BahiBee Privacy Policy
BahiBee is a digital credit ledger ("khata") for Indian shops and their customers, operated by KnoBee Social India Pvt. Ltd ("we", "us"). This policy explains what data we collect, why, and the choices you have. We collect only what the service needs, we never sell personal data, and we never store Aadhaar numbers.
1. Data we collect
| Data | Why we need it | Source |
|---|---|---|
| Mobile number and one-time password (OTP) | Create and sign in to your account; send transaction and reminder messages | You |
| Name, preferred language, role (store, customer or both) | Show who owes whom and display the app in your language | You |
| Shop details: shop name, address, GST setting, UPI ID, rate list | Issue invoices and receive payments for your shop | Shop owners |
| Credit transactions: items, amounts, GST, due dates, payments, running balances | The core khata service: keep an accurate ledger shared between a shop and its customer | Shops and customers |
| Trust score and credit limit | Computed from repayment history so shops can extend credit safely. Shown to a shop only after the customer's QR is scanned, and the exact score only with the customer's consent | Derived by us |
| Family group membership | Lets family members share one credit limit and wallet, at their request | You |
| Wallet top-ups and payments | Processed by Razorpay or your UPI app. We store the amount, status and reference; we never see or store card or bank credentials | You, Razorpay |
| Contacts (optional) | Only when you tap Allow, to show which of your contacts already use BahiBee and to add a customer without typing the number. The names and phone numbers you upload are stored on our server so the list stays available to you, and are used only for this feature. They are kept until you delete them from the app (Customers from phone book → Delete my uploaded contacts) or delete your account | Your phone, with permission |
| Camera (optional) | To scan customer QR codes, product barcodes and order slips. Images of slips are processed to build the invoice and are not used for anything else | Your phone, with permission |
| Device push token, app version, device model | Deliver notifications and diagnose crashes | Your phone |
| KYC level (e.g. DigiLocker verified: yes/no) | Raise a customer's credit limit after identity verification. We store the verification result and reference, never the Aadhaar number or document images | KYC provider, with your consent |
2. How we use data
- Run the khata: record credit sales, allocate payments across shops, and show balances to the shop and the customer involved.
- Send transaction confirmations and due-date reminders by push notification, SMS or WhatsApp to the number you registered.
- Compute the trust score and credit limit from repayment behaviour.
- Pay onboarding rewards to shops and customers.
- Prevent fraud, enforce our terms, and comply with Indian law (including GST invoice retention).
We do not use your data for advertising, and we do not sell or rent it to anyone.
3. Who can see your data
- The other party to a transaction. A shop sees the invoices it issued to you and your available credit. You see every invoice issued to you and every payment you made.
- Other shops see only your star rating band (Green/Amber/Red), name, masked phone number and available credit, and only after you present your QR code to them.
- Family members you add see the shared wallet and limit.
- Service providers acting for us: Razorpay (payments), MSG91 and WhatsApp Business (messages), Google Firebase (push notifications), and our hosting provider. They receive only what is needed for their function.
- Authorities when required by law.
4. Storage and security
Data is stored on servers located in India and Europe, encrypted in transit (TLS). OTP codes are stored hashed and expire in minutes. Access to production data is limited to staff who need it, and the ledger is append-only so history cannot be silently rewritten.
5. Retention
Invoices and payment records are kept for as long as required by Indian tax law (currently 8 years from the end of the financial year). Account profile data is kept while your account is active. Uploaded contacts are kept until you delete them in the app or delete your account. OTP challenges are deleted after expiry.
6. Your choices and rights
- You can revoke camera and contacts permissions at any time in Android settings; the app keeps working with manual entry.
- You can delete every contact you uploaded at any time from the app (Customers from phone book → Delete my uploaded contacts); the deletion is immediate.
- You can decide whether other shops may see your exact score (Settings → Privacy).
- You can request a copy of your data, correct it, or delete your account by writing to us. Deletion removes your profile, contacts data and device tokens immediately; invoices that a shop is legally required to retain are anonymised rather than deleted.
7. Children
BahiBee is for adults running or shopping at businesses. We do not knowingly collect data from anyone under 18.
8. Changes
We will post any changes on this page and, for material changes, notify you in the app. The effective date at the top tells you when it was last updated.
9. Contact
KnoBee Social India Pvt. Ltd
Email: developer@yos.group
Website: bahibee.beegoss.com