# Cenlo

> Private, on-device automatic workspace intelligence and time tracking with zero cloud activity telemetry.

Cenlo organizes daily work hours and application focus directly on the user's personal hardware. It replaces intrusive workplace monitoring (screen captures, keystroke logging, unencrypted URL scraping) with local ML classification and zero-knowledge data isolation.

- **Website**: https://cenlo.app/
- **Target Platforms**: macOS, Windows, Linux
- **License / Pricing**: Free for personal offline use; optional end-to-end encrypted sync
- **Status**: Private Beta


## Product Overview

- **Core Concept**: Automatic time tracking and workspace analytics that run 100% on-device.
- **Primary Audience**: Solo knowledge workers, freelancers, legal/consulting professionals, and privacy-conscious distributed engineering teams.
- **Supported Platforms**: macOS (Apple Silicon & Intel), Windows 10/11 (x64), Linux (x86_64, aarch64).
- **Pricing & Licensing**: Free for solo offline use on personal hardware. Optional end-to-end encrypted device-pairing and managed workspace add-ons.
- **Availability**: Private beta with rolling early access previews.

## Architectural Differentiators

- **Zero Activity Ingestion**: Window titles, active document file paths, browser tabs, and keystrokes are never uploaded to Cenlo servers or third-party cloud infrastructure.
- **Local Machine Learning**: A fine tuned embedded ML engine runs on the client device (CPU/GPU/NPU) to group foreground process transitions into projects and work categories in real time.
- **Local-First SQLite Storage**: Timelines and focus metrics are stored locally in an unshared, client-owned SQLite database.
- **Zero-Knowledge Dual-Envelope Sync**: When cross-device sync is enabled, data is sealed locally using AES-256-GCM before transport. Cloud relay servers handle only opaque ciphertext and hold no decryption keys.
- **No Mandatory Accounts**: Desktop applications function fully offline without requiring an email address, centralized password, or persistent internet connection.

## Target Use Cases & Workflows

### Solo & Independent (Personal Sovereignty)
- **Security Posture**: Peer-to-peer end-to-end encryption.
- **Device Pairing**: Out-of-band cryptographic handshake via terminal or on-screen QR exchange; zero cloud identity dependency.
- **Pipeline**:
  1. *Track*: Silent local observation of active window transitions without manual timer toggles.
  2. *Classify*: Embedded model maps activity to client/project codes.
  3. *Correct*: One-click local corrections update local classification weights.
  4. *Sync*: Encrypted ledger sync across verified personal workstations.

### Team & Enterprise (Scoped Accountability)
- **Security Posture**: Managed Workspace Keys (Kt) with strict Role-Based Access Control (RBAC).
- **Surveillance Elimination**: Managers and administrators receive aggregate project allocations and capacity trend rollups. Raw employee window titles, personal browsing, and idle intervals are cryptographically withheld at the endpoint.
- **Pipeline**:
  1. *Define*: Workspace administrators define project tags, distraction policies, and focus budgets.
  2. *Classify*: Activity is categorized locally on the member's computer.
  3. *Review*: Members review categorized hours locally and authorize team rollups.
  4. *Signal*: Managers view project-level aggregate allocations rather than real-time surveillance feeds.

## Compliance & Legal Posture

- **GDPR (Article 25 - Data Protection by Design & Default)**: Adheres strictly to the Article 5(1)(c) data minimisation principle. No keystroke logging, continuous screenshotting, or personal telemetry enters cloud transit.
- **Works Council & Co-Determination (e.g., German BetrVG §87 / BDSG §26)**: Designed to comply with European employee surveillance prohibitions by prioritizing worker review and threshold warning flags over automated monitoring.
- **HIPAA / Attorney-Client Privilege / Healthcare & Legal /Confidential NDAs**: Safe for regulated environments because Protected Health Information (PHI) and confidential client records never leave the local endpoint.

## Key Technical Specifications

- **Cryptographic Suite**: AES-256-GCM authenticated encryption for sync payload envelopes.
- **Device Authentication**: WebAuthn passkeys (Touch ID, Windows Hello) and standard BIP-39 mnemonic recovery phrases.
- **Offline Reliability**: Full local capability with zero heartbeat pings required for time tracking and timeline generation.

## Key Links

- [Landing Page](https://cenlo.app/): Main product overview, interactive focus timesheet demo, and beta signup.
- [Why Cenlo / Architecture Comparison](https://cenlo.app/#problem): Detailed side-by-side comparison between legacy cloud-first trackers and Cenlo's device-first model.
- [How It Works](https://cenlo.app/#how-it-works): Three-step breakdown of on-device ML, zero-knowledge sync, and QR device pairing.
- [Who It's For](https://cenlo.app/#who-its-for): Operational flows for solo contractors and privacy-first teams.
- [Privacy Guarantees](https://cenlo.app/#trust): Specific cryptographic and architectural commitments.
- [Early Access Waitlist](https://cenlo.app/#waitlist): Private beta registration for early desktop builds.

## Optional

- [Contact & Security Inquiries](mailto:contact@cenlo.app): Direct communication channel for enterprise security reviews, vulnerability disclosure, and support inquiries.