Privacy

What Bench Eleven stores, why, and how long for. Bench Eleven is operated by Lint & Ledger Ltd.

What we store

Your account: email address, and whatever you choose to add — name, phone, emergency contact, photo, bio, links, gender, weight, paddling side, birth year, and a birth date if a festival you race in measures ages on the day.
Your paddling: the clubs and squads you belong to, your availability and any note you add to it, and the boats you have been seated in.
Health information, if you give it: whether you are a paradragon paddler and whether you are a breast cancer survivor. You enter these on your own profile; a manager enters them only for a paddler who has no account. Both exist because races have divisions that require them. Only the people your club has given a role can see either one, and neither is shown to other members. The same goes for the other facts a race division can require, such as para classification, or a transplant or cancer history.
Competition gender: managers can record the gender category you race in. You don't see it in the app, and you can ask for it.
Sign-in events: that a link was sent to you and whether it bounced or was marked as spam. This is what makes "my link never came" answerable. Our hosting provider (Cloudflare) logs each request, including your IP address and approximate location, for 7 days so we can trace errors. We don't store your IP address anywhere else. The other companies below necessarily see the address your device connects from — delivering a push notification or an app update cannot happen without it.
Accepting the Terms: the date you signed in by opening a link, and the date of the Terms in force then — recorded at your first sign-in and again at the first sign-in after each change to the Terms. It is the record that you accepted them.
That a guest agreed: for a member added without an account, which manager confirmed that they — or a parent or guardian — agreed to the club recording their details, and when. A guest added before 2 November 2026 has no record.
Support messages you send us, and reports filed about content.

Weight, and who sees it

Weight is used to balance a boat. Anyone your club has given a role sees it — administrators, managers, and the people who build lineups or enter crews. Other members do not.

The same rule covers the health information above: a race division can require it, and only those people can read it back. A flag nobody has set is not an answer of "no" — it is simply unset, and nothing in the app treats it as one.

Other members of your club see your name, photo, sides and gender.

Notes a manager writes about you

Your club's managers can record a manager note about you. Every manager in the club can read it and change it — not only the manager of a squad you paddle in. It is not shown to you in the app, unless you are a manager yourself: a manager sees every note in their club, including the one written about them. Either way it is your personal data and you can ask for it — write to support and we will disclose it, with anything about a third party removed. A note is deleted twelve months after the last time a manager edited it, whether or not you are still a member of that club.

Notes beside your answers

A note you add to your Yes/No/Maybe is seen only by the people who build your club's lineups. It can say something about your health, so it is deleted when you close your account.

Crew lists for festivals

Managers can export a crew's names, emails and birth dates to enter it in a festival. For a paddler without an account, the email is the contact the club recorded.

Club exports

A club's owner, administrators and member managers can export its member list, with the details managers see, its practice answers and its lineups.

What your club may do with your details

The people your club gives a role see your details to run the club: its practices, lineups and crews, and entering them in races. Our new Terms, which take effect at least 60 days after we email every account about them, forbid them to sell your details, pass them to anyone outside the club other than a race or your sport's association, or use them for marketing. If you think your club has misused them, tell the club, or write to support.

Your calendar link

If you turn on the calendar link, the calendar service you add it to receives your teams' event times, places and titles. Reset the link to cut it off.

When a club changes hands

A club's owner can hand a paid club to another member; your details stay with the club. A free club can't be handed over.

Who else gets your data

Cloudflare — hosting, the database and sending email.
Resend — the email we sent before we moved it to Cloudflare.
Stripe — plans bought on the website. Only the person paying reaches Stripe; members do not.
Apple — plans bought on iPhone, through the App Store. We never see your card.
Expo — delivering push notifications to your phone, and updates to the app itself.
Apple and Google — the last leg of a push notification. Expo hands the message to Apple's or Google's push service, which is the only way a notification reaches an iPhone or an Android phone at all.
Sentry — error reports from the app on your phone and on the web. When the app reports its own error, names, weights and notes are stripped on your device before the report is sent. A crash inside the phone's native code is reported by Sentry's own software the next time the app opens. That report does not pass through the app's stripping, so the parts of Sentry that would record what was on screen or which addresses the app called are turned off; it carries the crash itself and the state of the phone.

Nothing is sold, and nothing is used for advertising.

Product news

We email news about Bench Eleven, a few times a year, only to people who asked for it: by turning on Product news in the app, under You › Preferences › Notifications, or by entering their address on this website and opening the link we send to confirm it. Nobody is signed up by default, and paying for a club does not sign you up. The request and every one of these emails name our mailing address. Every one of these emails has a link to stop them, and stopping takes effect straight away; you can also turn it off in the app.

So that we can show you asked, we keep a record of each time it was turned on or off: when, how, the words you were shown, and the address. Changing your address moves the subscription to the new one. Closing your account ends it and removes your address from the record.

Invitations

A club's managers can invite any email address to their club. The invitation says who asked us to send it. One link in every invitation stops invitations from every Bench Eleven club to that address; we keep the address on a list for that purpose until its owner allows them again — by the same link, by signing in to Bench Eleven, or by writing to support. Closing an account does not take an address off the list.

Cookies

The website uses two cookies: one keeps you signed in, and one tells the website you're signed in. There are no analytics or advertising cookies.

A copy of your data

Email support from your account's address for a file of everything we hold about you.

Deleting your account

Delete your account from You › Your details in the app, or on this website at bencheleven.com/legal/delete-account — the web page emails you a link first, so only you can do it. Your email address, phone number, photo, bio, links, emergency contact and the notes beside your answers are removed immediately, and so are your weight, paddling sides, gender, birth year and date of birth, the health information above, and the competition gender a manager recorded.

Closing your account also closes any club you own, unless you hand a paid club over first. A plan bought on the website stops at the end of the period you paid for; a plan bought on iPhone is Apple's to stop, in your iPhone's Settings. You can't close your account while an offer to hand over a club is open.

Two things deliberately survive, and you should know before you file one:

Past rosters keep the boat you paddled in, with your name. Rewriting them would corrupt other people's season. Your name is all they keep: a manager opening a past lineup sees it beside an empty seat weight, and no member list shows you after you close your account.
A report you filed about someone else is kept for twelve months, reduced to an account identifier. Otherwise a report could be erased by closing the account that made it, while the person reported is still in a club with real people.

Sign-in records, the notifications and emails we sent you and the record of what our staff did also outlive the account, for the times listed below, and a manager's note about you lasts until it expires, twelve months after it was last edited, shown to nobody in the meantime. Your past Yes/No/Maybe answers stay with the club, without their notes.

Ordinary support messages you sent are deleted with your account.

We keep a record that a deletion was asked for, with the address it was asked for, for 90 days — including after the account is gone, because it is the only way we can show you how your request was handled.

How long we keep things

Sign-in events: 90 days.
A record of each sign-in and each time it was renewed: until that sign-in would have expired — up to a year on a phone, 90 days in a browser — even if you signed out sooner.
The date you accepted the Terms, and which version: as long as the account record, also after your account is deleted.
A record that we emailed you about a change to the Terms, and whether it was sent: as long as the account record, also after your account is deleted.
The record of who confirmed a guest agreed, and when: as long as that membership.
Request logs (Cloudflare): 7 days, with your IP address, approximate location and the page asked for — including your calendar link, if you use one.
A record that an account deletion was requested: 90 days, with the address.
Reports: 12 months.
Support messages sent while signed in: until you delete your account.
A message sent through the support form while signed out: 12 months.
Notifications we sent you: 12 months.
Emails we sent you — the address, the kind of email, when, and whether it was accepted or bounced: 30 days, also after your account is deleted.
A product-news request you never confirmed: 7 days after the link expires.
An address that asked for no invitations: until they allow them again.
A record of what our staff did in the admin console, including whose account they looked at: 2 years.
A deleted club: 30 days, then permanently erased.
A club whose subscription has ended: a year, so a season can be skipped and picked up again. After that it is deleted like any other club — 30 more days, then permanently erased. This holds the club’s members too: names, weights and availability.

Young paddlers

Bench Eleven is not for people under 13. A young paddler is added to a club by a manager, with a parent's or guardian's permission, and has no account, no sign-in and receives nothing from us. The manager who adds them confirms that a parent or guardian has agreed to the details being recorded, and we keep a record of who confirmed it and when.

Contact

Support — support@bencheleven.com