Privacy policy

CORE95 may be distributed through https://core95.ru, direct APK, RuStore, Google Play and the App Store.

For the version distributed through https://core95.ru, direct APK or RuStore with Robokassa payments, the Premium seller is Морозов Артем Павлович, Плательщик налога на профессиональный доход (самозанятый). Tax ID: 732729451290.

For the version distributed through Google Play or the App Store, the developer and seller of digital access within that store is LifeEngineering. Zandy Ville Ebro. Payments in those channels are processed by the store's own billing tools.

For support and privacy questions, contact support@core95.ru.

CORE95 may process email, technical device data, learning data, word progress, subscription status and support requests.

In guest mode, CORE95 may create an anonymous technical account and process installation, session and learning-event identifiers. This is needed to preserve guest progress, operate the app and later link progress to an account.

When the user accepts the Terms of Use, we store a minimal record of the document version, bundle hash, source, language and acceptance time. This is evidence of terms acceptance, not separate consent to marketing email or optional analytics.

If a user opens a referral link, we may process technical referral data: the partner code, a random referral journey ID and a snapshot of the offer terms. These values are needed to preserve the selected attribution between pages, registration and payment.

For the partner programme, we process application details and a record of the accepted terms. After approval, we also process the partner’s verified tax profile and payout details: recipient name, tax status, tax ID, document contact, and either the bank and phone number used for SBP or the bank name, BIK and account number used for a bank transfer; a correspondent account is collected when required. This information is used to verify the payee, calculate and transfer rewards, and prepare required records.

Current CORE95 versions use self-hosted Bugsink on CORE95 RU infrastructure for technical diagnostics. Events may contain an error type, scrubbed technical message, stack trace/source location, stable feature and operation names, app version, runtime, distribution channel and coarse operating-system information. Before sending, known emails, phone numbers, UUIDs, IPs, tokens and URL query data are masked; user identity fields, cookies, authorization headers and request bodies are not attached. Session Replay, profiling, tracing and performance monitoring are disabled. Earlier installed app versions may retain the previous diagnostics route until updated.

We do not request or store bank card data. Payment data is processed by the payment partner or app store under its own security rules.

Data is used for account sign-in, progress saving, spaced repetition, access recovery, payment processing, user support and app stability improvements.

The main user domain of the Russian production contour — Auth, profile, settings, progress, learning events and the user-terms journal — is hosted on RU Supabase/VPS. The International contour is not used for the current RU release and is preserved only for future regional operation.

Referral data is used to continue the referral flow selected by the user, link a learner to a partner and calculate rewards under the programme rules. It is not used for fingerprinting, advertising profiles or retargeting.

Learning progress is required so the app can return words at the right time and keep results between sessions.

CORE95 is designed as an offline-first app: part of the data may be stored locally on the device so training continues without internet.

When internet is available, the app may sync account data, access status and learning progress with the server when needed for product operation.

The site and PWA use first-party cookies, localStorage, IndexedDB, service-worker cache and other local mechanisms when needed for sign-in, language choice, offline-first operation, the PWA and progress continuity.

After a valid referral-link visit, CORE95 stores an opaque partner code, a random referral journey ID and a snapshot of the offer terms in a first-party cookie and localStorage. An unverified code is kept for up to 24 hours; the journey, offer snapshot and confirmed referral attribution are kept for no more than 365 days from the first valid visit. Clearing the browser, private mode or another browser may remove the attribution.

Optional external analytics (Yandex Metrika, VK Pixel, PostHog, Webvisor and retargeting) is not loaded before the user makes an explicit choice. If the user chooses “Only necessary”, these tools do not run, while the site, PWA, registration, internal product events and functional referral attribution continue to work.

We may share the minimum required data with payment providers, app stores, hosting providers, authorization services, error-monitoring infrastructure and other processors when needed for the site, app, payment, support or product stability.

The current RU runtime sends technical events to self-hosted Bugsink on CORE95 infrastructure in Russia; Bugsink is not an external Sentry Cloud organization. Earlier installed app versions may continue using the previous external Sentry setup until updated; that organization is in Germany. These channels are used for failure diagnostics, not advertising, user profiling or product-statistics calculations.

External advertising and analytics tools are loaded only after a separate user choice. CORE95 internal statistics and partner reward calculations do not depend on consent to those tools.

We do not sell users’ personal data.

Account data and server records are stored as long as needed for account operation, user obligations, accounting, security and legal compliance.

The user-terms record is kept in an append-only journal with the account and is removed as part of account deletion unless a separate mandatory retention period applies. Historical rows cannot be edited manually; a new document version creates a new row.

A partner’s tax and payout details are kept while needed for participation, settlement and legal obligations. After participation ends, payout details that are no longer needed for payment or review are deleted; financial records subject to a statutory retention period are kept separately until that period ends.

An unverified partner code is stored in the browser for up to 24 hours. The referral journey, offer snapshot and confirmed attribution are stored for no more than 365 days from the first valid visit, unless the user clears the browser earlier.

The user may request deletion or clarification of data via support@core95.ru.

The account can be deleted in the app through Profile → Delete account. Detailed instructions: https://core95.ru/en/legal/delete-account/.

If the user cannot access the app, they may request deletion via support@core95.ru.

For privacy, data deletion and data access questions, contact support@core95.ru.