Legal

Privacy Policy

Last updated: June 1, 2026

Overview

ColdWork ("the App") is a focus tool built for developers, students, and anyone serious about getting work done without distractions. ColdWork is available as a free tier with core features, and paid subscription tiers that unlock additional capabilities.

ColdWork is available in three forms: a standalone Electron desktop application for Windows, an Android mobile application distributed as a direct APK download (not via the Play Store), and a web dashboard where you can create an account and manage your subscription. This policy explains what data is collected in each context, how it is stored, and your rights regarding that data.

The short version: Both the desktop app and Android app store everything locally on your device and do not transmit data. The web dashboard requires an account and stores your email, subscription plan, and usage data (like chat conversations and habits) on our servers. We do not sell your data. You own your data and can delete it at any time.

Who We Are

ColdWork is developed and maintained by caparim. The Electron desktop app and Android mobile app are both available free of charge and require no account. The web dashboard is available with a free tier and optional paid subscription tiers for additional features.

Data Collection — Apps vs Web Dashboard

Electron Desktop App & Android Mobile App: Both native applications collect no personal data. Specifically:

  • No account creation or login is required
  • No email addresses or contact information are transmitted
  • No usage analytics or telemetry are sent to any server
  • No cookies or tracking pixels are used
  • No IP addresses are logged

Web Dashboard: If you create an account or use the web dashboard, we collect the following:

  • Email address — required for account creation and login
  • Password — securely hashed by Supabase Auth; we cannot see it
  • Full name — optional, for personalization
  • Subscription plan — which tier (Free, Pro, or Lifetime) you're subscribed to
  • Habit data — habits you create and track, and when you log completions
  • Account timestamps — when you created your account and last signed in
  • Language preference — the language you select in settings

We do not use cookies, tracking pixels, analytics tools (like Google Analytics), advertising networks, or IP logging on the website.

Desktop App — Data Stored Locally on Your Device

The ColdWork Electron desktop app stores the following data locally using electron-store, which saves a JSON file in your operating system's standard app data folder. This data never leaves your machine and is never transmitted to our servers.

  • Blocklist — websites and apps you choose to block during focus sessions
  • Session history — timestamps and durations of your focus sessions
  • Screen time data — which apps had foreground focus and for how long (last 30 days, then auto-deleted)
  • Settings — your preferences such as break duration, theme, startup behavior, and keyboard shortcuts
  • Custom rules — any app-triggered blocking rules you configure
  • Strict Mode configuration — allowed apps and sites for Strict Mode

All of this data is stored in plain JSON at:

%APPDATA%\coldwork\config.json

You can view, edit, or delete this file at any time. Uninstalling the app removes it automatically.

Android App — Data Stored Locally on Your Device

The ColdWork Android app stores the following data locally on your device using standard Android app storage. This data never leaves your device and is never transmitted to our servers.

  • Blocklist — websites and apps you choose to block during focus sessions
  • Session history — timestamps and durations of your focus sessions
  • Settings — your preferences such as break duration and blocking behavior
  • Strict Mode configuration — apps and sites permitted during Strict Mode

All data is stored in the app's private storage directory. You can clear this data at any time via Android Settings → Apps → ColdWork → Clear Data. Uninstalling the app removes all stored data automatically.

Android permissions the app requests:

  • Usage Access — reads which app is in the foreground so ColdWork can block distracting apps during a session. This data is processed locally and never transmitted.
  • Display Over Other Apps — allows ColdWork to show a blocking overlay when a restricted app is opened
  • Internet — required only to redirect or block network requests to distracting websites during a session

None of these permissions are used to collect personal data or send anything to external servers.

Web Dashboard — Data Stored on Our Servers

When you create an account on the ColdWork web dashboard, your data is stored securely on Supabase, a PostgreSQL database service. This includes your email, subscription plan, and habit tracking data. All data is encrypted in transit (HTTPS) and at rest.

You own your data. You can download, export, or delete your account and all associated data at any time by contacting us at business694200969@gmail.com or through your account settings.

Data retention: We retain your account data as long as your account is active. If you delete your account, your data is permanently deleted within 30 days.

System-Level Access

Windows desktop app:To block distracting websites, ColdWork modifies your system's hosts file at:

C:\Windows\System32\drivers\etc\hosts

This is a standard, well-documented method used by many parental control and focus applications. The App adds entries between clearly marked comments (# ColdWork-START and # ColdWork-END) and removes them when the session ends or the App quits. No permanent changes are made to your system.

To block distracting desktop apps, ColdWork uses the standard Windows taskkill command to close specified processes during a focus session. This only affects processes you explicitly add to your blocklist.

Android app: To block distracting apps on Android, ColdWork uses the Usage Access permission to detect when a blocked app enters the foreground, then displays a blocking overlay over it. To block websites, ColdWork intercepts network requests at the device level during an active session. All blocking is temporary and active only while a session is running. No permanent changes are made to your device.

Background Service

ColdWork may install a lightweight background service (service.exe) that runs with elevated permissions to reliably write to the hosts file. This service:

  • Only listens on 127.0.0.1 (localhost) — it is not accessible from the network
  • Only accepts commands from the ColdWork desktop app
  • Does not collect or transmit any data
  • Can be uninstalled at any time through Windows Services or by uninstalling the App

Browser Extension (Optional)

ColdWork offers an optional browser extension for more complete blocking coverage (e.g., YouTube Shorts, Instagram Reels). The extension:

  • Communicates only with the local ColdWork desktop app via localhost
  • Does not send any data to external servers
  • Does not track browsing history or behavior
  • Can be removed from your browser at any time

Quote Source

ColdWork uses the following quote source:

  • Local quote bank - motivational quotes are bundled inside the App and do not call an external quote API.

No external quote service, analytics platform, or advertising network is used for quotes.

Payment Data

Payments for ColdWork subscriptions and Lifetime plans are processed by Paddle (Paddle.com Market Ltd / Paddle.com, Inc.), our Merchant of Record. ColdWork does not collect, store, or have access to your payment card details, billing address, or any other financial information. All payment data is handled exclusively by Paddle in accordance with Paddle's Privacy Policy.

When you make a purchase, Paddle shares with us only the information needed to activate your subscription: your email address and the plan you purchased. We do not receive card numbers, bank details, or any other payment credentials.

Children's Privacy

ColdWork does not knowingly collect any personal information from anyone, including children under 13. Since the App does not collect personal data at all, no special provisions are required under COPPA or similar regulations.

Data Sharing and Sales

We do not sell, rent, trade, or share any user data with third parties. There is no data to share — ColdWork does not collect personal information.

Your Rights

Under GDPR (European Union), CCPA (California), and similar privacy laws, you have the right to:

  • Know what data is collected about you — in this case, none
  • Request deletion of your data — you can delete the local config file (desktop) or clear app data (Android) at any time
  • Opt out of data sales — we do not sell data
  • Access a copy of your data — your local app storage is always accessible on your device

Since all data is stored locally on your device and nothing is transmitted, you have full control over your information at all times.

Transparency

ColdWork is built with transparency in mind. If you have questions about how the App handles your data or want to verify any claim in this policy, contact caparim directly.

Changes to This Policy

If this privacy policy changes, the updated version will be posted on this page with a new "Last updated" date. Since ColdWork does not collect email addresses, we cannot notify you directly — we recommend checking this page occasionally.

Contact

If you have questions about this privacy policy or the App's data practices, you can reach caparim at:

business694200969@gmail.com