Privacy Policy

1. Who We Are

Tru Commerce Private Limited ("we", "our", or "us") operates the tru mobile application ("App", published as "tru" on Google Play; formerly TruGrocery). Our registered address is 3051/J-901, Akme Ballet, K R Puram Hobli, Doddanekundi, Bengaluru Urban, Karnataka – 560037.

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian laws.

2. Information We Collect

When you use the App, we collect the following personal data:

• Phone number — collected at registration for identity verification via one-time password (OTP).
• Name — first and last name, provided during profile setup.
• Delivery address — apartment name, flat number, and locality, used to fulfil your orders.
• Order history — products ordered, quantities, prices, and order status.
• Wallet transactions — credits, debits, and balance associated with your TruGrocery Wallet.
• Location — your precise device location (GPS), used only in the foreground while you pick a delivery address on the map, to place your pin and check that you are inside our delivery area. You can always type an address manually instead.
• Device push token — an identifier issued by Google Firebase Cloud Messaging that lets us send order updates and offers as push notifications to your device.

In-app payments are processed by our payment partner, Cashfree Payments. Your card, UPI, or netbanking details are entered directly with Cashfree during checkout — we never receive or store your full payment instrument details on our servers.

3. How We Use Your Information

We use your personal data to:

• Verify your identity and create your account.
• Process and deliver your orders.
• Send order confirmations and delivery updates via SMS and push notifications.
• Resolve disputes and provide customer support.
• Improve our service and detect fraudulent activity.

4. Sharing of Information

We share your data only as necessary to operate the service:

• Cashfree Payments (payment processing) — receives the details needed to process your payment, such as the order amount and your phone number. Payment details you enter at checkout go directly to Cashfree and are handled under RBI regulations.
• Google Firebase Cloud Messaging — issues and processes your device push token so we can deliver push notifications.
• Google Maps Platform — powers the address map in the App and receives your location while you use it to pick an address.
• MSG91 (SMS gateway) — receives your phone number to deliver OTP and transactional SMS messages.
• Cloudinary — stores product images (does not process your personal data).
• Legal obligations — we may disclose your data if required by law, regulation, or court order.

We do not sell, rent, or trade your personal data to any third party.

5. Data Storage and Security

Your data is stored on servers operated by our cloud infrastructure provider. We use industry-standard measures — including HTTPS encryption in transit and access controls at rest — to protect your personal data. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active, or as required by applicable law. You can delete your account and associated data directly in the App (Profile → menu → Delete account), or follow the steps on our account deletion page. You may also write to us at support@trugrocery.in.

7. Your Rights

Under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw consent and request erasure of your data.
• Nominate a person to exercise your rights on your behalf.

To exercise any of these rights, contact our Grievance Officer at support@trugrocery.in.

8. Children's Privacy

The App is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with their data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by SMS. Continued use of the App after changes constitutes your acceptance of the updated policy.

10. Grievance Officer

In accordance with the DPDP Act, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you may raise any grievance with:

Please raise grievances within 30 days of the relevant event. We will respond within 15 working days.