Privacy Policy

This policy explains what information ColdSpin LLC ("ColdSpin", "we", "us") collects through the ColdSpin iPhone app and through this website at coldspinapp.com, why we collect it, who else processes it, how long we keep it, and how you can have it deleted.

The short version

• ColdSpin has no signup. The app does not ask for your name, email address, or a password.
• We do not collect your location, your contacts, your advertising identifier, or any device identifier.
• We use no third-party analytics or advertising SDKs. Usage data goes to our own database and nowhere else.
• We do not sell or share personal information, and we never have.
• The only personal contact details we hold are the ones you type into the launch-updates form on this website.
• You can have your data deleted by emailing [email protected].

Who we are

ColdSpin is operated by ColdSpin LLC, a limited liability company organized in the State of Kansas, United States. ColdSpin LLC is the controller of the information described in this policy. You can reach us at [email protected].

What the ColdSpin app collects

An anonymous account identifier

The first time you open ColdSpin, the app creates an anonymous account and stores it on your device. That account is a randomly generated identifier. It is not derived from your device, your phone number, your Apple Account, or anything else about you, and it cannot be used to identify you personally.

We need it for two reasons: to enforce your spin allowance fairly, and to remember which businesses you have already been shown so we don't hand you the same one twice. Deleting the app from your device deletes this identifier.

Your device's time zone

The app reads the time zone from your device's settings and stores it with your anonymous account. This exists so your daily spin allowance resets at midnight where you actually are rather than at midnight UTC. We store the time zone name only — for example America/Chicago. That is a region, not a location: it does not tell us your city, your address, or your coordinates.

A record of each spin

For every successful spin we store:

• your anonymous account identifier;
• an identifier for the business that was returned;
• the industry category that was searched; and
• the date and time.

This is what counts against your allowance, what powers the 30-day no-repeat rule, and what fills the Recent Leads list inside the app.

Usage events

ColdSpin records a fixed, closed list of product events so we can tell whether the app actually works: first launch, app opened, search submitted, spin started, succeeded, failed or returned no results, result shown, call button tapped, spin again, history opened, spin limit reached, paywall viewed or dismissed, and app performance timings.

Alongside an event we may store the market and business type you typed (lowercased and trimmed, so "Wichita KS" and "wichita ks" count as one), whether the service-businesses switch was on, an error code, how many spins you had left, whether your account is on the free or paid tier, and a round-trip time in milliseconds. Every event is linked only to your anonymous account identifier.

There is no third-party analytics SDK in ColdSpin. These events are written to our own database.

What happens when you tap CALL

Tapping CALL hands the phone number to your iPhone's own phone app, exactly as if you had typed it in yourself. ColdSpin does not place, route, listen to, record, or transcribe your calls, and has no way of knowing whether a call connected or how long it lasted. We record only that the CALL button was tapped.

What this website collects

The launch-updates form

If you submit the launch-updates form, we store the email address you enter and, if you choose to provide it, your phone number. We also record which page the signup came from and the time it was submitted. Nothing else — no IP address, no browser fingerprint, no referrer.

We use your email address for one purpose: to tell you when ColdSpin is available on the App Store. If you gave us a phone number, we will only use it to contact you about early access. We do not add you to a marketing list, and we do not share the list with anyone.

Cookies and analytics

This website sets no analytics cookies, no advertising cookies, and no tracking pixels. We do not run Google Analytics or any equivalent on it. Our hosting provider may set a strictly necessary cookie for security and bot protection; that cookie is not used to profile you and we do not read it.

Server logs and fonts

Our hosting provider processes standard web-server information — including your IP address, the page requested, and your browser's user-agent string — to deliver the site and to protect it from abuse. This website also loads two typefaces from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address as part of that request. We do not receive or store anything from Google about you.

What we never collect

To be explicit, ColdSpin does not collect any of the following:

• your name, unless you put it in an email to us;
• your precise or approximate location — the app never requests location permission;
• your contacts, calendar, photos, microphone, or camera;
• the Advertising Identifier (IDFA) or any advertising or cross-app tracking identifier;
• a device identifier, device fingerprint, or hardware serial;
• the content, duration, or outcome of any phone call;
• payment card details — ColdSpin has no in-app purchases today, and when it does, purchases will be handled entirely by Apple and we will never see your card.

We do not use your information to train machine-learning models, and we do not build advertising profiles.

Why we process it

• To run the product. Spin records enforce your allowance and prevent repeat businesses. Your time zone makes the daily reset correct.
• To keep it working. Error codes and timings tell us when spins are failing or slow, in which markets, and how badly.
• To decide what to build. Which markets and trades people actually search tells us where to invest in data coverage.
• To prevent abuse. Server-side spin limits stop automated scraping of the underlying business data.
• To tell you about launch, if you asked us to.

Service providers

We keep the list short on purpose. Each of these processes data on our behalf under its own terms; none of them is permitted to use it for their own purposes.

• Supabase — hosts our database and authentication. All app data described above is stored here, on infrastructure located in the United States.
• Cloudflare — hosts and delivers this website, and processes the server-log information described above.
• Google — provides Google Workspace, which carries email you send to our @coldspinapp.com addresses, and Google Fonts, which serves this site's typefaces.
• Apple — will distribute the app through the App Store and, in future, process any subscription purchases. Apple's handling of that information is governed by Apple's own privacy policy.

We may also disclose information if we are legally required to, or to protect the rights, safety, or property of ColdSpin LLC, our users, or the public. If ColdSpin LLC is ever involved in a merger, acquisition, or sale of assets, information covered by this policy may transfer as part of that transaction; we will say so here before it takes effect.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used under United States state privacy laws.

Business listings shown in the app

The businesses ColdSpin returns come from Foursquare's Open Source Places dataset, used under the Apache License 2.0. That information — business name, category, city, state, and a publicly listed business telephone number — describes commercial establishments, not you.

We recognise that a very small business may publish a number that also belongs to an individual. If you are a business owner and want your listing addressed, email [email protected]; we can suppress a record in ColdSpin, and we will tell you how to correct it at the upstream source, which is where the information originates.

How long we keep it

• Spin records are kept while your anonymous account exists. They have to persist for at least 30 days for the no-repeat rule to work; today we retain them beyond that as the basis of your Recent Leads and your usage history.
• Usage events are retained on the same basis, for product and reliability analysis.
• Launch-updates signups are kept until ColdSpin launches and we have emailed you, or until you ask us to remove you — whichever comes first.
• Email you send us is kept for as long as needed to handle your request and keep a record of it.

We do not currently run automated deletion on a fixed schedule. If you ask us to delete your data, we do it on request as described below.

Your choices and rights

We offer the following to everyone who uses ColdSpin, regardless of where you live and regardless of whether a particular privacy law happens to apply to us.

• Deletion. Email [email protected] and we will delete the records associated with your account.
• Access. Ask us what we hold about you and we will tell you.
• Correction. Ask us to correct anything inaccurate.
• Opt out of launch emails. Ask us to remove you from the launch list at any time.

Depending on where you live, you may have additional statutory rights — for example under the California Consumer Privacy Act or similar state laws. We honour the requests above for everyone, so you do not need to invoke a specific law to exercise them. We will not discriminate against you for making a request.

Security

Traffic between the app, this website, and our servers is encrypted in transit using TLS. Access to our database is restricted at the row and column level, so the app can read only its own account's records and cannot read another user's history, our business dataset, or our analytics. The launch-updates list cannot be read at all through any public interface — the form can only append to it.

No system is perfectly secure, and we will not pretend otherwise. If we become aware of a breach affecting your information, we will notify you and any regulator as required by law.

Children

ColdSpin is a business tool intended for adults engaged in commercial sales activity. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email [email protected] and we will delete it.

Where your data is processed

ColdSpin is operated from the United States, and the information described in this policy is stored and processed in the United States. If you use ColdSpin from outside the United States, you are sending your information to the United States, where privacy laws may differ from those in your country. ColdSpin's business data currently covers the United States only.

Changes to this policy

We will update this policy when the product changes in a way that affects it — in particular before subscriptions or optional sign-in ship. When we do, we will change the "last updated" date at the top, and for material changes we will say what changed. The current version is always available at coldspinapp.com/privacy.

Contact us

ColdSpin LLC, Kansas, United States.