# Privacy Policy — Digital Bhishi
**Effective Date:** May 19, 2026
**Last Updated:** May 19, 2026
**App Name: Online Bhishi
**Package Name: com.online.bhishi.app
**Developer/Company: Mr Network
**Contact Email:** mrnetwork1026@gmail.com
---
## 1. Introduction
Welcome to Digital Bhishi ("we", "our", or "us"). Digital Bhishi is a mobile application that helps users create, manage, and participate in Bhishi (chit fund) groups digitally.
We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
Please read this policy carefully. If you disagree with its terms, please discontinue use of the application.
---
## 2. Information We Collect
### 2.1 Personal Information You Provide
When you register and use Digital Bhishi, we collect the following information:
**Account Information:**
- Full name
- Mobile phone number
- Email address
- Password (encrypted)
- Date of birth
- Gender
**Address Information:**
- Address line 1 and 2
- City, State, Pincode
**Emergency Contact Information:**
- Emergency contact name
- Emergency contact phone number
- Relationship to emergency contact
**Bank and Payment Information:**
- Bank name
- Account holder name
- Bank account number (stored in masked format)
- IFSC code
- UPI ID
**Identity Verification (KYC) Documents:**
- Aadhar card number (stored in masked format)
- PAN card number
- Aadhar card photo
- PAN card photo
- Profile photo
**Payment Proof Information:**
- Payment screenshots uploaded by users
- UPI transaction IDs
### 2.2 Information Collected Automatically
When you use our application, we automatically collect:
- Device information (device type, operating system version)
- App usage data and activity logs
- IP address
- Push notification tokens
- App crash reports and error logs
### 2.3 Information from Third Parties
We do not collect information from third-party sources except as necessary to process payments and verify identity.
---
## 3. How We Use Your Information
We use the information we collect for the following purposes:
**Account Management:**
- To create and manage your user account
- To authenticate your identity when you log in
- To send you account-related notifications
**Bhishi Group Operations:**
- To create and manage Bhishi groups
- To track monthly contributions and payments
- To conduct monthly random draws for winner selection
- To manage payout schedules
**KYC Verification:**
- To verify your identity as required
- To comply with applicable financial regulations
- To prevent fraud and unauthorized access
**Payment Processing:**
- To display payment QR codes from group owners
- To process and verify payment proof submissions
- To maintain payment records and history
**Communications:**
- To send payment reminders and notifications
- To notify you of draw results and winner announcements
- To send KYC verification status updates
- To send important app updates and announcements
**Security and Fraud Prevention:**
- To detect and prevent fraudulent activity
- To monitor for unauthorized access attempts
- To maintain the security of our platform
**Legal Compliance:**
- To comply with applicable laws and regulations
- To respond to legal requests from authorities
- To enforce our Terms of Service
---
## 4. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
### 4.1 Within the App
- **Group Members:** Your name and payment status may be visible to other members within your Bhishi group
- **Group Owners:** Owners can view member names, phone numbers, and payment proof submissions for groups they manage
- **Administrators:** App administrators can view member and owner information for KYC verification and support purposes
### 4.2 Service Providers
We may share information with trusted third-party service providers who assist us in operating our application:
- **Cloud Storage (Cloudinary):** For storing uploaded documents, photos, and QR codes
- **Database Hosting:** For secure storage of application data
- **Push Notification Services:** For sending notifications to your device
All service providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.
### 4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities such as a court or government agency.
### 4.4 Business Transfers
If Digital Bhishi is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
---
## 5. Data Storage and Security
### 5.1 Data Storage
Your data is stored on secure servers hosted in India. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
### 5.2 Security Measures
We use the following security measures to protect your data:
- **Encryption:** All passwords are encrypted using bcrypt hashing
- **HTTPS/SSL:** All data transmission is encrypted using SSL/TLS
- **JWT Authentication:** Secure token-based authentication for API access
- **Access Controls:** Role-based access control to limit data access
- **Masked Storage:** Sensitive data like Aadhar and account numbers are stored in masked format
### 5.3 Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal compliance.
---
## 6. Your Rights and Choices
You have the following rights regarding your personal information:
### 6.1 Access and Correction
You can access and update your personal information at any time through the Profile section of the app. You can update:
- Personal details (name, email, phone)
- Address information
- Bank details
- Emergency contact information
### 6.2 Account Deletion
You can request deletion of your account by contacting us at support@digitalbhishi.com. Please note that:
- Account deletion requests will be processed within 30 days
- Some information may be retained as required by law
- You cannot delete your account if you are an active member of an ongoing Bhishi group
### 6.3 Withdraw Consent
You may withdraw consent for certain data processing activities. However, withdrawal of consent may prevent you from using certain features of the app.
### 6.4 Data Portability
You can request a copy of your personal data by contacting our support team.
### 6.5 Opt-Out of Notifications
You can manage push notification preferences through your device settings. However, certain important notifications (such as payment reminders and KYC updates) are essential for the app's functionality.
---
## 7. KYC Documents and Identity Verification
### 7.1 Why We Collect KYC Documents
We collect KYC (Know Your Customer) documents including Aadhar card and PAN card as required to:
- Verify the identity of users participating in financial transactions
- Comply with applicable Indian financial regulations
- Prevent fraud and money laundering
- Build trust within Bhishi groups
### 7.2 How KYC Documents Are Handled
- KYC documents are uploaded and stored securely on Cloudinary servers
- Document photos are accessible only to authorized administrators and group owners for verification purposes
- Aadhar numbers are stored in masked format (XXXX XXXX 1234)
- KYC documents are used solely for identity verification purposes and are not shared with third parties
### 7.3 KYC Verification Process
- KYC submissions are reviewed manually by authorized group owners or administrators
- Verification decisions are communicated to users via in-app notifications
- Users can resubmit documents if their KYC is rejected
---
## 8. Payment Information
### 8.1 Payment Processing
Digital Bhishi does not process payments directly. Our payment system works as follows:
- Group owners upload UPI QR codes for payment collection
- Members make payments directly through their preferred UPI app (GPay, PhonePe, Paytm, etc.)
- Members upload payment screenshots and transaction IDs as proof
- Group owners verify payment proofs manually
### 8.2 Payment Data Storage
- Payment proof screenshots are stored securely on our servers
- Transaction IDs provided by users are stored for verification purposes
- We do not store complete bank account details in a way that enables financial transactions
- Payment history is retained for record-keeping purposes
---
## 9. Children's Privacy
Digital Bhishi is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@digitalbhishi.com and we will delete such information.
Our KYC verification process includes age verification to ensure all users are 18 years or older.
---
## 10. Third-Party Services
Our application uses the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudinary | Document and image storage | cloudinary.com/privacy |
| Expo (React Native) | App development platform | expo.dev/privacy |
| Google Play Services | App distribution and notifications | policies.google.com/privacy |
We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.
---
## 11. Push Notifications
We send push notifications for the following purposes:
- Monthly payment reminders
- Winner announcement notifications
- KYC verification status updates
- Group activation notifications
- Payment verification confirmations
- General app announcements
You can disable push notifications at any time through your device settings. Disabling notifications will not affect your ability to use the app.
---
## 12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Sending you a push notification
- Updating the "Last Updated" date at the top of this policy
Your continued use of the app after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
---
## 13. Compliance with Indian Laws
Digital Bhishi complies with applicable Indian data protection laws including:
- **Information Technology Act, 2000** and its amendments
- **Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011**
- **Digital Personal Data Protection Act, 2023** (as applicable)
We process your personal data only for lawful purposes and with appropriate consent where required.
---
## 14. Grievance Redressal
In accordance with the Information Technology Act 2000 and rules made thereunder, if you have any grievances regarding the processing of your personal data, you may contact our Grievance Officer:
**Grievance Officer**
Digital Bhishi
Email: grievance@digitalbhishi.com
Response Time: Within 30 days of receipt of complaint
---
## 15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
**Digital Bhishi Support Team**
Email: mrnetwork1026@gmail.com
App: Online Bhishi (com.online.bhishi.app)
We will respond to your inquiry within 7 business days.
---
## 16. Consent
By downloading and using the Digital Bhishi application, you:
- Acknowledge that you have read and understood this Privacy Policy
- Consent to the collection, use, and sharing of your information as described in this policy
- Confirm that you are at least 18 years of age
- Agree to notify us if any information you have provided changes
---
*This Privacy Policy was last updated on May 19, 2026.*
*Digital Bhishi — Making Bhishi Simple and Digital*