Privacy Policy — BahiSathi
The short version. BahiSathi needs an account, and your business data — invoices, quotations, customers, items — is stored in your account in the cloud so you can reach it from this app and from the web. We store it for you; we do not sell it, we do not advertise, and we do not use it for anything other than running the service. You can export it or ask us to delete it at any time.
1. Who we are
BahiSathi is developed and published by AppsYoda. For any question about this policy or your data, contact appsyoda@gmail.com.
2. Your account
Using BahiSathi requires an account, because your data is stored against it and shared between this app and the web app. When you create one we hold:
- Your email address, and your name if you provide one.
- A password, which is handled by Google Firebase Authentication. We never see it and cannot recover it — we can only send you a reset link.
If you sign in with Google, we receive your email address, name and profile picture URL from Google. We do not receive your Google password.
3. Your business data
The following is stored in your account, in Google Cloud Firestore, and is synchronised to this device so the app keeps working without a connection:
- Your business profile — business name, phone number, address, GSTIN, PAN, bank details, logo, and default terms.
- Your customers — name, phone number, email address, GSTIN, billing and shipping addresses.
- Your items and price list — names, descriptions, units, rates, GST rates and HSN/SAC codes.
- Your documents — invoices, quotations, credit and debit notes, with their line items, tax, totals and notes.
- Generated PDF files, which are produced on your device and are not uploaded.
We do not sell this data, share it with advertisers, or use it to train anything. We access it only where we have to in order to run the service — for example to investigate a fault you report.
If you invite colleagues to your business, they can see the business data you have given them access to. Their role decides what they may change.
A copy of your data is cached on this device so the app works offline. Uninstalling the app removes that copy but not the data in your account — sign in again on any device to reach it.
Data is stored on Google Cloud infrastructure in the asia-south1 (Mumbai) region.
4. Usage and crash reporting
We use two Google Firebase services to understand whether the app works and where people get stuck. Both collect data about how the app is used, never the content you enter into it.
| Service | What it collects | Why |
|---|---|---|
| Firebase Analytics | Anonymous usage events (for example: business setup completed, a quotation was saved, a PDF was generated, a quotation was shared, and which sharing method was used); which screens were opened; a randomly generated app instance identifier; device model, operating system version, language; and an approximate location (country or region) derived from your IP address. | To see where people stop using the app, so we can fix that part. |
| Firebase Crashlytics | Crash and error reports: the technical stack trace, the app version, device model and operating system version, the name of the screen that was open, and general device state such as available memory. | To find and fix crashes. |
What is deliberately excluded. The app is built so that your business content cannot be sent even by accident. Customer names, business names, phone numbers, email addresses, GSTINs, addresses, item names, quotation numbers and all monetary amounts are structurally incapable of being included in an analytics or crash report. Screen names are recorded without the identifier of the record being viewed.
5. Advertising
BahiSathi contains no advertising. We do not collect the Android Advertising ID — the permission that would allow it has been explicitly removed from the app. We do not build advertising profiles and we do not use your data for personalised advertising.
6. When you share a quotation
When you tap Share, Email or Save, you are handing the PDF to another app you choose — WhatsApp, your email app, or your device's file storage. That transfer happens entirely on your device and is initiated by you. Once the file reaches another app, that app's own privacy policy governs it. We are not involved in the transfer and receive no copy.
7. Permissions the Android app requests
The web app requests no device permissions; it runs in your browser under the browser's own permission model.
- Internet access — used to sign you in, to synchronise your business data with your account, and to send the usage and crash data described above. Reading, drafting and editing documents and generating PDFs all work with no connection; the synchronisation catches up when you are back online. Assigning a legal document number needs a connection, because the number has to be unique across every device on your account.
8. Who your data is shared with
We do not sell your data, and we do not share it with third parties for their own purposes. Google acts as our data processor for Firebase Authentication, Cloud Firestore, Cloud Functions, Analytics and Crashlytics, handling that data on our instructions. Anyone you invite to your business can see that business's data according to the role you give them. Google's handling is governed by the Firebase Privacy and Security terms and the Google Privacy Policy. Data may be processed on servers outside India.
9. How long it is kept
Analytics data is retained for up to 14 months and then automatically deleted. Crash reports are retained for up to 90 days. Business data in your account is kept until you delete it or ask us to delete your account. Data cached on your device is kept until you delete it or uninstall the app.
10. Your choices and rights
- Export your data — the Reports screen exports your documents as JSON and CSV, and every document can be shared as a PDF.
- Delete your account and all its data — email appsyoda@gmail.com from the address you signed up with, and we will delete it within 30 days.
- Stop all collection — on Android, uninstall the app; on the web, sign out and stop using app.bahisathi.com. No further usage data is sent.
- Delete locally cached data — on Android, uninstall the app or clear
its storage from Settings › Apps › BahiSathi › Storage. On the web,
clear this site's data for
app.bahisathi.comin your browser settings. - Request deletion of collected data — email appsyoda@gmail.com. Because the analytics identifier is random and not tied to any account, please include the approximate dates you used the app so we can locate the records.
- Depending on where you live, you may have additional rights of access, correction or erasure under laws such as India's Digital Personal Data Protection Act or the GDPR. Contact us at the address above to exercise them.
11. Children
BahiSathi is a business tool intended for people running a business. It is not directed at children, and we do not knowingly collect data from children under 13.
12. Security
Data on your device is held in the app's private storage, which Android isolates from other apps. Data sent to Firebase is encrypted in transit. No method of storage or transmission is perfectly secure, but because your business records never leave your device, there is no server of ours holding them to be breached.
13. Changes to this policy
If this policy changes materially — for example if a future version of the app adds cloud sync or accounts — we will update this page and change the date at the top, and where the change is significant we will note it in the app's release notes.