BusinessSetu Workspace (displayed on your phone as BusinessSetu) is provided by Big Helpers Software and Solutions Private Limited. The app lets authorized business users manage their workspace. Doctor and clinic workspaces are available first. A clinic's name, logo and colours identify that client, not a separate app publisher.
Information processed
- Your account: name, email, account identifier, sign-in credentials and workspace membership. Credentials are sent over HTTPS for authentication; passwords are stored on the server as one-way hashes. The app stores a session token using the device's secure storage.
- Clinic setup: doctor name, qualifications, self-declared registration details, clinic contacts and address, opening hours, consultation fees and UPI payment address.
- Patient identity and visits: patient names, optional contact details and date of birth, clinic and BusinessSetu patient identifiers, guardian details where provided, consent and contact authorizations, appointment requests, scheduling decisions, arrival/check-in codes, queue events and visit history. A shared family phone is a contact channel; it does not automatically combine different patients' records. Patients can be registered without a phone.
- Consultation and documents: visit reasons, findings, diagnoses, clinician-entered prescriptions, investigations, advice and advised follow-up dates; PDF, photo and image records supplied by a patient, doctor or authorized staff. Records include their source, review status, revisions and access/share events. These can contain sensitive health information. Staff drafts are distinct from doctor-verified consultation records.
- Invoices and receipts: itemised clinic charges, discounts and entered taxes, payment claims, cash/UPI amounts and references, advances, allocations, corrections and recorded refunds. Recording a payment or refund does not itself transfer money or automatically verify a bank transaction.
- Communications: WhatsApp messages and delivery information needed to operate the clinic's booking and notification service, and support information you choose to send us.
- App and security information: the fixed mobile-app label, app version, session records and operational/security logs. The Android app does not send a device-specific name or advertising identifier. On iOS, if you enable notifications, the service stores an Apple push token and sends notification content through Apple's push service.
Purposes and recipients
We use this information to authenticate users, display the correct client's workspace, register patients, manage appointments and arrival queues, maintain consultation records, share permitted documents, communicate clinic decisions, prepare invoices and receipts, reconcile recorded payments, provide support and protect the service. BusinessSetu does not sell personal data or use it for advertising tracking.
Information is processed by Big Helpers and its hosting providers. Meta processes WhatsApp telephone numbers, messages, and delivery information when the clinic uses WhatsApp, including an invoice PDF or private link when an authorized user requests that delivery. Apple processes push tokens and notification content when iOS notifications are enabled. A clinic's authorized members can access records as allowed by their role. External payment and map services receive information when you choose to open them; those services have their own privacy policies. Their processing may occur outside India.
With confirmed identity and consent, the clinic can create a private, expiring care link for a patient or authorized carer. That link shows the verified consultation and permitted documents for the selected visit and may allow uploads. Invoice links separately show the relevant bill and payment information. Anyone who receives a forwarded private link can use its granted access until it expires or is revoked. Keep these links private and ask the clinic to revoke a link sent to the wrong person. A waiting-room display shows queue tokens rather than patient names, contact details or medical records. Scanning the public clinic poster does not open a patient's care record.
Your controls
You can edit clinic details when your role permits, sign out to remove this app's saved session, and disable notifications in your phone's settings. Advanced clinic tools open in your browser and require their own signed-in clinic session; signing out of the mobile app does not sign out of that separate browser session. File uploads use the document or photo chooser when you choose to upload; the current mobile doctor flow does not require access to your address book, SMS inbox, microphone, HealthKit or Health Connect.
Clinics can revoke care/invoice links and withdraw document sharing using the relevant visit controls. Revocation stops future access through the link; it cannot remove a copy already downloaded or printed by an authorized recipient. Contact the clinic or our privacy address to request correction, access or deletion of patient information, or to change the permitted WhatsApp recipient. Withdrawing messaging permission does not erase required clinic records.
BusinessSetu is a clinic administration and record-keeping tool for adult business users. Clinics are responsible for obtaining appropriate patient or guardian permission before adding patient information or sending messages. The software records decisions entered and verified by the responsible clinician; it does not generate diagnoses, recommend treatment or provide an emergency service.
Retention and deletion
Account and workspace records are retained while needed to provide the service. You can request permanent deletion of your account and associated personal data, or request a copy or correction by emailing contact@bighelpers.in. We aim to complete verified deletion requests within 30 days. Sign-out or account deactivation alone is not deletion.
Some invoice, payment, security or clinical records may need to be retained for a legal obligation, fraud prevention or a clinic's responsibility for its patient records. We will explain any applicable exception, the records retained and the relevant retention period when handling your request. A staff member's request does not authorize deletion of another person's account or every record belonging to a shared clinic. Retained records remain access-controlled.
Contact and changes
For privacy questions or requests, contact contact@bighelpers.in. You can use the same address without reinstalling the app. Changes to this mobile policy are published here with the updated date.