Privacy Policy

App Name: Train Fitness & Elite Platform Operator: Thing W.L.L Commercial Registration No.: 196454-1 Location: Seef, Kingdom of Bahrain Last Updated: 28 Jan 2026

Thing Company, including the Train Fitness & Elite app, is a digital platform operated by Thing W.L.L, Commercial Registration No. 196454-1, headquartered in Seef, Kingdom of Bahrain.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you use the Train Fitness & Elite app, the Thing Company platform, and related services, collectively referred to as the "Platform". This policy is issued in accordance with Bahrain's Personal Data Protection Law, Law No. 30 of 2018, referred to as the "PDPL".

By accessing or using Train Fitness & Elite, Thing Company, or the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of Application

This Privacy Policy applies to:

Users who browse, register, or transact on Thing Company
Users of the Train Fitness & Elite app
Buyers and sellers using the Platform
Visitors to Thing Company's landing website

Thing Company and the Train Fitness & Elite app are intended for users of all ages. Where legally required, consent is obtained from a parent or legal guardian.

2. Data Controller

For the purposes of the PDPL, the data controller is:

Thing W.L.L CR No.: 196454-1 Address: Seef, Kingdom of Bahrain Email: hello@thing.bh

Thing Company does not currently appoint a formal Data Protection Officer. All data protection matters are handled internally.

3. Personal Data We Collect

We collect only data that is operationally necessary to deliver our services.

3.1 Data You Provide Directly

Full name
Email address
Phone number
Profile information
Listings content, including photos and descriptions
Messages exchanged via in-app chat
Delivery location data for orders
Payment-related confirmations, excluding full card details

3.2 Identity & Verification Data Conditional

Where required for compliance, fraud prevention, or verification, we may collect:

CPR information
Commercial registration documents
Business ownership details

3.3 Transactional Data

Order history
Payment status
Refunds and escrow-related records

3.4 Technical & Usage Data

Device identifiers
IP address
App usage analytics and event data

4. Purpose of Processing

We process personal data to:

Create and manage user accounts
Enable platform transactions
Facilitate payments and escrow services
Enable communication between parties
Deliver orders and location-based services
Prevent fraud and misuse
Improve Platform performance and user experience
Comply with legal and regulatory obligations
Send transactional and marketing communications, where permitted

Processing is conducted on lawful bases including user consent, contractual necessity, and legitimate business interests.

5. Payments & Escrow

Online payments are processed via Tap Payments, a third-party payment service provider. Thing Company does not store full payment card details.

Thing Company may temporarily hold funds in escrow until orders are confirmed as delivered, in accordance with Platform rules.

6. Third-Party Service Providers

We work with vetted third parties strictly on a need-to-know basis, including:

Tap Payments – payment processing
PostHog – analytics and product insights
Amazon Web Services AWS – cloud infrastructure Bahrain region
Vercel – website hosting

All third parties are contractually bound to process data in accordance with applicable data protection laws.

7. Data Storage & Localization

Personal data is hosted primarily on AWS infrastructure located in Bahrain
We do not intentionally transfer personal data outside the Kingdom of Bahrain
Data is retained only for as long as required for operational, legal, or regulatory purposes

8. User Rights

Subject to applicable law, users have the right to:

Access their personal data
Correct inaccurate or outdated data
Withdraw consent where processing is based on consent
Request deletion of their account or personal data, subject to applicable retention obligations

Requests related to personal data may be submitted to hello@thing.bh.

9. Marketing Communications

Thing Company may send marketing emails or messages related to offers, features, or updates. Users may opt out at any time via provided unsubscribe mechanisms or by contacting us directly. Transactional communications are mandatory and cannot be opted out of.

10. Data Security

We implement commercially reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is completely secure. Users acknowledge and accept residual risks inherent in digital platforms.

11. Children's Privacy

Thing Company and the Train Fitness & Elite app are accessible to users of all ages. Where required by law, consent must be obtained from a parent or legal guardian before collecting personal data from minors.

12. Data Deletion Policy

12.1 Current Status

Thing Company does not support self-service account deletion through the Train Fitness & Elite app, mobile application, or website at this time. Account removal requires a formal request submission.

12.2 How to Request Deletion

To request account or data deletion, contact hello@thing.bh from your registered email address or provide sufficient identity verification details.

12.3 What Happens Next

All deletion requests undergo individual assessment. Thing Company may fully or partially deny removal where data retention is necessary for purposes including:

Active transactions
Financial records and escrow management
Legal compliance obligations
Fraud prevention measures
Terms enforcement

12.4 Timeline

Approved deletion requests are typically processed within a reasonable timeframe, though immediate removal is not guaranteed.

12.5 Financial Data

Transaction and payment records may persist separately to satisfy accounting and compliance requirements.

12.6 Third Parties

Thing Company cannot control deletion timelines for authorised service providers who function as independent data controllers.

13. Changes to This Policy

We may update this Privacy Policy and Data Deletion Policy from time to time to reflect operational, legal, regulatory, platform capability, or internal practice changes. Material changes will be communicated through the Platform. Continued use of Thing Company, Train Fitness & Elite, or related services constitutes acceptance of the updated policy.

14. Contact Us

Email: hello@thing.bh Entity: Thing W.L.L Location: Kingdom of Bahrain