Privacy Policy

BenyApp ("BenyApp," "we," "us") helps benevolence teams manage requests for assistance — intake, review, voting, and disbursement. We know the information on a case is often sensitive, and we treat it that way. This policy explains what we collect, how we use it, and the choices you have.

Who this policy covers

It covers two groups: users (people who sign up for BenyApp and take part in a team) and case subjects (the people a team records a request about). For case information, the team or organization that enters it decides what is collected and why; BenyApp processes it on their behalf. If you are a case subject and have questions about your information, please contact the team that helped you first — we'll support them in responding.

Information we collect

• Account information — your name, email address, and password (stored only as a one-way hash), and the teams you belong to.
• Case content — whatever your team enters on a case: the requester's details and story, intake form answers, comments, votes, attachments, and disbursement records.
• Activity and audit records — a history of changes to team data (who changed what, and when), kept so teams have an accurate record of decisions.
• Technical information — standard server logs such as IP address, browser type, and request times, used to keep the service secure and running.

We use only the cookies needed to keep you signed in and protect forms from forgery. We do not use advertising or third-party tracking cookies.

How we use information

• To provide BenyApp: show your team its cases, run votes, and send notifications.
• To send account emails such as sign-in links, invitations, and confirmations.
• To secure the service, prevent abuse, and fix problems.
• To improve BenyApp, based on aggregate usage and feedback you give us.

We do not sell personal information, and we do not use case content for advertising or to train AI models.

Who can see case information

Case information is visible only to members of the team it belongs to. A small number of BenyApp staff may access data when needed to operate the service, provide support you request, or meet a legal obligation.

Service providers

We use a few trusted providers to run BenyApp:

• Fly.io — application hosting and database (United States).
• Tigris — storage for case attachments.
• Resend — delivery of account and notification emails.

They process data only to provide their services to us. We may disclose information if required by law, or as part of a merger or acquisition, in which case this policy would continue to apply.

Security

All traffic is encrypted in transit with HTTPS. Sensitive case fields are encrypted at rest in our database, and every team's data is kept separate from every other team's. No system is perfectly secure, but we take protecting your data seriously and will notify affected users of a breach as required by law.

Retention and deletion

We keep account and team data while your account or team is active, because a team's case history is part of its record. Attachments can be removed in the app by the person who uploaded them or a team admin. To delete cases, your account, or a team's data entirely, contact us and we'll take care of it; backups age out on a rolling basis after that.

Your choices

You can update your name, email, and password in your account settings. You may ask us to access, correct, export, or delete your personal information by contacting us. Depending on where you live, you may have additional rights under local law, and we'll honor them.

Children

BenyApp accounts are for adults (18+). Teams may record information about a minor as part of a family's request; that information is handled as case content under this policy.

Beta

BenyApp is in beta. Features — and this policy — may change as we learn. If we make a material change, we'll notify users by email or in the app before it takes effect.

Contact

Questions or requests: hello@benyapp.com.