Privacy Policy

Last updated: February 10, 2026 · Lovecraft LLC

answer.ninja is operated by Lovecraft LLC. This policy covers all applications hosted on answer.ninja, including Plates (fitness tracking), Praxis (learning platform), and Sous-GPT (recipe generation). We keep it straightforward.

1. What We Collect

Data	Why	Stored Where
Email address	Account login, password resets, notifications	Our database
Display name	Profile display, leaderboards, attribution	Our database
Password	Account security	Bcrypt hash only — we never store plaintext
Google account info	OAuth login (email, name, profile picture)	Our database
App-specific data	Workout logs (Plates), study progress (Praxis), recipes (Sous-GPT)	Our database
Usage data	Error tracking, performance monitoring	Sentry (error reports only)

2. What We Don't Collect

We don't use advertising trackers or third-party analytics
We don't sell or rent your personal information to anyone
We don't use tracking cookies beyond essential authentication
We don't do behavioral profiling or serve targeted ads

3. How We Use Your Data

Run the apps: Provide core functionality — tracking workouts, managing study materials, generating recipes
Authentication: Sign you in via Google OAuth or email/password across answer.ninja apps
Improve the service: Aggregate usage trends to improve features — never individual behavioral profiling
Communicate: Account notifications, password resets, important service updates
Prevent abuse: Rate limiting, spam prevention

4. Single Sign-On (SSO)

answer.ninja uses shared authentication across apps. When you sign in with Google on one app, you're automatically signed in to all answer.ninja apps. We store a shared session cookie scoped to answer.ninja that contains your Google identity (email, name, profile picture). Each app maps this identity to its own local user account.

You can sign out of all apps at once via /auth/logout.php.

5. Who Sees Your Data

Third parties we use:

Google — OAuth login if you choose to sign in with Google (their privacy policy)
OpenAI / Anthropic — AI features in Sous-GPT and Praxis (processes prompts, does not store them)
Hostinger — web hosting
Sentry — error tracking (captures technical errors, not personal data)

We do not sell, rent, or share your personal data with advertisers or data brokers.

6. Children's Privacy

answer.ninja apps require users to be 13 years or older. We do not knowingly collect personal information from children under 13. If we discover a user is under 13, we will promptly delete their account and associated data.

7. Your Rights

Access your data — view your profile and activity within each app
Delete your account — contact us to remove your account and associated data
Correct your info — update your name, email, or password in app settings
Export your data — email us for a machine-readable copy of your data

8. Data Retention

Active accounts: Data retained as long as your account exists
Deleted accounts: Personal data purged within 30 days

9. Security

We use HTTPS everywhere, bcrypt password hashing, JWT authentication, rate limiting, and standard server security practices. No system is 100% secure, but we take reasonable measures to protect your data.

10. Cookies

SSO session cookie (ninja_sso) — keeps you signed in across apps. HttpOnly, Secure, SameSite=Lax.
Authentication tokens — stored in localStorage for API requests

We do not use advertising or third-party tracking cookies.

11. Changes

We may update this policy. Significant changes will be communicated via email or in-app notice. Continued use after changes means you accept the updated policy.

12. Contact

Privacy questions, data requests, or concerns:

Email: lovecraftllcapps@gmail.com