隱私權政策

醫識通股份有限公司 · 生效日期：2026 年 3 月 24 日

醫識通股份有限公司（品牌名稱「Diagmind」，以下稱「本公司」或「我們」）重視您的隱私與個人資料保護。本政策說明當您使用本公司網站與服務——包含 welcome.diagmindtw.com、osceteacher.diagmindtw.com（虛擬病人教案生成平台）與 diagmindtw.com 相關服務（以下合稱「本服務」）——時，我們如何蒐集、處理、利用及保護您的個人資料。本政策依據中華民國《個人資料保護法》（下稱「個資法」）訂定。

一、我們蒐集的資料

帳號資料：電子郵件、姓名、服務機構、職稱／角色（由管理者建立帳號或您註冊時提供）。
使用紀錄：登入紀錄、教案生成請求與產出內容、匯出紀錄，以及為維運與安全目的產生的技術紀錄（如 IP 位址、瀏覽器類型）。
Cookie：僅使用功能性 session cookie（httpOnly）維持登入狀態；不使用廣告或跨站追蹤 cookie。
聯絡往來：您透過電子郵件與我們聯繫時所提供的內容。

二、蒐集目的與法律依據

提供、維運與改善本服務（契約之履行及本公司合法利益）。
帳號驗證、安全防護與濫用防制。
依法令規定所為之保存與揭露。

三、教學內容與病人資料

本服務為醫學教育工具，教案內容以 AI 生成之「虛擬病人」情境為設計基礎，並非真實病人資料。請勿在本服務中輸入可識別特定個人之真實病患資料（如姓名、病歷號、身分證字號等）。若教學需要引用真實案例，請於輸入前完成去識別化。

四、AI 生成與委外處理

教案生成功能會將您輸入的生成需求（主題、科別、對象、難度與教學重點等）傳送至第三方 AI 模型服務（如 Anthropic 之 Claude 模型）進行內容生成；傳輸過程採加密連線。除此類必要之委外處理（雲端基礎設施、AI 模型服務）外，我們不會將您的個人資料提供予第三方，亦不會出售您的個人資料。受委託之服務提供者僅得於委託範圍內處理資料。

五、資料保存

帳號資料與教案內容於帳號存續期間保存；帳號終止後，除法令另有規定外，將於合理期間內刪除或去識別化。技術紀錄僅保存維運與安全所需之期間。

六、資料安全

全站採 HTTPS 加密傳輸；密碼以加鹽雜湊（scrypt）儲存，任何人（包含本公司）皆無法還原明文。
依最小權限原則控管內部存取；使用者間資料相互隔離。
資料庫定期備份，異地備份以 AES-256 加密後儲存。

七、您的權利

依個資法第 3 條，您得就您的個人資料行使下列權利：查詢或請求閱覽、請求製給複製本、請求補充或更正、請求停止蒐集／處理／利用、請求刪除。行使權利請來信 info@diagmindtw.com，我們將於法定期間內回覆。

八、未成年人

本服務以醫事人員、醫學校院師生為對象，不以未滿十八歲者為服務對象。若我們知悉誤蒐集未成年人個資，將儘速刪除。

九、政策修訂

本政策修訂時，將於本頁公告並更新生效日期；重大變更將以適當方式通知使用者。

十、聯絡我們

醫識通股份有限公司（Diagmind）
統一編號：62243811
地址：高雄市鳳山區文龍東路 757 巷 10 號 3 樓
電子郵件：info@diagmindtw.com

Privacy Policy

醫識通股份有限公司 · Effective: March 24, 2026

This English version is provided for reference. In case of any discrepancy, the Traditional Chinese version prevails.

醫識通股份有限公司 (brand name “Diagmind”, hereinafter “we” or “the Company”) values your privacy. This policy explains how we collect, process, use, and protect your personal data when you use our websites and services — welcome.diagmindtw.com, osceteacher.diagmindtw.com (the virtual-patient lesson-generation platform), and services under diagmindtw.com (collectively, the “Services”). This policy is established in accordance with Taiwan's Personal Data Protection Act (PDPA).

1. Data we collect

Account data: email, name, institution, and role (provided at account creation).
Usage records: sign-in records, lesson-generation requests and outputs, export records, and technical logs kept for operations and security (e.g., IP address, browser type).
Cookies: functional, httpOnly session cookies only — no advertising or cross-site tracking cookies.
Correspondence: information you provide when contacting us by email.

2. Purposes and legal basis

Providing, operating, and improving the Services (performance of contract and legitimate interests).
Authentication, security, and abuse prevention.
Retention and disclosure required by law.

3. Teaching content and patient data

The Services are medical-education tools. Lesson content is built on AI-generated virtual patients, not real patient records. Do not enter identifiable real-patient data (names, chart numbers, national IDs, etc.). If a real case must be referenced for teaching, de-identify it before input.

4. AI generation and processors

Lesson-generation requests (topic, specialty, audience, difficulty, teaching focus) are transmitted over encrypted connections to third-party AI model services (such as Anthropic's Claude) to generate content. Apart from such necessary processors (cloud infrastructure, AI model services), we do not share your personal data with third parties, and we never sell your personal data. Processors may only handle data within the scope of engagement.

5. Retention

Account data and lesson content are retained for the life of the account, then deleted or de-identified within a reasonable period unless the law requires otherwise. Technical logs are kept only as long as needed for operations and security.

6. Security

HTTPS everywhere; passwords stored as salted scrypt hashes that no one — including us — can reverse.
Least-privilege internal access; per-user data isolation.
Regular database backups; off-site copies encrypted with AES-256.

7. Your rights

Under Article 3 of the PDPA you may: inquire about or review your data, request a copy, request correction, request cessation of collection/processing/use, and request deletion. To exercise these rights, email info@diagmindtw.com.

8. Minors

The Services are intended for healthcare professionals and medical-school faculty and students, not for persons under 18. If we learn we have collected a minor's data in error, we will delete it promptly.

9. Changes

Updates will be posted on this page with a new effective date; material changes will be notified appropriately.

10. Contact

醫識通股份有限公司 (Diagmind)
Unified Business No.: 62243811
3F., No. 10, Ln. 757, Wenlong E. Rd., Fengshan Dist., Kaohsiung City, Taiwan
Email: info@diagmindtw.com