← Back to Home

Privacy Policy

Last updated: July 2026

ColdCart ("we", "our", or "the app") is designed so that your personal data never has to leave your device. ColdCart has no user accounts and no server-side database of your activity. This policy explains exactly what stays on your device, and what little is processed off it.

1. Data stored on your device

Everything you create in ColdCart is stored locally on your device — using Apple's SwiftData storage on iOS and local app storage on Android. This includes:

  • Frozen purchases (item names, prices, notes, and cooldown timers you set)
  • Your buy/skip decisions and reflection-journal answers
  • Savings goals and your running savings total
  • Wallet-health score, streaks, and app preferences
  • Block lists and blocking schedules (iOS)

We cannot read this data. It is never uploaded to us, sold, or shared. If you delete the app, this data is deleted with it (subject to your device's standard OS backups, which are controlled by you and your Apple/Google account settings).

2. Screen Time and app shielding (iOS)

On iPhone, ColdCart can shield shopping apps during cooldowns using Apple's Screen Time frameworks (FamilyControls, ManagedSettings, and DeviceActivity). These frameworks are designed by Apple so that the apps you select and your usage activity are processed entirely on your device. ColdCart never learns which apps you use, what you browse, or what you buy — and no browsing or usage data is transmitted off your device by ColdCart. You can revoke Screen Time permission at any time in iOS Settings.

3. Subscriptions and purchase data

The only data processed off-device relates to your optional ColdCart Pro subscription. Payments are handled by Apple's App Store or Google Play — we never see your payment details. To validate your subscription across reinstalls, we use RevenueCat, a subscription-management service that processes an anonymous app-generated identifier and your purchase receipt (product, price, purchase and expiration dates). This identifier is not linked to your name, email, or any account. RevenueCat's handling of this data is described in their privacy policy at revenuecat.com/privacy.

4. Notifications

Cooldown reminders and freeze-complete alerts are local notifications, scheduled and delivered entirely on your device. ColdCart does not use push-notification servers and does not need your contact information to notify you.

5. What we don't do

  • No accounts, sign-ups, or passwords
  • No collection of names, emails, or contact lists
  • No advertising and no sale of data — to anyone, ever
  • No third-party analytics or tracking SDKs in the app
  • No access to your browsing history or purchases

6. Children's privacy

ColdCart is not directed at children under 13, and we do not knowingly collect personal information from children. Because the app collects essentially no personal information in the first place, there is no child data for us to hold.

7. Changes to this policy

If we change this policy, we will update this page and the "Last updated" date above. Material changes (for example, if a future feature ever required off-device processing) will be highlighted in the app before they take effect.

8. Contact

Questions about privacy? Email us at support@coldcart.app.