Terms and Conditions

Version 4.0 - 07/11/2025 

1 Introducing the Truyu App 

The Truyu App is designed for compatible Apple devices and Android devices. 

A reference to the ‘Truyu App’ or ‘App’ will refer to Truyu iOS or Truyu Android Apps downloaded from the applicable App store and accessed locally on your device. 

In order to use certain Services offered through the Truyu App, you will need to register using a valid email address and Australian mobile phone number.  We will let you know through the App when this is required.  

These Truyu App Terms and Conditions govern your use of the Truyu App and your access to and use of the Services, together with the terms and conditions of your accounts used in connection with the Truyu App. 

In this document, “we”, “us”, “our”, or “Truyu” means CBA New Digital Businesses Pty Ltd trading as Truyu App ABN 38 633 072 830. Truyu is a brand of CBA New Digital Businesses Pty Ltd ABN 38 633 072 830. CBA New Digital Businesses Pty Ltd is a wholly owned but non-guaranteed subsidiary of the Commonwealth Bank of Australia ABN 48 123 123 124 (“CBA”). CBA New Digital Businesses Pty Ltd is not an Authorised Deposit-taking Institution for the purposes of the Banking Act 1959 and its obligations do not represent deposits or other liabilities of Commonwealth Bank of Australia. 

1.1 Your contract with us 

By downloading the Truyu App and/or entering your details where required for certain Services offered in the App, you confirm that you agree to be bound by these terms and conditions (Terms and Conditions), including that you agree to receive any terms and conditions from us electronically. If you do not wish to be bound by these Terms and Conditions, you should not access the Truyu App and stop using it immediately (including, by (a) deleting your account in the App or sending us an email at contact@truyu.com.au, (b) cancelling any ongoing subscription, and (c) uninstalling the App. 

Certain parts of the App or Services we make available may be subject to separate or additional terms. Your use of those parts of the App or Services constitutes your acceptance of those terms and conditions in addition to these Terms and Conditions. 

1.2 Accessing Truyu 

To use the Truyu App, you will need to: 

  • be an individual; 
  • confirm that you are aged 18 years or over; and 
  • provide all information required by or through the App. 

Unless expressly provided otherwise in these Terms and Conditions, if you use the Truyu App or Services in it, then you agree that: 

  • you will not use another person’s email address, identity or contact details to register for Services within the Truyu App, where applicable; 
  • you will not sell, transfer, or assign any rights you have in relation to the App or the Services, including sharing your access or information from the App or the Services with any other person; 
  • you are solely responsible for maintaining the confidentiality of any password you use with this App and Services provided through it (including where your fingerprint or facial image is used as your password), and any secure codes and login information required for restricting access to the device on which the App is used or installed; 
  • you will comply with any instructions or guidelines provided by or on behalf of Truyu; 
  • you are solely responsible for all activities that occur within the App (including where your fingerprint or facial image is used as your password), secure codes and login information, whether or not you authorise the activity; 
  • you will contact the team at contact@truyu.com.au to re-create your account if your device (which is tied to your registered account) is lost or changed; 
  • we will not be liable for any loss or damage that you or any third party suffer, howsoever caused, as a result of your failure to comply with your obligations in these Terms and Conditions; 
  • we may reject the use of any email address, phone number or password (including fingerprint functionality or facial recognition) to register for certain Services within the Truyu App where we reasonably believe it necessary to protect your or our security; and 
  • we may reject the use of your fingerprint or facial image (through facial recognition identification) where we reasonably believe it necessary to protect your or our security. 
1.3 Acceptable Use Policy 

You may not use the App to engage in conduct that, in our opinion: 

  • is unlawful; 
  • interferes with any other person’s access to the Truyu App; 
  • poses a risk to the security or availability of our App or Services; 
  • interferes with our operation of the system; 
  • is defamatory, harassing or threatening to any person; 
  • promotes or encourages physical or mental harm of any person; 
  • promotes violence against any person; or 
  • threatens or promotes terrorism or money laundering. 

In the event that you fail to comply with our Acceptable Use Policy terms as detailed in this clause above, Truyu may without notice and immediately or at any time: 

  • refuse to process or complete any request of yours; and/or 
  • suspend or discontinue your access to the App and any Truyu Services. 
1.4 Provision of App and Truyu Services 

By downloading the Truyu App, you become a Truyu user. As a Truyu user, you will have access to the Truyu Services that are made available to you through the App. The Truyu Services are summarised below and further described in these Terms and Conditions. Certain Truyu Services will require you to sign up and create an account, as well as other requirements such as those associated with verifying your identity.  We set these out in more detail below.  

The Truyu Services include:  

  • Truyu Free Services; and  
  • Truyu Paid Services.    

These Services are set out in the table directly below.  For each Service, a breakdown and related tasks and terms and conditions are described further below in clauses 1.6 Truyu Free Services and 1.7 Truyu Paid Services.

Service Summary

Service Feature Free Service Paid (Subscription) Service
Scam Checker Included. Included.
Email Leak Included. Included.
Card Leaks* One-off scan of up to 5 cards. Ongoing monitoring of up to 5 cards.
Identity Check Alerts* One-off scan of past 180 days. Ongoing monitoring.
Dark Web Leaks* One-off scan of existing exposure. Ongoing monitoring.
Credit Activity Alerts* Ongoing monitoring.

*indicates that identity verification is required for this service as described in clause 1.5 (Verifying your identity).

For extra support, we may refer you to IDCARE for additional assistance. IDCARE are an identity and cyber support service, who can provide additional support and guidance in responding to alerts. Your access and use of any guidance or service provided by IDCARE is strictly subject to your contract with IDCARE. We do not endorse or warrant IDCARE products or services. 

1.5 Verifying your identity

To access some of the Truyu Services, your identity will need to first be verified.  This means that you will need to have successfully completed an external identity document verification service (a) provided by GBG ANZ Pty Ltd (GBG), our Third Party Service Provider (defined below) and (b) using “GreenID” technology provided by GBG. GBG will use “GreenID” technology to match your identification documents (e.g. Australian Driver’s Licence or Australian Passport) with biometric data that you will be asked to provide to GBG for the purpose of verifying your identity.  This technology uses third party systems which match your identity information against information held by the document issue holder or official record holder or alternative sources. 

1.6 Truyu Free Services  

Truyu Free Services are the services available to you free of charge after you download the Truyu App.  As set out in these Terms and Conditions, Truyu Free Services may (a) require you to register an account with Truyu, (b) have additional eligibility requirements, and (c) require you to verify your identity.   

Truyu Free Services are summarised below. 

  • Scam Checker Service 

Truyu’s Scam Checker Service allow you to upload messages through the App that may potentially be scam messages for an automated review.  Use of this Service is subject to the terms set out in Schedule A of these Terms and Conditions.  

  • Email Leaks Service   

Truyu’s Email Leaks Service is provided to you via the App.  It includes the ability for you to access the Have I Been Pwned? (HIBP) Email Monitoring Service, which is supported by our Third Party Service Provider Superlative Enterprises Pty Ltd. Use of this Service is subject to the terms set out in Schedule B of these Terms and Conditions. 

To use the following Truyu Free Services, a user must first successfully complete the identity verification procedures outlined in clause 1.5 Verifying your identity.

  • Truyu’s Card Leaks Service

Truyu’s Card Leaks Service is provided to you via the App and includes the ability for you to check if your card number may have been leaked online based on information provided by our Third Party Service Provider. Use of this Service is subject to the terms set out in Schedule C - Card Leaks Service of these Terms and Conditions, including restrictions on this Service when you use it as a Free Service (vs Paid Service).

  • Truyu’s Identity Check Alerts Service

Truyu’s Identity Check Alerts Service is provided to you via the App and includes the ability for you to check if your identity (including name, date of birth and other identity documents) has been used at participating Australian merchants for identity verification purposes in the past 180 days. Use of this Service is subject to the terms set out in Schedule D - Identity Check Alert Service of these Terms and Conditions, including restrictions on this Service when you use it as a Free Service (vs Paid Service).

  • Truyu’s Dark Web Leaks Service

Truyu’s Dark Web Leaks Service is provided to you via the App and includes the ability for you to check if your personal details have been exposed in certain online locations based on information provided by our Third Party Service Provider, which includes information from public forums, Deep Web and the Dark Web. Use of this Service is subject to the terms set out in Schedule F - Dark Web Leaks Service of these Terms and Conditions including restrictions on this Service when you use it as a Free Service (vs Paid Service).

1.7 Truyu Paid Services

Truyu Paid Services are Subscription Services available through the Truyu App for a fee. To use the Paid Services, an eligible user must first successfully complete the identity verification procedures outlined in clause 1.5 Verifying your identity.

For more information on the fees associated with these Paid Services, see clause ‍‍15.1 Fees of these Terms and Conditions. 

The Truyu Paid Services are summarised below in this clause. 

  • Identity Check Alerts Service 

The Identity Check Alerts Service notifies users when their identity (including name, date of birth and other identity documents) is used at participating Australian merchants for identity verification purposes. For detailed terms and conditions related to this Paid Service, please refer to Schedule D - Identity Check Alert Service of these Terms and Conditions.  

  • Credit Activity Alerts Services 

The Credit Activity Alerts Service notifies users when an enquiry is made on their Experian credit file, being notification updates on new credit file enquiries and account openings. For detailed terms and conditions for this Paid Service, please refer to Schedule E - Credit Activity Alert Service of these Terms and Conditions.

  • Truyu’s Card Leaks Service

If this Service is made available to you, in addition to the Card Leaks Service available through the Free Services, you may choose an option to monitor your card number on an ongoing basis, and receive alerts when your card number may have been leaked online. Use of this ongoing Service is subject to the terms set out in Schedule C - Card Leaks Service of these Terms and Conditions.

  • Truyu’s Dark Web Leaks Service

If this Service is made available to you, in addition to the Dark Web Leaks Service available through the Truyu Free Services, Truyu’s Dark Web Leaks Service notifies you on an ongoing basis when your personal details may have been exposed online, including through public forums, Deep Web and the Dark Web. Use of this Service is subject to the terms set out in Schedule F - Dark Web Leaks Service of these Terms and Conditions.

1.8 Third Party Service Providers

The Truyu Services (including any Content) are reliant on certain input, data, information, technology, services and support (Third Party Services) provided by our external third party service providers  (Third Party Service Providers).  Our Third Party Service Providers include  but are not limited to Superlative Enterprises Pty Ltd, GBG ANZ PTY LTD (GBG) and Experian (as defined).  By using any of the Truyu Services, you agree to Truyu’s use of Third Party Service Providers, and acknowledge and agree that Truyu cannot specifically investigate, represent or confirm the accuracy, legality, legitimacy, validity or reliability of data or information provided by you directly to our Third Party Service Providers. 

To the extent permitted by law, we do not: 

  • warrant the availability, accuracy, adequacy or completeness of the Content and you should not rely on the Content as being accurate, error-free, complete or up-to-date. We recommend double checking all details provided to you as part of the Truyu Service before taking any further action, and you should take your own measures to protect yourself from potential harm; and 
  • guarantee that access to the App and Services will be uninterrupted, timely or secure, or that it will always operate as intended. 
  • To the extent permitted by law and except to the extent that any loss or damage suffered by you is  caused by our fraud, negligence, mistake or wilful misconduct, Truyu will not be responsible, liable or held to be in breach of these Terms and Conditions for: 
  • any part of the Truyu Services that relies on Third Party Services; 
  • changes to, or discontinuance of any part of the App or the Services to the extent caused by, or contributed to, by the termination, discontinuance, or withdrawal of a Third Party Service Provider or a customer or subcontractor of a Third Party Service Provider; or 
  • any unavailability of, or errors or omissions associated with, the App or Service, or for any loss or damage incurred as a result of the use of the App or Service to the extent caused by, or contributed to, by our Third Party Service Providers or any Third Party Services. 
1.9  No tailored advice

You acknowledge that in all Truyu Services, we (either directly or through our Third Party Service Providers) do not intend to provide any legal, financial, taxation, accounting or other professional advice. The App and Services do not contain any advice that has been tailored for you or your circumstances. Any advice on the App and Services or contained in any content on the App and Services is general advice only. We make no warranty as to the form, content or appropriateness of the App and Service for you and recommend that you seek legal, financial, accounting and other professional advice in connection with your use of and reliance on the App and Services. 

2 Using the Truyu App 

Unless otherwise stated in these Terms and Conditions, and to the extent permitted by law, you are responsible for the acts and omissions of all users of or individuals who otherwise access your login, account or related Truyu information, including any person you authorise to act for you. All communications and acceptances received by us through the Truyu App from any person using this Truyu App and your email address or other log-in information are deemed to be authorised by you, unless you can prove that you did not authorise the person and that: 

  • without your knowledge your device has been taken over by use of malware despite you having up to date antivirus, antimalware and firewall software installed on your device; and/or 
  • the person gained access to your Truyu account without your approval despite you taking all reasonable precautions to prevent such access; and you did not unreasonably delay in reporting to us the compromise or loss of your device, or that the security of a secure code or method of obtaining a secure code (being the email account and mobile phone number you have registered with Truyu to which you will receive secure codes) has been breached. 

3 Communications with you 

We will send you notifications via a push notification service or we may send you notices through other reminder mechanisms, such as in-app notifications, email, or via SMS.   

Push notifications or alerts will be sent to any compatible Apple or Android device on which (a) you have installed the Truyu App, (b) you have push notifications enabled, and (c) where the device is associated with your mobile number (including for wearables if that becomes an option).  It is important that you consider these requirements to ensure we can communicate with you.   

Depending on your device settings, notifications may be seen by other people (including unauthorised persons) who are able to see your device or any linked peripheral devices (for example, a smart watch). Please check the notifications settings on all your devices to ensure the privacy and notifications settings are appropriate for your use. 

Notifications may include: 

  • secure code information; 
  • account alerts; 
  • security and service alerts; 
  • alerts when new versions or upgrades are available; and 
  • messages from our staff. 

You agree to receive notifications and acknowledge that their delivery may be subject to the quality of your connection and the accuracy of the contact details you have provided. It is your responsibility to check any notification information before acting on it. All notifications will be sent to you and managed in accordance with our Privacy Policy. We reserve the right to suspend, change or discontinue notifications at any time for our legitimate business purposes, including for security purposes. Notifications do not affect your obligation to comply with the terms applicable to any products and services you use via the Truyu App. 

 Sending you marketing and commercial messages  

This clause relates to the marketing and commercial electronic messages we may send you.   

If you provide us with your contact details, (such as your email, telephone number) and other personal information, you agree that we may use them to communicate with you (unless you tell us not to), including: 

  • to send you commercial electronic messages; 
  • for direct marketing purposes; and 
  • to make phone calls to you on an ongoing basis.   

By registering for online services or accessing the Truyu app, you also agree that (unless you tell us not to) we may send you commercial electronic messages and/or direct marketing through these online services and apps (including push notifications, in-app messages and notifications). 

If you use a virtual assistant that is available in our online services or app, you agree that the virtual assistant may send you commercial electronic messages or direct marketing in its responses to the prompts you submit to the assistant.  

We may use third party service providers such as marketing companies or mail houses to send messages on our behalf for direct marketing purposes. You agree that (unless you tell us not to) we may share your personal information with marketing companies or mail houses so they can send you direct marketing messages on our behalf. 

Changing your preferences 

We will provide you with options you may use to opt out of receiving commercial electronic messages we send you and to choose the way we send them to you.  While in some cases one of the options may be an unsubscribe facility, you agree we are not required to include an unsubscribe facility in commercial electronic messages we send you. 

Opting out of commercial electronic messages may impact our ability to provide you with information about all the benefits that are available as our customer. There are, however, messages that we must be able to send you and which you will not be able to opt out of receiving.  

Opting out of messages sent by Truyu will not opt you out of receiving messages from CBA or other brands who in the CBA Group where you have agreed to those other brands sending you messages.  If you would like to opt out of receiving commercial electronic messages from other CBA Group brands, please follow the opt out facilities in their communications or as set out in their terms and conditions.

4 Using fingerprint functionality 

If you have the Truyu App installed on a device that has compatible fingerprint functionality available, you may be able to turn on fingerprint access for the Truyu App. Turning on fingerprint access for the Truyu App means that you can access the App using your fingerprint instead of entering a secure code. For certain transactions on the Truyu App you may be prompted to enter a secure code as an additional security measure. 

You must not turn on fingerprint access for the Truyu App if you have any fingerprints stored on any device other than your own. If, after turning on fingerprint access, you allow other people to use their fingerprints on your device, you must first turn off fingerprint access for the Truyu App. 

If you do allow anyone else’s fingerprints to be stored on your device (despite this being against these Terms and Conditions): 

  • they’ll be able to access your accounts and considered authorised to do so; and 
  • to the extent permitted by law, you will be responsible for their actions. 

If you, or someone else, changes the fingerprint settings on your device, as a security measure, fingerprint access may be disabled for the Truyu App and you will be prompted to enter a secure code to log on to the Truyu App. Only re-enable fingerprint access if you are sure the changes made to your fingerprint settings on your device were made by you. 

Fingerprint functionality is technology you may choose to use if it is available on your device and has been enabled by you on your device. Fingerprint functionality is provided by third parties (like Apple) and accordingly, to the extent permitted by law, we are not responsible: 

  • for any malfunction in fingerprint functionality; 
  • if those third parties make any changes to their fingerprint technology that impacts the way you access the App. 

You will still be able to access the Truyu App using a secure code. 

If you choose to use fingerprint access for the Truyu App, you will still need access to your email address and mobile phone number to receive secure codes. You must protect your email address and mobile phone number in the manner outlined in these Terms and Conditions. 

5 Using facial recognition to authenticate to the Truyu App 

If you have the Truyu App installed on a device that has compatible facial recognition available, you may be able to turn on facial recognition access for the Truyu App. Turning on facial recognition for the Truyu App means that you can access the App using facial recognition instead entering a secure code. For certain transactions on the Truyu App you may be prompted to enter a secure code as an additional security measure. 

You must not turn on facial recognition access for the Truyu App if the facial image stored on your phone is not your own. If, after turning on facial recognition, you allow other people to store their face on your device, you must first turn off facial recognition access for the Truyu App. 

If you do allow anyone else’s face to be stored on your device (despite this being against these Terms and Conditions): 

  • they’ll be able to access your accounts and considered authorised to do so; and 
  • to the extent permitted by law, you will be responsible for their transactions. 

If you, or someone else, changes the facial recognition settings on your device, as a security measure, facial recognition may be disabled for the Truyu App and you will be prompted to enter a secure code to log on to the Truyu App. Only re-enable facial recognition if you are sure the changes made to your facial recognition settings on your device were made by you. 

Facial recognition is technology you may choose to use if it is available on your device and has been enabled by you on your device. Facial recognition technology is provided by third parties (such as Apple) and accordingly, to the extent permitted by law, we are not responsible: 

  • for any malfunction in facial recognition; and 
  • if those third parties make any changes to their facial recognition technology that impact the way you access the App. 

You will still be able to access the Truyu App using a secure code. 

If you choose to use facial recognition access for the Truyu App, you will still need access to your email address and mobile phone number to receive secure codes. You must protect your email address and mobile phone number in the manner outlined in these Terms and Conditions. 

6 Protecting against unauthorised access 

‍6.1 Secure codes 

‍When you register for an account within the Truyu App, you will enter and verify your email address and mobile phone number. This email address and mobile phone number will be used by Truyu to send you secure codes, which will allow you to access the Truyu App or perform other operations in the App. 

You can update your email address and mobile number by contacting us at contact@truyu.com.au or in the Truyu App if that functionality is made available to you. Your update of these details may be subject to your ability to verify the existing email address and mobile phone number with a secure code. 

You are responsible for ensuring your email address and mobile phone number are entered correctly in the Truyu App and kept up to date. 

Entering a secure code into the Truyu App incorrectly too many times may result in your access being suspended. If this occurs you will not be able to log in using the Truyu App, and you will need to contact Truyu to regain access. 

In certain scenarios we may require additional verification of log in details or identity. 

‍6.2 Protecting secure codes 

‍You must ensure only you have access to: 

  • your device; 
  • emails sent to your registered email addresses; and 
  • text messages sent to your registered mobile phone number. 

You must never share or let anyone view a secure code – not even family or friends. 

‍6.3 Things you must do 

Things you should do are included below. 

  • lock your device and take any reasonable steps to stop unauthorised use of the Truyu App and disclosure of your account details; 
  • if your device is lost or stolen, notify us immediately; 
  • if you suspect your secure codes have been accessed or are accessible by someone else, notify us immediately; 
  • if you suspect the security of one or more methods of obtaining secure codes has been breached, notify us immediately; and 
  • only install approved applications on your device from a known and reputable app store provider. 
‍6.4 Things you must never do 

You must not: 

  • allow another person to use your device or Truyu login; 
  • leave your device unattended; and/or 
  • use the Truyu App with a device that is not compatible with the Truyu App. 

‍7 Your obligations 

You must: 

  • only use the App for the purpose of receiving the Truyu Services and not for any other purpose; 
  • comply with Truyu’s reasonable instructions and guidelines relating to security requirements from time to time; 
  • not copy, disable, interfere with or make any unauthorised use of any security device or protocol provided by Truyu; 
  • ensure that you do not share your log in identifications or passwords, or any other confidential codes provided to you through the App with other persons; 
  • ensure that all devices used to access the App have up to date anti-virus software installed and operating; and 
  • keep all passwords, secure codes, account names or log in identifications required to access the App secure and confidential. 

You understand and agree that it is your responsibility to evaluate notifications or alerts received via the App and take the appropriate action. 

You must not, either yourself or allow on your behalf any agent or third party to: 

  • misrepresent yourself or disguise the origin of data submitted through the Truyu Services; 
  • access the Truyu Services through any means other than publicly supported interfaces like Truyu’s web application, Truyu’s mobile application or other Truyu-designated channels; 
  • add a large data load on the Truyu Services that consumes extraordinary resources (examples of which include your use of robots, spiders, and automated systems that send more request messages to our servers than a human could reasonably send in the same period of time using a normal browser); and/or 
  • submit data through the Truyu Service that: (a) infringes a third party’s IP rights; and/or (b) contains viruses, bots, worms, scripting exploits or similar materials. 
  • copy any aspect of the App and the Services other than in the ordinary course of the operation, use, or receipt the Truyu Services under these Terms and Conditions; 
  • subject to applicable law, decompile, disassemble, or otherwise reverse engineer any aspect of the App or its associated services or determine any source code, algorithms, methods or techniques used or embodied in the App; 
  • without Truyu’s prior written consent, modify, translate, adapt or otherwise create derivative works based upon, the App or its associated services; 
  • copy ideas, features, functions or graphics of the App for use in another product or service; 
  • use the App directly or indirectly for any activity or upload, store or transmit any data, information or material unlawfully or which prevents any other customer from accessing, using or enjoying the App; 
  • attempt to gain unauthorised access to the App and associated Services or any part thereof, or use another person’s name, registration account, log in identification, secure code or password; 
  • knowingly introduce or transmit any malicious code or other disabling feature to or from the App; 
  • remove, disable or modify any security, anti-virus or other software on the App; 
  • attempt to gain access to any data or information within or through the App, other than the customer’s data; 
  • use the App and associated Services in whole or in part to provide any third party with data obtained in connection with these Terms and Conditions, unless expressly agreed in writing by Truyu; 
  • remove any intellectual property ownership or management information appearing in any part of your device or the App and/or associated Truyu services; and/or 
  • otherwise use the Services unlawfully. 

‍8 Usage and monitoring 

In addition to any monitoring rights provided to us under your separate Apple store and Google Play store terms and conditions that you have agreed separately with Apple and/or Google (as applicable), you understand and agree that Truyu may monitor and measure access to and use of the App and Services by you for the purpose of ensuring: 

  • compliance with these Terms and Conditions;  
  • technical efficiency or security of the App and Truyu Services; and  
  • correctness of billing and subscription information. 

‍9 Warranties 

9.1 General 

To the extent permitted by law, Truyu does not warrant that the Truyu App or Truyu Services will meet any particular customer requirements or that their operation will be entirely error-free or that all defects are capable of correction or improvement. 

Subject to any implied term, condition or warranty imposed by the Competition and Consumer Act 2010 (Cth) (Australian Consumer Law) as amended and/or under similar state legislation, all other warranties including any implied warranties of merchantability, satisfactory quality or fitness for purpose or ability to achieve a particular result are hereby excluded. 

The App and Services are provided "as-is" and as available. To the extent permitted by law, we will not be held liable or provide any warranty for any error, bugs, conflicts, unavailability or incompatibilities which arise from any out of date or unsupported versions of browser software. In particular: 

(a)         while we endeavour to provide a convenient and functional App and Services, we do not guarantee that: 

  • the information and materials found or offered on the App and Services will be suitable for your particular purposes; or 
  • your use of the App and Services will be uninterrupted, error free or that the App and Services is free of viruses or other harmful components; 

(b)          the App and Services may, from time to time, be unavailable due to scheduled maintenance, system or software updates, upgrades, or changes and operational procedures; and 

(c)          we are not responsible for any loss, corruption or interception of data sent to or from the App and Services which occurs outside of our computer systems (such as those which occur while being sent over the internet). 

9.2 Consumer Guarantees 

Truyu Services come with Consumer Guarantees that cannot be excluded under Australian Consumer Law. For major failures with the Services, you are entitled to cancel the Services (and delete the App). Under Australian Consumer Law, you are also entitled to a refund for the unused portion, or to compensation for its reduced value. You are also entitled to choose a refund or replacement for major failures with goods. If a failure with the goods or a service does not amount to a major failure, you are entitled to have the failure rectified in a reasonable time. If this is not done, you are entitled to a refund for the goods and to cancel the contract for the service and obtain a refund of any unused portion. You are also entitled to be compensated for any other reasonably foreseeable loss or damage from a failure in the goods or service. 

9.3 Confidential and up-to-date information 

Subject to our requirements by law, and any other terms and conditions you agree with us, we will take all reasonable steps to ensure that the information available through the App is correct and updated regularly. 

Please refer to our Privacy Policy for how we will handle and protect your account information. 

‍10 Intellectual Property 

You agree that you: 

  • do not have any right, title or interest in or to any proprietary rights relating to the information contained in the App excluding any proprietary information you provide to us in the App, which is subject to the licence terms set out in clause 12 (Licence); and 
  • will not reproduce information obtained by using the App, except where such reproduction is for your own personal non-commercial use in accordance with these Terms and Conditions. 

‍11 Limitations 

Nothing in these terms 

  • excludes, restricts or modifies any guarantee, term, condition, warranty, or any right or remedy, implied or imposed by any law or legislation which cannot lawfully be excluded or limited, including the Australian Consumer Law (defined in clause 9.1 above) which contains Consumer Guarantees that protect the purchasers of goods and services in certain circumstances; and 
  • restricts your right to terminate under clause 15.2 Suspension or termination. 

Subject to the implied or imposed matters set out in the paragraph above (including applicable Consumer Guarantees), to the extent permitted by law: 

  • our liability to you for any claims under or relating to these App Terms and Conditions or arising in connection with your use of the App (including where the App is unavailable), whether in contract, tort (including negligence) or on any other basis, is limited to the supply of the Services again; and 
  • Truyu will not be liable under these Terms and Conditions for any indirect, special or consequential losses (including loss of profits, actual or anticipated revenue, goodwill, use, data or other intangible losses, arising out of or relating to the use of, or inability to use, the App or the Service by you), except to the extent that any loss or damage is caused by the fraud, negligence, mistake or wilful misconduct of us, our employees or agents. 

 Truyu will not be responsible, liable or held to be in breach of these Terms and Conditions for any failure to perform its obligations under these Terms and Conditions or otherwise, to the extent such failure is attributable to: 

  • you failing to comply with your obligations under these Terms and Conditions (including your compliance with any law); 
  • negligence, errors, fraud or other misconduct by you; and/or 
  • any event or matter beyond our reasonable control. 

You understand that the Truyu Services depend on access to the internet to operate. Where internet activity is lost or limited, the Truyu Services may be downgraded or rendered unavailable. 

‍12 Licence 

Subject to these Terms and Conditions, while you are a registered user of the App, Truyu grants you a personal, non-exclusive, non-transferable, limited and revocable license to use the App for personal and/or non-commercial use for the sole purpose of accessing and receiving the Services. 

Any use of the App (in whole or part) in any other manner, including but not limited to, resale, transfer, modification or distribution of the App is prohibited. 

To the extent that you have any proprietary rights in the data captured in connection with your use of the Truyu Services, you grant to Truyu a non-exclusive, worldwide, royalty free licence to: 

  • collect, host, copy, transmit, display and store; and 
  • disclose and provide access to, 

such data as necessary for Truyu to provide the Truyu Services in accordance with these Terms and Conditions. 

‍13 Making a complaint 

If there’s something we can improve, or you’re not satisfied with our products, services, people, or complaint handling process, it’s important we hear about it so we can make things right. 

We will take your complaint seriously, work with you to address your complaint, and try to find a solution that’s fair and reasonable. 

You can make a complaint by emailing us at contact@truyu.com.au.  

What happens when you make a complaint? ‍ 

When you make a complaint, we will: 

  • acknowledge your complaint; and 
  • assess the information and work with you to find a reasonable outcome. 

The App is not provided by Apple, Google or any other third party distributor. Accordingly, any queries or complaints regarding the App (including but not limited to issues relating to intellectual property) should be directed to us. This condition applies for the benefit of Apple, Google and any other third party distributor. 

‍14 Your information 

Truyu collects and stores information when you download, install and use the App, and register for and login to use the App and the Services accessed via the App. 

You must give us accurate and complete information. Otherwise, you may be breaking the law and we may not be able to provide you with the services you require. If you change your personal details (for example, name or email address), you must tell us straight away. 

Our collection, storage and use of your personal information is governed by our Privacy Policy, which can be viewed by https://www.truyu.com.au/privacy-policy 

Our policy includes information about: 

  • the ways we may collect, use or exchange your information; 
  • how you may access and seek correction of the information; and 
  • how to make a complaint about a breach of your privacy rights, and our complaint handling procedures. 

For privacy related enquiries, please contact us using the contact details set out in our Privacy Policy

‍15 Other things you should know 

‍‍15.1 Fees 

If you accept fee-based Subscription Services, you agree to additional terms governing all such purchases as provided to you or posted on the Services to which they apply, including all requirements to pay all applicable fees and taxes and your separate Apple store and Google Play store terms and conditions that you have agreed separately with Apple and/or Google (as applicable). 

Unless otherwise stated, all fees and charges are non-refundable, including for unused portions of cancelled subscriptions. In the event of any failure of the App to conform to any applicable warranty, you may notify Apple or Google (as the case may be), and Apple or Google will refund any Fees paid by you for any fee-based Subscription Services. We do not provide price protection or refunds in the event of a price drop or promotional offering. 

We may offer trial subscriptions to paid Services for free or at special discounted prices. Unless otherwise stated, these trial subscriptions will automatically become paying subscriptions at the current subscription rate if you do not cancel before the end of the promotional / trial period. We may, in our sole discretion, decide to vary or extend any trial subscription (including promotional / trial period) or other promotion. 

If you decide to sign up to our Subscription Service, fees may apply. You must pay us the fees and charges that apply in connection with your use of any fee-based Subscription Service. Details on the Truyu subscription fees is also available on the Truyu website. Fees associated with your subscription may also be presented to you when you request to sign-up to Truyu’s fee-based Subscription Service. 

You can choose to cancel your subscription at any time, via the Apple App Store and Google Play Store, and will continue to receive the full Service, until the end of your current subscription (which may include any promotional / trial period and grace period, as applicable). 

You may incur charges from your mobile service provider for downloading (if applicable) and using the Truyu App, including using the internet or making phone calls to us from within the Truyu App. 

We reserve the right to change the pricing (and/or the way the pricing is calculated) of any relevant Services at any time. In the event of a price change, we will notify you of any changes to the fee at least 30 days prior to any change taking effect. 

We will post the new pricing on the Truyu website, in the Truyu App and notify you by sending an email to the address you have registered where you have provided Truyu with your email address. 

Your continued use of the Service following this notice period will be taken as your acceptance of the updated fees. If you no longer wish to receive the Service, you may cancel your Truyu Service at any time by deleting your account in the App, or emailing contact@truyu.com.au.  

All payments and subscriptions, including the commitment to any trial subscription, are managed through Apple App Store and Google Play Store subscription management. Billing for all Subscription Services will be governed by associated additional end-user license terms for your use of the Apple App Store and Google Play Store. Please refer to Schedule G - Apple App Store and Google Play Store for further information. 

By signing up to our fee-based Subscription Service through Apple App Store or Google Play Store, with your chosen payment method, you authorise Us to use that payment method to process your fees. Fees are automatically charged each month on the date based on your sign-up anniversary date, using the payment method nominated by you. Please keep your payment method details up to date. 

Fees are in AUD and exclude GST unless otherwise specified. Truyu, Apple or Google will contact you if we are unable to process payment for the fees. If fees associated with your Subscription Service have been unpaid for a period of 30 days, we may, at our option, terminate or suspend your access to the App or Service immediately by notice in writing to you. 

If you think a transaction is unauthorised or is otherwise incorrect, please get in touch with us immediately via contact@truyu.com.au and provide us as much information as you can about the relevant transaction so we can investigate further.  There are specific circumstances and time frames where we can claim a refund in connection with a disputed transaction. This means that our ability to investigate a disputed transaction is limited to the time frames imposed by payment service providers and schemes that we deal with, so it is important to let us know as soon as possible after you become aware of a disputed transaction. 

Where you make a mistake when making a payment, we will try to reverse the transaction and retrieve your funds. However, if we can’t reverse the transaction, we are not responsible, and you will be liable for the mistaken payment. 

15.2 Suspension or termination 

Despite any right contained in these Terms and Conditions, in the event that you appear to be a Proscribed Person, we may immediately refuse to provide Services and suspend or terminate your access or use of the Truyu App. 

In addition, we can suspend or terminate access to the Truyu App if: 

  • we reasonably think you are using the Truyu App or any of the Truyu Services in connection with unlawful means including fraudulently or in a way that might cause you or us to lose money; 
  • we reasonably think you have engaged in illegal, fraudulent, deceptive or dishonest conduct; 
  • we consider doing so is reasonably necessary, including to comply with laws in Australia or overseas, or to manage regulatory risk; 
  • we detect or suspect unusual activity which may be the result of malware or a virus, ID takeover or phishing, in which case we reserve the right to withhold access to the App where we continue to detect malware or a virus, or you refuse to follow our recommendations provided to you to assist with the removal of malware and/or viruses from your computer or device; 
  • we consider doing so is reasonably necessary to manage our compliance with international laws and our regulatory risks; and/or 
  • you are accessing the App within sanctioned countries (a list of the sanctioned countries can be found at http://commbank.com.au ). 

In each of the circumstances above, we may, for security or legitimate business purposes (including where required by law), suspend or terminate without notice where reasonably required.  

We may also suspend or terminate the provision of the Truyu App or any of the Truyu Services where we reasonably believe to do so protects our legitimate business interests or where we believe you are in breach of any Terms and Conditions under this App. 

When we do this, we will: 

  • provide you with as much prior notice as is reasonable in the circumstances; and 
  • act fairly and reasonably towards you in a consistent and ethical manner. 

In doing so we will also consider your conduct, our conduct and the products and/or services that are being used. 

If you seek to terminate use of the Truyu App 

To terminate use of the Truyu App you may delete the Truyu App and, as applicable, delete your account registration by going to “Delete account” on the Settings screen, which will end all monitoring and withdraw your consent for Truyu to act as an access seeker on your behalf. No partial refunds will be provided for users who delete their Truyu account during a billing cycle. 

If you terminate or suspend use of the Truyu App, these Terms and Conditions will remain in effect to the extent such Terms and Conditions are intended to survive, and we both will remain bound by them to the extent applicable. 

If we terminate or suspend access to the Truyu App: 

  • these Terms and Conditions will remain in effect to the extent such Terms and Conditions are intended to survive, and we both will remain bound by them to the extent applicable, except that your right to access or use the App will terminate or be suspended; and 
  • you acknowledge that your personal settings and other saved data may be lost on termination or withdrawal of access to the App or any of its features, and that we are not responsible for any such loss where we have acted in accordance with these Terms and Conditions. 
15.3 Availability and Functionality 

We may change or update the App at any time, including to add functionality or for security purposes. We will provide notice of any change which we reasonably believe will detrimentally impact your use of the App in a material way, and you will always have the right to terminate or suspend your use of the App as set out in clause 15.2 (Suspension or termination). We’ll also keep you informed of new modifications or any services we intend to replace or discontinue. In the case of new modifications or replaced or discontinued services, you may need to download and install a new version of the App in order to keep using it. 

Without limiting the above, you acknowledge that we also have the right to vary, discontinue or cease offering any aspect of the Truyu Service or App without any prior notice to you, where reasonably required for our legitimate business interests, including for security purposes. 

If you become aware of any problems with the functionality, availability or security of the data or the App, please contact us at contact@truyu.com.au

15.4 Changes to these Terms and Conditions 

We may change these Truyu App Terms and Conditions at any time if we deem such a change reasonable and necessary for our legitimate business interests (including for security purposes). We will give you reasonable advance notice as applicable in the circumstances of any material changes (which are changes that have a reasonably material impact to the Truyu Services and/or our App’s functionality) in accordance with clause 3 (Communications with you) and clause 15.5 (Notices Generally). 

Your continued use of the App after any such variation or modification will be taken to be an acceptance of such variation or modification. We may however also require you to confirm your acceptance of changes to continue using the Truyu App. In all cases, if we make a change that you are not happy with, you may cease using and uninstall the Truyu App. 

‍15.5 Notices Generally 

We may provide notices to you through push notification to your device or by sending you an email or SMS to the details that you have registered with. 

You should check your emails/text messages/push notifications regularly and update your contact details if they have changed. 

Notices given electronically are taken to be received by you when the communication enters the first information system outside Truyu (e.g. the server of your internet or telecommunications service provider or the host of your email address). 

‍15.6 Services information 

You may be able to access information about our Truyu Services via the Truyu App. You acknowledge that it is your responsibility to assess the appropriateness of any service in light of your personal objectives, financial situation or needs, and, if necessary, seek appropriate professional advice. The provision of Truyu Services is not and should not be seen as the provision of general or personal financial advice. 

‍15.7 Acknowledgement and compliance 

The Truyu App is not provided by Apple, Google or any other third party provider. Accordingly, any queries or complaints regarding the App (including but not limited to issues regarding intellectual property, maintenance and support, etc) should be directed to us. 

The foregoing applies for the benefit of these third party providers. You also acknowledge the application of Australian anti-money laundering and counter terrorism financing regulations, and agree that you are not in a location that is subject to a government embargo. 

Apple, the Apple logo, Apple Pay, Apple Watch, MacBook Pro, iPad and iPhone are trademarks of Apple Inc., registered in the U.S. and other countries. 

‍Google, Google Play and the Google and Google Play logos are trademarks of Google registered in the U.S. and other countries. 

15.8 Collecting device and network information 

You acknowledge and agree that we will collect information about your device and network connectivity for security purposes, including: 

  • device characteristics and unique identifiers; 
  • cellular and WiFi network names and encryption levels; and 
  • IP addresses. 
‍15.9 Software licences 

We use software from various vendors to provide this App. Where we are required to display the relating licence terms and conditions, you can find these terms and conditions in the Truyu App. 

‍15.10 Security and compatibility - Android 

This clause applies to Android devices only, and only if the App is available for download to Android devices. 

To assist with the security and compatibility of the Android environment in which the Truyu App runs on your device, certain information relating to your device may be shared with Google for analysis via Google’s Safety Net Attestation API, for example, device and Application data and the results of integrity checks. You agree to comply with the Google APIs Terms of Service and SafetyNet Attestation API which you can access on Google’s webApp and Services. 

This paragraph applies to Android devices only if the App is available for download to Android devices. To assist with the security and compatibility of the Android environment in which this App runs on your device, certain information relating to your device may be shared with Google for analysis via Google’s Safety Net Attestation API, for example, device and Application data and the results of integrity checks. In addition to your agreement to comply with the Google Play Terms of Service, by using this App, you agree with the Google APIs Terms of Service and SafetyNet Attestation API, which you can access on Google’s webApp and Services.‍ 

15.11 Severability 

If any provision or part of any provision of these Terms and Conditions is deemed invalid, this will not affect the validity of the remaining provisions or part the remaining part of the affected provision of these Terms and Conditions, which will remain in full force and effect. 

‍15.12 Waiver 

A failure by Truyu to assert any right under these Terms and Conditions will not constitute a waiver of that right nor will any such failure be taken to be a further or continuing waiver of that term. 

15.13 Assignment 

Truyu can assign or otherwise transfer any of its rights under these Terms and Conditions at any time if we provide you with reasonable notice. If you do not agree to our assignment, you can terminate use the App in accordance with clause 15.2 (Suspension or termination). 

You are deemed to have accepted the assignment if you continue to use the App after 30 days following our notice to you. 

15.14 Links 

Any links to third party App and Services appearing in the App are provided for your convenience only. Your access of third party App and Services using these links is done at your own risk. You must comply with applicable third party terms of agreement when accessing these links. 

‍15.15 Contact 

If you have any questions or comments relating to the App or these Terms and Conditions or otherwise need to contact us, please do not hesitate to contact us by raising a request for support in the App or by emailing us at contact@truyu.com.au

16 Meaning of words

Card Leaks Service” means the service set out in clause 1.6 Truyu Free Services, clause 1.7 Truyu Paid Services and Schedule C - Card Leaks Service of these Terms and Conditions.

CBA Group” means CBA (as defined in clause 1 of these Terms and Conditions) and its related bodies corporate as that term is defined in the Australian Corporations Act 2001 (Cth).

"Consumer Guarantees” means a right or guarantee you may have under the Australian Consumer Law in schedule 2 of the Competition and Consumer Act 2010 (Cth) and any equivalent state or territory legislation, or other rights in relation to the supply of goods or services (such as terms implied into a contract) that cannot lawfully be excluded. 

Content” means the content, text, data, alerts, notifications, information, images, pages, materials, tools and results provided to you as part of the Service via the App. 

"Compatible Apple devices or Android devices" means either iPhones that meet the requirements listed in the Apple App Store, or Android devices that meet the requirements listed on Google Play (as appropriate). 

Credit Activity Alert Service” means the service set out in clause 1.6 Truyu Free Services and Schedule E - Credit Activity Alert Service of these Terms and Conditions. 

Dark Web” means those parts of the Deep Web accessible only via specialised software or overlay networks (such as Tor) and which are often used for anonymous sharing or trading of stolen or exposed personal information.

Dark Web Leaks Service” means the service set out in clause 1.6 Truyu Free Services, clause 1.7 Truyu Paid Services and Schedule F - Dark Web Leaks Service of these Terms and Conditions.

Data Breach” means a data breach considered to be an ‘eligible data breach’ as defined in the Privacy Act 1988 (Cth) or as otherwise contained in these Terms and Conditions. “Data Breaches” has the corresponding plural meaning.

Deep Web” means parts of the internet which are not indexed by standard search engines, for example password-protected sites, private databases or restricted access networks.

Email Leaks Service” means as defined in clause 1.6 Truyu Free Services and Schedule B of these Terms and Conditions. 

Experian” means Experian Australia Pty Ltd ABN 95 082 851 474 and Experian Australia Credit Services Pty Ltd ABN 12 150 305 838 (as relevant). 

ID” or “Identity” for the purpose of the Identity Check Alert Service means your name and date of birth. 

Identity Check Alerts Service” means the service set out in clause 1.7 Truyu Paid Services and Schedule E - Credit Activity Alert Service of these Terms and Conditions. 

Privacy Policy” in the context of Truyu means our privacy policy available at  www.truyu.com.au/privacy-policy.  

Proscribed person” is a person who appears to us to: 

  • be a proscribed person or entity under the Charter of the United Nations Act 1945 (Cth); 
  • be in breach of the laws of any jurisdiction relating to money laundering or counter-terrorism; 
  • appear in a list of persons with whom dealings are proscribed by the government or a regulatory authority of any jurisdiction; or 
  • act on behalf, or for the benefit of, a person referred to above. 

Scam Checker Services” means the Service set out in clause 1.6 Truyu Free Services and Schedule A of these Terms and Conditions. 

Service(s)” means service or services offered through the Truyu App, as applicable. 

Subscription Services” mean subscription-based, paid Services that are part of Truyu’s Paid Services offering set out in clause 1.7 Truyu Paid Services.  The associated fees are further clarified in clause ‍‍15.1 Fees of these Terms and Conditions.   

Third Party Services” means as defined in clause 1.8 Third Party Service Providers. 

Third Party Service Providers” means as defined in clause 1.8 Third Party Service Providers. 

"Truyu App" or “App” means the Truyu App service described in clause 1 Introducing the Truyu App. 

Truyu Free Services” or “Free Services” has the meaning given to it in clause 1.6 Truyu Free Services.  

Truyu Paid Services” or “Paid Services” has the meaning given to it in clause 1.7 Truyu Paid Services.  

Truyu Services” or “Services” or “Service” means the Content and services we (or our sub-contractors or third parties with whom we provide the services) provide to you via the App, which consist of our Truyu Free Services and Truyu Paid Services.  

"you" or "your" means the person using the Truyu App. 


Schedule A – Scam Checker Service

1            Scam Checker Service Terms and Conditions 

Under this component of the Service, you can upload screenshots of text messages to the Scam Checker Service, which uses artificial intelligence to assess the likelihood that the uploaded text message is a scam. The Truyu Scam Checker Service will provide a response that with respect to the uploaded text message: (a) our checks indicate it is " Probably a scam", (b) “Our checks didn’t identify any suspicious indicators”, or (c) we are "Unable to confirm".  These responses are based on our available data and a number of pre-determined scam indicators.   

2            Important Information 

2.1        It is important for you to note that Truyu’s responses are all suggestions only, and not factual classifications. If a text message is assessed as "Probably a scam" or “Our checks didn’t identify any suspicious indicators”, the Scam Checker Service will provide recommended next steps, including ‘stop’, ‘check’ and ‘protect’. 

2.2        The Scam Checker Service is provided in collaboration with CBA. Truyu and CBA disclaim all liability arising from or in connection with your use of the Scam Checker Service.  Truyu does not guarantee the accuracy and completeness of the Scam Checker Service and suggestions, and you are ultimately responsible for verifying the accuracy of the response suggestion provided by Truyu.  Any tips or suggestions provided through this Service do not take into account your personal situation or needs. 

2.3        Artificial intelligence is not a perfect tool and is not always correct. Scam Checker is reliant on artificial intelligence and available data, the accuracy and reliability of which Truyu cannot guarantee. You should take your own measures to protect yourself from potential harm. Truyu encourages you to be vigilant and use caution when interacting with potential scam messages. Accordingly, Truyu and CBA disclaim all liability arising from or in connection with your reliance on the Scam Checker Service. 

3            Using the Service 

3.1        To use the Scam Checker Service, you must upload a valid screenshot of a text message, including the sender ID or phone number. 

3.2        You must have all rights and/or permissions to upload the text message.   Upon upload, you grant Truyu, a non-exclusive, royalty-free, perpetual, transferable and sub-licensable and worldwide licence to use, treat and store the uploaded screenshot. You acknowledge and consent to any information contained within the text to be: 

  • collected and used by Truyu for the purposes of facilitating and improving your use of the Scam Checker Service and to generate insights regarding scams; and 
  • shared with CBA for the purposes of providing and improving the Scam Checker service, generating insights regarding scams, cybersecurity and fraud, and providing intelligence to: 
    • organisations that assist Truyu and CBA to identify, investigate or prevent fraud, scams or other misconduct; and 
    • regulatory bodies, government agencies and law enforcement bodies to prevent, detect and investigate suspicious or fraudulent activities, including the Anti-Scam Intelligence Loop co-ordinated by the Australian Financial Crimes Exchange and National Anti-Scam Centre. 

3.3        The Scam Checker Service will not provide a response suggestion if your upload does not meet any criteria we make known to you, or if it includes inappropriate content, excessive file size, or if the screenshot is not a text message. 

3.4        You must not upload to the Scam Checker services (a) any images that are not text messages as described above, (b) any information or images that contain personal or sensitive information or (c) information or images that you do not have the rights and/or permissions to share. 

In addition to any other right contained in these Terms and Conditions, we reserve the right to suspend or terminate your Truyu account for legitimate business purposes, including for security purposes or if we detect abuse of the system, such as: 

  • excessive submissions to the Service; or 
  • inappropriate content submitted to the Service. 

  

Schedule B - Email Leaks Service

1            Email Leaks Service

In using the Email Leaks Service, you may register up to five email addresses to query and monitor, on an ongoing basis, if your registered email addresses and any associated data have been comprised in Data Breaches captured by the Email Leaks Service. Truyu’s Email Leaks Service is supported by our Third Party Service Provider Superlative Enterprises Pty Ltd (HIBP Service). Data Breaches are captured by the HIBP Service from public domain sources and make use of anonymised searches relying on unique hash values to help preserve privacy. 

2            Important Information

If you use the Email Leaks Service, you acknowledge that: 

  • due to the nature of Data Breaches, the lead time between an incident being made public and the data appearing in our platform can vary significantly depending on the size, availability and the structure of the data; and 
  • Data Breaches are obtained and published on a “best effort” basis only. We will endeavour to make Data Breaches available to you through the Email Leaks Service as soon as reasonably possible after we become aware. 

Schedule C - Card Leaks Service

1            Card Leaks Service

1.1        By inserting your card number into this Service, Truyu’s Service will check if your card number is on certain public databases, including generally available public websites and other web locations that are difficult to access and commonly referred to as the “dark web”.    

1.2         The terms and conditions in this Schedule apply if we make this Service available for you and you choose to use this Service. The Card Leaks Service includes the ability for you to check if your card number may have been leaked online based on information provided by our Third Party Service Provider.

1.3        To use this Service, you must first verify your identity in accordance with clause 1.5 of these Terms and Conditions (Verifying your identity).

1.4        As a user of the Truyu Free Services for the Card Leaks Service, you may check up to 5 of your cards by inserting the card numbers in the App. You may later choose to re-check those same 5 cards in the App.

1.5        As a subscriber of the Truyu Paid Services for the Card Leaks Service, if this Service is made available to you, you may enrol up to 5 of your cards for ongoing monitoring for the duration of your subscription. Truyu will notify you in accordance with clause 3 of these Terms and Conditions (Communications with you) if your monitored card number(s) may have been leaked online as detected by our Third Party Service Provider.

1.6        If you wish to remove any card numbers from the App, you can delete your Truyu account or contact us at contact@truyu.com.au.

2            Important Information

By using this Service (whether Free Services or Paid Services), you acknowledge and agree to the points listed below in this clause.

  • To use this Service, you must first verify your identity in accordance with clause 1.5 Verifying your identity of these Terms and Conditions. 
  • You must only insert your own credit card details when using these Service and not any other person’s card details. 
  • This Service is not comprehensive and is by no means representative of all available online locations at which your card details may be available. Truyu’s Service coverage will vary and is limited to what is available through our Third Party Service Provider, who we use for this Service.  To avoid doubt, we do not guarantee that these Services will include checking your card details against any or all of the international web or “dark web” locations.  Importantly, your card details may be available in a variety of online or dark web or other unauthorised locations, and this may not be picked up by the Truyu Card Leaks Services so that you will not receive an alert in all situations where your details are available online. 
  • While Truyu does not guarantee the accuracy of this Service, you may use the results of the Service to take further steps to investigate unauthorised use of your checked card.
  • You acknowledge and agree that it is your responsibility to consider any outcomes, notices or alerts you receive through the App and respond appropriately.  You are required to take any necessary action as a result of information you received through this Service, including any alerts provided through these Services.  Neither Truyu nor its Third Party Service Providers are responsible for taking any further action on your behalf to notify anyone, including but not limited to any relevant organisation / merchant, law enforcement or anyone else. 

 

Schedule D - Identity Check Alert Service

1            General  

1.1        The terms and conditions in this Schedule apply if you use our Identity Check Alerts Service. The Truyu Identity Check Alert Service provides you with an alert that there may have been an identity check conducted with your details.  In that case and if you had not approved such check, you could take action in response. This information may include a merchant category, merchant name, relevant document and date and time of the identity check. 

1.2        To use this Service, you must first verify your identity in accordance with clause 1.5 (Verifying your identity) of these Terms and Conditions.

1.3        As part of the Truyu Free Services, you are eligible for a one-time Identity Check scan, which will inform you if there were possible identity checks conducted with your details in the past 180 days from the date of your inquiry.

1.4        As part of the Truyu Paid Services, you are eligible to receive the Identity Check Alerts Service on an ongoing basis for the duration of your subscription.

2            Important Information

2.1        In relation to the Identity Check Alert Service (whether Free Services or Paid Services), please note the following important information. 

  • To use this Service, you must first verify your identity in accordance with clause 1.5 (Verifying your identity) of these Terms and Conditions. 
  • This Service is not comprehensive and by no means representative of all of available merchants in the Australian Market. Merchant coverage of the Identity Check Alert Service will vary and is limited to the merchants that are onboarded by GBG to provide the relevant information to GBG, which are limited.  Importantly, an identity check may be conducted at a merchant that is not covered by GBG and this would not be picked up by the Identity Check Alert Service.  In that case you will not receive any alert. 
  • This is a new service utilising external technology that is now passed through to you to enable you to understand where your identity is being used at a merchant that is onboarded by GBG to provide the relevant information to GBG. 
  • You are required to take any necessary action as a result of an Identity Check Alert. Neither Truyu nor its Third Party Service Providers are responsible for taking any further action on your behalf to notify anyone, including but not limited to any relevant organisation / merchant, law enforcement or anyone else. 
  • The Identity Check Alert Service matches are based on your first name, last name and date of birth at GBG participating merchants. This means that there is a risk that you may be given a false match based on someone else with the same full name or date of birth. 
  • You should enable notifications for the Truyu app. If you have notifications disabled, you may only receive these alert Services via email. 

Schedule E - Credit Activity Alert Service  

1               General

1.1        The terms and conditions in this Schedule apply if you use our Credit Activity Alert Service. The Credit Activity Alert Service is available only for Truyu Paid Services users.

1.2        To use this Service, you must first (a) verify your identity in accordance with clause 1.5 (Verifying your identity) of these Terms and Conditions; and (b) hold an active subscription with Truyu for these Services, and (c) have a credit file with Experian.

1.3        As part of these Services, Truyu alerts you when an enquiry is made on your credit file held with Experian. More specifically, this Service provides  certain credit reporting information held by Experian, who is a credit reporting body.

2               Important Information

2.1        Once you have successfully activated your Credit Activity Alert Service, we will, unless you tell us otherwise, send you ongoing notifications relating to your credit file being: 

  • new credit file enquiries (Credit Application Alert); and 
  • new account openings (Credit Account Opened Alert). 

See the section titled "Appointment as access seeker" below for further information, including how you can withdraw your consent for us to act on your behalf as an access seeker.  

2.2         Before you act on any notification, we recommend you check the information (e.g. by reviewing a current Credit Report). You may request a free copy of your consumer credit report from a credit reporting body once every three months, as well as when you’ve been refused credit within the past 90 days, or your credit-related personal information has been corrected.  

2.3         We reserve the right to suspend, change or discontinue Truyu notifications at any time for our legitimate business purposes, including for security purposes or where our notifications do not align with our operational requirements for the App. Notifications do not affect your obligation to comply with the terms applicable to the Service (including these Terms of Use).  

Appointment of access seeker and important information

2.4        By becoming a subscriber with us, successfully completing your identity authentication, and agreeing to the relevant consent, you consent and authorise us to act as your agent and ‘access seeker’ for the purposes of the Privacy Act 1988 (Cth) and the Privacy (Credit Reporting) Code 2024 (Cth), to request Experian to provide us (as your agent) with certain credit reporting information on your behalf, to deliver updates on changes to your credit report, as part of our broader offering.

This authority continues until such time as your subscription ends (which may include any promotional / trial period, grace period or Post Subscription period as defined below in this clause, as applicable).  

If you wish to manually revoke your access seeker authorisation prior to the expiry of your subscription, you may do so at any time by deleting your account in the App, or sending us an email at contact@truyu.com.au.  

Withdrawing this authorisation will mean that we are no longer able to offer the Credit Activity Alert Service.    

2.5        Your personal information and authority for us to act as your access seeker will be retained until the end of your subscription. If your subscription expires, your authority for us to act as your access seeker will continue for 120 days after expiration of your service (Post Subscription Period). This is to enable us to resubscribe you to Credit Activity Alerts if you change your mind.  We will retain your personal information for 12 months from the date your subscription expires, or as otherwise required by law.

For more details on how long we will retain your authorisation (including after expiry) and how we collect, store and manage your information, please see our Privacy Policy here: www.truyu.com.au/privacy-policy.  

2.6        You have a right to obtain your credit reporting information free of charge in certain circumstances (detailed in clause 2.2 of this Schedule). To request access to a copy of your full Experian Credit Report, please contact Experian directly at www.experian.com.au.  

2.7        While information from Experian is delivered through the Truyu App, by using the Credit Activity Alert Service, you acknowledge and agree that it is your responsibility to consider any notices or alerts you receive through the App and respond appropriately. 

Schedule F - Dark Web Leaks Service

1               General

1.1        The terms and conditions in this Schedule apply if we make this Service available for you and you choose to use this Service.

Truyu’s Dark Web Leaks Service provides you with the ability to check if your personal details have been exposed in certain online locations, based on information provided by our Third Party Service Provider that includes information from public forums, Deep Web and the Dark Web.

1.2        To use this Service, you must first verify your identity in accordance with clause 1.5 of these Terms and Conditions (Verifying your identity).

1.3        As part of the Truyu Free Services, you are eligible to receive a one-off scan / check of your inserted information. 

1.4        As part of the Truyu Paid Services, if this Service is made available to you, you are eligible for ongoing monitoring of your inserted information for the length of your Truyu subscription period.

Truyu will alert you when your inserted information has been found by our Third Party Service Provider in accordance with clause 3 (Communications with you) of these Terms and Conditions. These alerts will also be available in the Truyu App.

These Paid Services will be available to you for the duration of your Subscription Services.

  1. Important Information

If you use the Dark Web Leaks Service, you acknowledge that: 

  • Truyu’s checks rely on a Third Party Service Provider’s limited check of the Deep Web and Dark Web.  As the online landscape is constantly changing, Truyu cannot guarantee to monitor any or all of the web and private forums;
  • Due to the nature of dark web leaks generally, the lead time between an incident being made public and the data appearing in our Third Party Service Provider’s platform can vary significantly depending on the size, availability and the structure of the data. Accordingly, you should not rely on the accuracy or timeliness of these Services;
  • Leaks are obtained and published on a “best effort” basis only. We will endeavour to make information available to you through the Dark Web Leaks Service as soon as reasonably possible after we become aware; 
  • This Service is not comprehensive and is by no means representative of all available online locations at which your personal details may be available. Truyu’s Service coverage will vary and is limited to what is available through our Third Party Service Provider, who we use for this Service.  To avoid doubt, we do not guarantee that these Services will include checking your personal details against any or all of the international web or Dark Web locations;
  • Your personal details may be available in a variety of online or Dark Web or other unauthorised locations and this may not be picked up by the Truyu Dark Web Leaks Services so that you will not receive an alert; and
  • The Dark Web Leaks Service matches based on the information you’ve provided. This means that there is a risk that you may be given a false match based on someone else with the same details as you. You may also see your personal information with other information that you do not recognise. Truyu makes best efforts to validate the information is relevant to you but does not guarantee that the information will always belong to you.

 

Schedule G - Apple App Store and Google Play Store  

In using any Truyu Services, you acknowledge and agree: 

  • that we have appointed Apple Inc and its subsidiaries as updated from time to time (Apple) and Google LLC and its subsidiaries as updated from time to time (Google) as our agent to distribute and market the App in the Apple App store and Google Play Store respectively; 
  • Apple and Apple’s subsidiaries, are third party beneficiaries of these Terms and Conditions, and that, upon your acceptance of these Terms and Conditions, to the extent permissible under Australian Law, Apple will have the right (and will be deemed to have accepted the right) to enforce these Terms and Conditions against you as a third party beneficiary thereof; 
  • that these Terms and Conditions are concluded between You and Us only, and not with Apple or Google and neither Apple or Google will be responsible for or have any liability whatsoever under, these Terms and Conditions; and 
  • the license granted to you in clause 12 (Licence) of these Terms and Conditions is limited to a non-transferable license to use the App on any Apple-branded products or any Google-branded products that you own or control and as permitted by Apple’s or Google’s terms and conditions which can be found on Apple’s or Google’s website. 

Truyu Website Terms of Use  

  1. General
  • In these terms, "we", "us" and "our" means CBA New Digital Businesses Pty Ltd (ABN 38 633 072 830) trading as Truyu (NDB).  The term ‘NDB Group’ is a reference to any Related Body Corporate of NDB (as that term is defined in the Australian Corporations Act).  
  • CBA New Digital Businesses Pty Ltd is a wholly owned but non-guaranteed subsidiary of the Commonwealth Bank of Australia ABN 48 123 123 124. CBA New Digital Businesses Pty Ltd is not an Authorised Deposit-taking Institution for the purposes of the Banking Act 1959 and its obligations do not represent deposits or other liabilities of Commonwealth Bank of Australia. The term ‘NDB Group’ is a reference to any Related Body Corporate of NDB (as that term is defined in the Australian Corporations Act).  
  • Please read these terms carefully as they apply to your access and use of this website, including any content on it (the Site). By accessing or using the Site you agree to be bound by these terms. For the avoidance of doubt, the Site is for informative purposes only and does not include any web application to download, apply for or manage any account.  
  • Certain parts of the Site or features we may make available may be subject to separate or additional terms.  Your use of those parts of the Site or features constitutes your acceptance of those terms.  

  1. Our IP
  • The Site and all associated intellectual property rights (Our IP) are the sole and exclusive property of us or our licensors. Nothing you do on or in relation to the Site will transfer any intellectual property rights to you or, except for the licence granted in the paragraph directly below, licence you to exercise any intellectual property rights unless this is expressly stated.
  • We grant you a limited, non-transferable licence to access and use Our IP solely for your own personal purposes.  Any access, use or copying of the Site for any other purpose is expressly prohibited.’

  1. Your content
  • Any information, such as your name and email address, that you provide to us via the Site, including  through the Contact Us section, (Your Content) will remain owned by you, and does not form part of the “Site” or “Our IP” for the purposes of these terms.
  • You grant us a royalty-free, perpetual licence (including a right of sublicense) to use, copy and modify Your Content in connection with our provision of the Site and as otherwise contemplated by these terms.  We will keep Your Content in accordance with clause 6 below (Privacy).  

  1. Your obligations  

You must not, when using the Site:  

  • distribute viruses, spyware, corrupted files, or any other similar software or programs that may damage the operation of any computer systems;  
  • use the Site or Our IP in any manner that is not expressly permitted under these terms;
  • use the Site or Our IP for any purpose that is unlawful or that would give rise to any civil or criminal liability for yourself, us or any third party;  
  • remove, alter or obscure any identification, copyright, trademark or other proprietary notices, labels or marks (if any) on the Site;
  • collect or store data about other users of the Site;  
  • attempt to gain unauthorised access to, or disrupt the integrity or performance of, the Site; or
  • use the Site in any other manner that adversely impacts the ability of others to use the Site.

  1. Links  

If you link our Site to any material you distribute, including emails or your website, the following terms in this clause 5 (Links) apply:  

  • Your Site must not contain the following: (a) Illegal, sexually explicit, pornographic, or otherwise offensive or distasteful material; (b) content promoting gaming, wagering or betting sites; (c) instructions on the manufacture and/or use of illegal drugs, or other dangerous materials; (d)  material that promotes harassment, hatred or discrimination based on age, race, religion, gender, sexual preference or any other factor; (e) defamatory, disparaging, abusive, threatening or offensive messages (whether aimed at our company or a third party); and/or (f) false or misleading information about our products and services or products and services of a member of the NDB Group; and  
  • To the extent permitted by law, neither we nor any other company in the NDB Group will be liable for any loss or damage from any cause (including negligence) to your site(s) and/or system(s), or to people linking to us from your site(s), caused by or in connection with your link to our Site. If you create a link to our Site, you remain fully responsible for any consequences of that link, whether direct or indirect, and you will protect us against all loss, damage, liability, cost or expense arising from or in connection with the link.  

  1. Privacy  

You may provide us with personal information when using the Site. By using the Site, you acknowledge us collecting, storing, using and disclosing your personal information in accordance with our Privacy Policy, available at https://www.truyu.com.au/privacy-policy.  

  1. Disclaimer and Third-Party Links  
  • While all information contained on this Site is given in good faith and has been taken from sources believed to be accurate, we have not verified all information.  You acknowledge that we do not intend to provide any legal, financial, taxation, accounting or other professional advice on this Site, and the Site does not contain any advice that has been tailored for you or your circumstances, goals or needs. Any advice on the Site or contained in any content on the Site is general advice only. We make no warranty as to the form, content or appropriateness of the Site for you and recommend that you seek legal, financial, accounting and other professional advice in connection with your use of and reliance on the Site.  
  • Some of the information on the Site may be provided by third parties.  While we believe that these third parties are reliable sources of this information, we cannot guarantee that this information, nor any other information on the Site, will always be accurate, up-to-date or complete.    
  • If you leave this Site via a link contained within it, and view content that is not provided by a company within  our NDB Group, you do so at your own risk. The content you access through these third party links will not have been produced, checked for accuracy, or otherwise reviewed by a company in our NDB Group. No company in the NDB Group is responsible for damages or losses caused by any delays, defects or omissions that may exist in the services, information or other content provided in such third party site, whether actual, alleged, consequential or otherwise. No company in the NDB Group makes any guarantees or representations as to, and shall have no liability for, any electronic content delivered by any third party. Links to other websites are provided for convenience only and do not represent any endorsement by us of the products or services offered by the website owner.

  1. Warranties and liability

Subject to clause 9 (Implied warranties), all express or implied guarantees, warranties, representations, statements, terms and conditions which are not expressly set out in these terms are excluded.

In particular, and without limiting the sentence directly above:  

  • while we endeavour to provide a convenient and functional Site, we do not guarantee that: (a) the information and materials found or offered on the Site will be suitable for your particular purposes; or (b) your use of the Site will be uninterrupted, error free or that the Site is free of viruses or other harmful components;
  • the Site may, from time to time, be unavailable due to scheduled maintenance, system or software updates, upgrades, or changes and operational procedures; and
  • we are not responsible for any loss, corruption or interception of data sent to or from the Site which occurs outside of our computer systems (such as those which occur while being sent over the internet).  
  • We recommend that you install and use up-to-date anti-virus, anti-spyware and firewall software on your computer.

  1. Implied warranties  

Nothing in these terms excludes, restricts or modifies any guarantee, term, condition, warranty, or any right or remedy, implied or imposed by any law or legislation which cannot lawfully be excluded or limited, including the Australian Consumer Law which contains guarantees that protect the purchasers of goods and services in certain circumstances.

If any guarantee, term, condition or warranty is implied or imposed in relation to these terms under the Australian Consumer Law or any other applicable legislation (a Non-Excludable Provision) and we are able to limit your remedy for a breach of the Non-Excludable Provision, then our liability for breach of the Non-Excludable Provision is limited to one or more of the following at our option:

  • in the case of goods, the replacement of the goods or the supply of equivalent goods, the repair of the goods, the payment of the cost of replacing the goods or of acquiring equivalent goods, or the payment of the cost of having the goods repaired; or
  • in the case of services, the supplying of the services again, or the payment of the cost of having the services supplied again.  

10. Modifications

We may: (a) vary these terms and/or our logos; and (b) modify, suspend or cease the Site or access to any links from this Site.

Your continued access or use of the Site following any variation referred to in the paragraph directly above will constitute your acceptance of the variation.  

If you do not agree to any variation, you may stop using this Site.  

11. Infringing or objectionable content

If you believe that the Site contains elements that are objectionable, or infringe copyright or any other rights, please contact us via email at complaints@truyu.com.au, and provide particulars of such content and a detailed description of why it is objectionable or infringing.  

12. General

  • Neither party will be liable for any failure or delay in performing any of its obligations under these terms if such delay is caused by circumstances beyond that party’s reasonable control.
  • If any part of these terms is held to be unenforceable, the unenforceable part is to be given effect to the greatest extent possible and the remainder will remain in full force and effect.    
  • Your use of this Site is governed by the laws of New South Wales, Australia, and any dispute arising out of such use of the website or these terms and conditions is subject to in the laws of New South Wales, Australia.  
  • Your use of the Site is conducted electronically and we may communicate with you electronically for all aspects of your such use.
  • The provisions of these terms which by their nature survive termination or expiry of these terms will survive termination or expiry of these terms.
  • No waiver, delay or failure by a party to take any action will constitute or be construed as a waiver of that or any other term, condition, option, privilege or right either party may have.
  • Unless otherwise stated expressly, products and services referred to on this website are intended for Australia only.  
  • This Site may use cookies and/or other software to monitor browsing preferences and use.  If you allow cookies to be used, personal information may be stored by us or our third party service providers in accordance with our Privacy Policy available at https://www.truyu.com.au/privacy-policy .  
  • The word “including” when used in these terms is not a term of limitation.

Published: 16 October 2025

Terms and Conditions and Eligibility Criteria  

The CommBank Yello free Truyu subscription for 6 months benefit is available to all CommBank Yello customers qualifying for the CommBank Yello, Plus, Gold or Diamond tiers.  

To be eligible to redeem the Truyu offer, you must:

1) Redeem the promotion code in accordance with our terms and conditions;

2) Meet the eligibility criteria set out in and agree to the Truyu App terms and conditions. See truyu.com.au/terms-and-conditions and

3) Successfully complete ID verification and subscribe to Truyu Alerts in accordance with Truyu’s App Terms and Conditions.

Offer available to new and existing users (as a 3 month extension to our initial 3 month free trial only) subscribing to Truyu’s Identity Check Alert Service. One offer limit per eligible user. Unless otherwise stated in these Terms and Conditions, the offer is not available in conjunction with any other offer, promotion or discount. After the 6-month free subscription expires, users will be charged $4.99/month in accordance with the Truyu App Terms and Conditions. Truyu and CommBank reserve the right to vary, update or remove this offer at any time.

Customers must activate the offer using a promotion code to receive the benefit. Eligible customers may choose to access their promotional code in the CommBank Yello hub within the CommBank app. If customers dismiss the benefit in the CommBank App, it may take up to 180 days to reappear. New Truyu customers will need to install the Truyu App, subscribe to Identity Check Alert Service then apply the code in the Settings screen. Existing Truyu customers will be able to apply their code via Settings / Have an offer code in the Truyu app. The code will provide an additional 3 months free subscription for existing eligible customers on top of the initial 3 months free trial offer.

Any changes to your CommBank Yello eligibility will not affect your Truyu subscription once you have redeemed this offer. Your promotional code cannot be redeemed wholly or in part for cash or cash equivalents in the event you cancel your Truyu subscription part way through your 6-month free subscription period. If you do not wish to use your code, you can choose to gift your code to someone else. Your code can only be redeemed once for its entire free trial period.  

Ongoing eligibility conditions apply for CommBank Yello. For full eligibility terms and conditions visit commbank.com.au/commbankyello.

If you have queries relating to the CommBank Yello eligibility and CommBank Yello experience you can contact CommBank via messages in the CommBank app or visit a CommBank branch.  

You can check the expiry date of your free Truyu trial in the Subscriptions section in your App Store or Play Store.