ColdWork uses the standard Windows taskkill command to close specified processes during a focus session. This only affects processes you explicitly add to your blocklist.

Android app: To block distracting apps on Android, ColdWork uses the Usage Access permission to detect when a blocked app enters the foreground, then displays a blocking overlay over it. To block websites, ColdWork intercepts network requests at the device level during an active session. All blocking is temporary and active only while a session is running. No permanent changes are made to your device.

Background Service

ColdWork may install a lightweight background service (service.exe) that runs with elevated permissions to reliably write to the hosts file. This service:

  • Only listens on 127.0.0.1 (localhost), so it is not accessible from the network
  • Only accepts commands from the ColdWork desktop app
  • Does not collect or transmit any data
  • Can be uninstalled at any time through Windows Services or by uninstalling the App

Browser Extension (Optional)

ColdWork offers an optional browser extension for more complete blocking coverage (e.g., YouTube Shorts, Instagram Reels). The extension:

  • Communicates only with the local ColdWork desktop app via localhost
  • Does not send any data to external servers
  • Does not track browsing history or behavior
  • Can be removed from your browser at any time

Quote Source

ColdWork uses the following quote source:

  • Local quote bank - motivational quotes are bundled inside the App and do not call an external quote API.

No external quote service, analytics platform, or advertising network is used for quotes.

Payment Data

Paid ColdWork plans (Pro and Lifetime) are purchased on the ColdWork website through PayPal. Payment details are handled entirely by PayPal; we never see or store your card or bank information. We store only your subscription plan, its status, and a transaction reference so your membership can be activated on your account.

Children's Privacy

ColdWork is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has created a ColdWork account, contact us and we will delete it.

Data Sharing and Sales

We do not sell, rent, trade, or share any user data with third parties. The only services that process your account data are our infrastructure providers (Supabase for authentication and database hosting, and PayPal for payments), acting on our behalf.

Your Rights

Under GDPR (European Union), CCPA (California), and similar privacy laws, you have the right to:

  • Know what data is collected about you (listed in full in this policy)
  • Delete your account and all server-side data: use Settings → Delete account in the Android app, or the Delete account button on coldworkapp.com/account. Deletion is immediate and permanent.
  • Delete your local data: delete the config file (desktop) or clear app data / uninstall (Android)
  • Opt out of data sales: we do not sell data
  • Access a copy of your data: contact us and we will export your account data

Transparency

ColdWork is built with transparency in mind. If you have questions about how the App handles your data or want to verify any claim in this policy, contact caparim directly.

Changes to This Policy

If this privacy policy changes, the updated version will be posted on this page with a new "Last updated" date. We recommend checking this page occasionally.

Contact

If you have questions about this privacy policy or the App's data practices, you can reach caparim at:

business694200969@gmail.com