العربية
Platinum Gym is operated by AL-NAWADI HOLDING CO. KSCC ("Platinum Health Club", "we", "our" or "us"). This Privacy Policy explains what information we collect through the Platinum Gym mobile application (the "App"), how we use and share it, and the choices you have.
Please read this policy carefully. If you do not agree with it, please do not use the App.
1. Information We Collect
Information you give us
- Account details: your name in English and Arabic, mobile number, email address (optional), date of birth, gender, nationality, area of residence and preferred branch.
- Identity verification: your Civil ID number and its expiry date. If you verify your identity with Kuwait Mobile ID (Hawyti), we receive your verified name, Civil ID number, date of birth, gender and nationality from the Public Authority for Civil Information (PACI), and keep a record of that verification.
- Health declaration: your answers to our health questions for safety and exercise purposes only (for example, about heart conditions, blood pressure or diabetes, recent surgery, infectious diseases, or medical advice not to exercise).
- Face photo: if you register your face, we use your photo to give you access to our clubs by face recognition (see section 2).
- Memberships and services: memberships, renewals, upgrades and freezes, bookings, personal training, lockers and towel services, invoices and payment records, and any feedback you send us.
- Payments: card and payment details are entered on our payment providers' secure pages. We do not see or store your full card number; we keep the payment result and reference.
Information collected automatically
- Device information: device model and brand, operating system and version, app version, and an app-installation identifier.
- Push notification token: an identifier that lets us send notifications to your device.
- Crash and error reports: technical details about crashes and errors in the App, such as the device model, operating system, app version and the part of the App where the error occurred, linked to your member number. These reports do not contain your name, phone number, Civil ID or payment details.
- Log data: your IP address and the time of requests to our servers, used for security and troubleshooting.
The App does not collect your location. When you open a branch in Google Maps, Apple Maps or Waze, that app handles your location under its own privacy policy.
2. Face Recognition for Club Entry
Registering your face is optional. If you do, we store your photo securely in our cloud storage and send it to the face-recognition entry devices at our clubs, so you can enter by scanning your face instead of using a card. We use it only for club entry and to verify your identity and membership.
- Your face data is removed from the entry devices when your membership ends.
- If you delete your account, the photo is deleted and removed from the entry devices.
- You can ask us to delete your face photo at any time using the contact details below; you will then need another way to prove your identity.
3. How We Use Your Information
- To create and manage your account and verify your identity
- To sell, manage and renew your memberships and services, and process payments and refunds
- To manage bookings, personal training and club access
- To keep you safe while exercising, using your health declaration
- To send you sign-in codes, invoices and service messages by SMS, WhatsApp and push notification
- To send you offers and promotions, where you have agreed to receive them
- To find and fix crashes and errors, and to keep the App and our systems secure
- To prevent fraud and misuse, and to comply with our legal and accounting obligations
4. How We Share Your Information
We share information only with service providers that help us run the App and our clubs, and only what they need for that purpose:
- Payment providers (such as Ottu and Deema) to process payments and instalment plans
- Amazon Web Services (AWS) to host our servers, database and file storage
- Google Firebase for push notifications (Firebase Cloud Messaging) and crash reporting (Firebase Crashlytics)
- SMS and WhatsApp messaging providers to deliver sign-in codes, invoices and service messages
- Our club access system (face-recognition entry devices) to let you into our clubs
- The Public Authority for Civil Information (PACI) when you verify your identity with Kuwait Mobile ID
We may also disclose information when required by law or by a valid request from a public authority, or as part of a merger, acquisition or sale of our business.
We do not sell your personal information.
5. Data Security
We protect your information with technical and organisational measures, including encrypted connections (HTTPS), secure on-device storage for your sign-in session, and access controls on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
6. Push Notifications and Messages
We send push notifications about your bookings, memberships, invoices and account, and, if you agree, about offers and promotions. You can turn notifications off with the Notifications switch in the App's Profile tab, or in your device settings. Sign-in codes and invoices are sent by SMS or WhatsApp because they are needed to provide the service.
7. Your Rights and Choices
You can ask us to:
- Access a copy of the personal information we hold about you
- Correct inaccurate or incomplete information (you can also edit some details in the App)
- Delete your information
- Object to or restrict certain uses of your information
- Withdraw consent where we rely on it, for example for promotions or face recognition
Deleting your account: you can delete your account at any time in the App's Profile tab, using Delete Account, or by contacting us at it.apps@alnawadiholding.com.
To exercise any other right, contact us using the details below. We may need to verify your identity first.
8. Data Retention
We keep your information while your account is active and as long as needed to provide our services. When you delete your account:
- Your name, mobile number, Civil ID and email address are removed from your account, and you are signed out on all devices.
- Your face photo is deleted and removed from our entry devices.
- We keep a restricted archive of your member record, and your invoices and payment records, for up to 5 years after your account is deleted (or longer if the law requires), to meet our legal, accounting and dispute-resolution obligations. After that, we delete it.
Crash and error reports are kept by Firebase Crashlytics for up to 90 days.
9. Where Your Information Is Processed
Our servers are hosted by Amazon Web Services in data centres outside Kuwait, including in Ireland, and our notification and crash-reporting services are provided by Google. Your information may therefore be processed outside Kuwait. We use reputable providers that protect it in line with this policy.
10. Children
The App is not intended for children under 13. We do not knowingly collect information from children under 13 without a parent's or guardian's consent. If you believe we have done so, please contact us and we will delete it.
11. Links to Other Services
The App contains links to other services, such as maps, app stores, WhatsApp and our social media pages. Their own privacy policies apply when you use them.
12. Changes to This Policy
We may update this policy from time to time. We will post the new version here and in the App and update the "Last Updated" date. If the changes are significant, we will also let you know in the App.