Tokenisation of card requires payment of Rs.2 from your card to so that the company can tokenise it and store it in their database for future payments...
The only rsk is, the app asks the details before payment gateway.... so they can easy save it somewhere 😛
But most apps do it (as RBI hasn't mandated banks and other apps to accept CVV only at PG site)