Privacy Policy — Customer App

1. Introduction

This Privacy Policy explains how Rog (“Rog”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you use the Rog customer application and related services that let you find, book, and pay for electric-vehicle charging (together, the “Customer App” or “Services”).

Rog operates from Rog — Headquarters, Coonoor, The Nilgiris, Tamil Nadu, India. By creating an account or using the Customer App, you acknowledge that you have read and understood this Policy. Where the law requires your consent, we will ask for it separately and clearly.

2. Who this applies to

This Policy applies to individuals who use the Customer App as EV drivers or account holders (“you”). Separate policies apply to charging hosts (see the Host Privacy Policy) and to visitors of our website. If you are under 18, please use the Services only with the involvement of a parent or guardian; we do not knowingly collect data from children without verifiable parental consent as required by law.

3. Personal data we collect

We collect the following categories of personal data, depending on how you use the Services:

4. How and why we use your data

We use personal data to:

• create and manage your account and authenticate you;
• show nearby chargers, availability, pricing, and directions;
• enable bookings, start and meter charging sessions, and process payments;
• provide receipts, support, and dispute resolution;
• keep the Services safe, prevent fraud, and enforce our terms;
• improve reliability and develop new features (using aggregated or de-identified data where possible);
• send service messages and, with your consent, promotional messages you can opt out of at any time; and
• comply with legal obligations.

5. Consent and lawful basis

We process personal data on the lawful bases available under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable law — principally your consent, and where permitted, for “certain legitimate uses” such as providing a service you have requested. You may withdraw consent at any time (see Your rights); withdrawal does not affect processing already carried out and may limit features that depend on that data.

6. How we share data

We do not sell your personal data. We share it only as needed to run the Services:

• Charging hosts & sites: limited information required to authorise and complete a session (for example, that a valid session is in progress). We aim to minimise what is shared.
• Payment processors & banks: to process transactions and settle payments.
• Service providers: cloud hosting, mapping, analytics, communications, and customer-support vendors bound by confidentiality and data-protection obligations.
• Legal & safety: authorities, regulators, or others where required by law, to protect rights and safety, or to prevent fraud.
• Corporate events: in connection with a merger, financing, or reorganisation, subject to this Policy.

7. Data retention

We keep personal data only as long as necessary for the purposes above, including to provide the Services, comply with legal, tax, and accounting requirements, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymise it. Retention periods will be documented in our internal data-retention schedule.

8. Security

We use reasonable technical and organisational measures — such as encryption in transit, access controls, and hashed credentials — to protect personal data, consistent with the IT Act, 2000 and the DPDP Act. No system is perfectly secure; if a personal-data breach occurs, we will notify affected individuals and the Data Protection Board of India as required by law.

9. Your rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we process about you;
• request correction, completion, updating, or erasure of your personal data;
• withdraw consent and opt out of marketing;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance and, where applicable, complain to the Data Protection Board of India.

To exercise any right, contact our Grievance Officer below. We may need to verify your identity before acting.

10. Location and permissions

Location powers core features like finding nearby chargers and navigation. You can control location, camera, notification, and other permissions in your device settings. Turning off location may prevent some features from working.

11. Cookies and analytics

Our app and website use cookies and similar technologies and analytics tools to remember preferences, keep you signed in, and understand usage so we can improve the Services. You can manage cookies through your browser or device settings.

12. Data transfers

Your data is primarily processed in India. If we transfer personal data outside India (for example, to a cloud provider), we will do so only as permitted under the DPDP Act and applicable restrictions, and will take steps to protect it.

13. Children

The Services are intended for adults who drive EVs. We do not knowingly process the personal data of children except as permitted by law and with verifiable parental consent, and we do not undertake tracking or targeted advertising directed at children.

14. Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. We will post the updated version with a new “last updated” date and, where the change is significant, notify you in the app or by other means.

15. Grievance Officer & contact

For any question, request, or complaint about this Policy or your personal data, contact:

Grievance Officer
Rog
Email: rogenergies@gmail.com
Rog — Headquarters, Coonoor, The Nilgiris, Tamil Nadu, India

We will acknowledge and address grievances within the timelines required by applicable law. (Appoint a named Grievance Officer before launch.)