Privacy
What Bench Eleven stores, why, and how long for. Bench Eleven is operated by Lint & Ledger Ltd.
What we store
- Your account: email address, and whatever you choose to add — name, phone, emergency contact, photo, bio, links, gender, weight, paddling side, birth year, and a birth date if a festival you race in measures ages on the day.
- Your paddling: the clubs and squads you belong to, your availability and any note you add to it, and the boats you have been seated in.
- Health information, if you give it: whether you are a paradragon paddler and whether you are a breast cancer survivor. You enter these on your own profile; a manager enters them only for a paddler who has no account. Both exist because races have divisions that require them. Only the people your club has given a role can see either one, and neither is shown to other members. The same goes for the other facts a race division can require, such as para classification, or a transplant or cancer history.
- Competition gender: managers can record the gender category you race in. You don't see it in the app, and you can ask for it.
- Sign-in events: that a link was sent to you and whether it bounced or was marked as spam. This is what makes "my link never came" answerable. Our hosting provider (Cloudflare) logs each request, including your IP address and approximate location, for 7 days so we can trace errors. We don't store your IP address anywhere else. The other companies below necessarily see the address your device connects from — delivering a push notification or an app update cannot happen without it.
- Accepting the Terms: the date you signed in by opening a link, and the date of the Terms in force then — recorded at your first sign-in and again at the first sign-in after each change to the Terms. It is the record that you accepted them.
- Support messages you send us, and reports filed about content.
Weight, and who sees it
Weight is used to balance a boat. Anyone your club has given a role sees it — administrators, managers, and the people who build lineups or enter crews. Other members do not.
The same rule covers the health information above: a race division can require it, and only those people can read it back. A flag nobody has set is not an answer of "no" — it is simply unset, and nothing in the app treats it as one.
Other members of your club see your name, photo, sides and gender.
Notes a manager writes about you
Your club's managers can record a manager note about you. Every manager in the club can read it and change it — not only the manager of a squad you paddle in. It is not shown to you in the app, unless you are a manager yourself: a manager sees every note in their club, including the one written about them. Either way it is your personal data and you can ask for it — write to support and we will disclose it, with anything about a third party removed. A note is deleted twelve months after the last time a manager edited it, whether or not you are still a member of that club.
Notes beside your answers
A note you add to your Yes/No/Maybe is seen only by the people who build your club's lineups. It can say something about your health, so it is deleted when you close your account.
Crew lists for festivals
Managers can export a crew's names, emails and birth dates to enter it in a festival. For a paddler without an account, the email is the contact the club recorded.
Club exports
A club's owner, administrators and member managers can export its member list, with the details managers see, its practice answers and its lineups.
Your calendar link
If you turn on the calendar link, the calendar service you add it to receives your teams' event times, places and titles. Reset the link to cut it off.
When a club changes hands
A club's owner can hand a paid club to another member; your details stay with the club. A free club can't be handed over.
Who else gets your data
- Cloudflare — hosting, the database and sending email.
- Resend — the email we sent before we moved it to Cloudflare.
- Stripe — plans bought on the website. Only the person paying reaches Stripe; members do not.
- Apple — plans bought on iPhone, through the App Store. We never see your card.
- Expo — delivering push notifications to your phone, and updates to the app itself.
- Apple and Google — the last leg of a push notification. Expo hands the message to Apple's or Google's push service, which is the only way a notification reaches an iPhone or an Android phone at all.
- Sentry — error reports from the app on your phone and on the web. When the app reports its own error, names, weights and notes are stripped on your device before the report is sent. A crash inside the phone's native code is reported by Sentry's own software the next time the app opens. That report does not pass through the app's stripping, so the parts of Sentry that would record what was on screen or which addresses the app called are turned off; it carries the crash itself and the state of the phone.
Nothing is sold, and nothing is used for advertising.
Product news
We email news about Bench Eleven, a few times a year, only to people who asked for it: by turning on Product news in the app, under You › Preferences › Notifications, or by entering their address on this website and opening the link we send to confirm it. Nobody is signed up by default, and paying for a club does not sign you up. The request and every one of these emails name our mailing address. Every one of these emails has a link to stop them, and stopping takes effect straight away; you can also turn it off in the app.
So that we can show you asked, we keep a record of each time it was turned on or off: when, how, the words you were shown, and the address. Changing your address moves the subscription to the new one. Closing your account ends it and removes your address from the record.
Cookies
The website uses two cookies: one keeps you signed in, and one tells the website you're signed in. There are no analytics or advertising cookies.
A copy of your data
Email support from your account's address for a file of everything we hold about you.
Deleting your account
Delete your account from You › Your details in the app, or on this website at bencheleven.com/legal/delete-account — the web page emails you a link first, so only you can do it. Your email address, phone number, photo, bio, links, emergency contact, date of birth and the notes beside your answers are removed immediately.
Closing your account also closes any club you own, unless you hand a paid club over first. A plan bought on the website stops at the end of the period you paid for; a plan bought on iPhone is Apple's to stop, in your iPhone's Settings. You can't close your account while an offer to hand over a club is open.
Three things deliberately survive, and you should know before you file one:
- Your paddling details — name, gender, weight, paddling side, birth year, the health information above, and the competition gender a manager recorded — stay stored with the clubs you paddled for, because past lineups were built from them. After you close your account no member list and no club export shows them; only the lineups you paddled in keep your name, and a manager's view of a past lineup keeps the weight beside it. A manager's notes about you are deleted after twelve months and are shown to nobody in the meantime.
- Past rosters keep the boat you paddled in, with your name. Rewriting them would corrupt other people's season.
- A report you filed about someone else is kept for twelve months, reduced to an account identifier. Otherwise a report could be erased by closing the account that made it, while the person reported is still in a club with real people.
Sign-in records, the notifications and emails we sent you and the record of what our staff did also outlive the account, for the times listed below, and a manager's note lasts until it expires. Your past Yes/No/Maybe answers stay with the club, without their notes.
Ordinary support messages you sent are deleted with your account.
We keep a record that a deletion was asked for, with the address it was asked for, for 90 days — including after the account is gone, because it is the only way we can show you how your request was handled.
How long we keep things
- Sign-in events: 90 days.
- The date you accepted the Terms, and which version: as long as the account record, also after your account is deleted.
- Request logs (Cloudflare): 7 days, with your IP address, approximate location and the page asked for — including your calendar link, if you use one.
- A record that an account deletion was requested: 90 days, with the address.
- Reports: 12 months.
- Support messages sent while signed in: until you delete your account.
- A message sent through the support form while signed out: 12 months.
- Notifications we sent you: 12 months.
- Emails we sent you — the address, the kind of email, when, and whether it was accepted or bounced: 30 days, also after your account is deleted.
- A product-news request you never confirmed: 7 days after the link expires.
- A record of what our staff did in the admin console, including whose account they looked at: 2 years.
- A deleted club: 30 days, then permanently erased.
- A club whose subscription has ended: a year, so a season can be skipped and picked up again. After that it is deleted like any other club — 30 more days, then permanently erased. This holds the club’s members too: names, weights and availability.
Children
Bench Eleven is not for people under 13. A youth paddler is added to a club by an administrator and has no account, no login and receives nothing from us.