Privacy Policy
Revised: 17 September 2026
Prelaunch version. Downloads and purchases are not available yet.
The website is available to learn about the product. The app, trial and licensing sections describe their planned operation; visiting this website does not start a trial or activate a license.
What this policy covers
This policy explains what the Cowork Island app and the coworkisland.com website do with data. Cowork Island is a macOS menu bar app that shows the live status of supported AI-agent sessions in a panel at the top of your screen. It is published by Daniel Pau Castro Engström, an independent developer (sole trader) based in Spain.
The short version
- Session monitoring uses local session records and events from supported integrations. Session content is not sent to the publisher as telemetry.
- Network use depends on the features you enable and the license actions you take, not simply on whether you use Free or Pro.
- Cowork Island does not require its own user account. The website has no analytics or tracking cookies. Payments are handled separately by Polar.
What the app reads on your Mac, and why
To show session activity and let you return to your work, the app uses local session records and events from the integrations you use. Depending on the integration, these can include session names, working directories, status, prompts, tool activity and recent messages.
These records support the local panel. If you configure a webhook or remote host, the related information can pass to the destination you choose, as described below. Your AI tools and their providers have their own data practices.
Licensing and optional connections
- Starting a trial: the app contacts the license service with an installation identifier derived from a SHA-256 hash of the Mac's platform UUID and an app-specific salt. The licensing request contains the hash, not the raw hardware identifier, to anchor the seven-day trial.
- Activating, refreshing or deactivating a license: the app sends the installation identifier and the relevant license keys to the license service. It may periodically refresh purchased entitlements, including separately purchased packs on Free. A failed connection does not itself remove a valid local entitlement.
- Update checks: a release with update support can contact the configured update service when you check for updates or enable automatic checking. The current source disables automatic checking by default; update requests depend on the release configuration and your preferences.
- Webhooks: if you enable one, the app sends session events to your chosen URL. These include event and session identifiers, source, working directory, tool name, timestamp and the raw event, which can contain additional session content.
- Remote hosts: if you configure an SSH host, the app connects to that host, installs its hook and plugin files and forwards session events through a socket. It can remove its own stale remote socket file. Hosts configured to connect automatically can connect when the app starts.
License verification after activation does not require a continuous connection. Optional integrations, update checks and provider tools may require one. The End User License Agreement describes the purchased entitlement.
The website
The website does not require an account and does not use visitor analytics or advertising cookies. Cloudflare hosts and protects the website and processes technical request data, including IP addresses. The email-link form is disabled: it does not collect addresses or send messages.
Payments
Purchases are not available yet. Polar (Polar Software Inc.) is the planned merchant of record: Polar is legally the seller and handles checkout, payment details, invoices, and taxes. We never see your card details. Polar's privacy policy applies to checkout: Polar Privacy Policy. Polar is an independent data controller for the customer and payment data it collects.
Your rights and how to reach us
For the small amount of data our license server processes (the hashed machine id and, if you bought a license, your license key), the data controller is the publisher, Daniel Pau Castro Engström. The lawful basis is performance of contract (GDPR art. 6(1)(b)): this data is needed to provide the trial or license you asked for.
Under the GDPR you can request access, rectification, erasure, restriction, or portability of your data, and you can object to processing. Write to support@coworkisland.com and we will respond. You can also lodge a complaint with a supervisory authority; in Spain that is the Agencia Española de Protección de Datos (AEPD).
Data retention
- Retention periods for trial, activation and license-service records will be published before public downloads open. Visiting this website does not create those records.
- The license file stored on your Mac remains under your control; deleting the app's local data removes that local copy.
- Customer and payment records are held by Polar under its own retention rules.
Changes to this policy
If data handling changes materially, we will explain the change and publish an updated policy with a new effective date.