TrueBHK Community Privacy Policy

TrueBHK is the data fiduciary for the personal data processed in the app. Each community on TrueBHK Community is run by its own residents’ association or committee (“community admins” and “mods”). They decide who joins their community, moderate it, and keep its finance records. When they do so they act within the app, under this policy.

Contact us about privacy at support@truebhk.com.

Account and profile

• Your sign-in identity from Firebase Authentication: your mobile number (phone sign-in), or your name, email and profile photo (Google or Apple sign-in).
• Profile details you add: name, photo, short bio, and your directory choices (whether to appear in the member directory and show your unit or phone number).

Joining a community

• The community you ask to join, your building or phase and flat or plot number, and whether you live there as an owner, tenant or family member.
• The name and mobile number you enter on the join form, an optional note, and an optional proof of residence (for example a sale deed, rental agreement or utility bill) that you choose to upload.
• The outcome of your request, the mod’s note, and your role in the community.

What you post and do in the community

• Posts, photos, comments, reactions, announcements, polls and your votes, events and your RSVPs.
• Marketplace and rental listings with their photos, enquiries you send or receive, carpool rides and seat requests, local service recommendations and reviews, amenity bookings, and content you report.

Community finances

• Maintenance payments you submit: amount, purpose, UPI or bank transaction reference (UTR) and an optional payment screenshot.
• Your maintenance dues plan and the payments recorded against it by your community’s mods.

TrueBHK does not collect, process or hold your money. You pay your community’s association directly through your own UPI or bank app; we never see your card, UPI PIN or bank login.

Device and usage data

• A push notification token for your device (Firebase Cloud Messaging), so we can send you notifications you have allowed.
• App usage and diagnostic events through Google Analytics for Firebase, such as screens viewed, app version, device model, operating system and approximate region (derived from your IP address).
• On the website, cookies that keep you signed in. They are strictly necessary and are not used for advertising.
• Security records such as the time of actions, rate-limit counters and an audit log of moderator and admin actions.

The app does not access your contacts, precise location, microphone or call logs. It asks for notification permission, and opens your camera or photo library only when you choose to attach a photo.

• To create your account, sign you in securely and keep your session active.
• To let your community’s mods verify that you live there before you can see community content.
• To run the features you use: the feed, events, polls, marketplace, rentals, carpool, services, amenities, gallery and finance.
• To send notifications about your activity and your community (for example approvals, replies, enquiries, announcements and booking or payment updates). You can turn push notifications off in your device settings.
• To keep the community safe: handling reports, preventing spam and abuse, and investigating misuse.
• To show sponsored content from local businesses inside your community’s feed, measure how many times ads are seen and tapped, and calculate the ad revenue share paid to your community.
• To understand how the app is used, fix problems and improve it.
• To comply with the law and respond to valid requests from authorities.

• Members of your community (only after their own membership is approved) can see your name and photo, your posts, comments and reactions, your listings, events and reviews, and your role. Your unit and phone number appear in the member directory only if you choose to show them. Anonymous polls never reveal how you voted.
• Your community’s mods and admins can additionally see your join request (including the mobile number and proof you submitted), reports about content, and the payments you submit and your dues status, so they can verify residents and keep the accounts.
• The community ledger is visible to every member of that community. Maintenance entries may show your unit and amounts paid.
• Building-only posts are shown to residents of the same building or phase, and to mods.
• Rental listings you mark for the TrueBHK network may also be shown to home-seekers on the TrueBHK marketplace (truebhk.app), without your phone number. Listings marked “community only” stay inside your community.
• People you contact, for example when you send an enquiry or request a carpool seat, see your name and message.
• Advertisers never receive your personal data. They only see aggregate numbers per community (for example impressions and clicks).

People outside your community cannot see your community’s content. We do not sell your personal data.

We use trusted providers who process data on our behalf under contract and only on our instructions:

• Google Firebase: sign-in (Authentication), push notifications (Cloud Messaging) and analytics.
• Supabase: our database, file storage (such as photos and proofs) and server functions. Our Supabase project is hosted in the Asia-Pacific (Tokyo) region.
• Cloudflare: image hosting and delivery for community photos and the website.
• Vercel: hosting for the community.truebhk.app website.

Some of these providers store or process data outside India. We transfer data only to countries that are not restricted under the DPDP Act, and we require providers to protect it with appropriate safeguards.

• Within the TrueBHK group of services, for example to show your network rental listing on the TrueBHK marketplace, or when you separately use TrueBHK Manage.
• When required by law, court order or a lawful request from a government authority, or to protect the rights, safety and property of our users, the public or TrueBHK.
• If TrueBHK is involved in a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

We keep your account and community data while your account is active. If you leave or are removed from a community, your membership record is kept (marked as removed) so the community’s history stays accurate, and you can ask to join again.

When you ask us to delete your account, we delete or permanently de-identify your personal data within 30 days. Exceptions: records we must keep by law (for example for tax, accounting or legal claims), backups that are overwritten on a regular cycle, and finance entries your community’s association needs for its accounts. These are kept without your profile and only for as long as necessary. Content you posted in a community is removed or attributed to a deleted user.

• Access and correction: see and edit your profile in the app at any time, and ask us for a summary of the personal data we hold about you.
• Privacy controls: choose in Profile → Privacy whether you appear in the member directory and whether your unit and phone number are shown.
• Deletion: in the app go to Profile → Settings → Delete my account, or email support@truebhk.com from your registered email or phone number. We complete deletion within 30 days.
• Withdraw consent: you can withdraw consent by deleting your account. This does not affect processing already done.
• Notifications: turn push notifications off in your device settings.
• Nominate: you may nominate another person to exercise your rights in case of death or incapacity, by writing to us.
• Grievances: contact our Grievance Officer (below). If you are not satisfied with our response, you can complain to the Data Protection Board of India.

We respond to requests within 30 days, and may need to verify your identity first.

Data is encrypted in transit (HTTPS/TLS) and at rest by our providers. Access to community data is enforced in the database itself: you can only read a community’s content after your membership is approved, and mod tools are restricted by role. Proofs of residence and payment screenshots are stored privately and can be opened only by you and your community’s mods, through short-lived links. Admin actions are recorded in an audit log. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and the authorities as the law requires.

The app is meant for adults aged 18 and over. Children under 18 may use it only through a parent or guardian, who must give verifiable consent and remains responsible for their use. We do not knowingly track children’s behaviour or show them targeted advertising. If you believe a child has created an account without consent, contact support@truebhk.com and we will delete it.

We may update this policy as the app changes or the law requires. We will update the date at the top. For significant changes, we will also notify you in the app before they take effect.

For questions, requests or complaints about your personal data, write to our Grievance Officer at support@truebhk.com with the subject “Privacy”. Please include the mobile number or email you sign in with. We acknowledge complaints within 24 hours and resolve them within 15 days.

Community-specific questions (for example why a join request was declined, or a correction to your dues) are best raised with your community’s admins, whom you can reach in the app.