1. 接受条款与使用资格

1. Acceptance and eligibility

创建账户、勾选同意或使用服务即表示你已阅读并同意本文件。如果你不同意，请不要使用 MedMate。你必须具备在所在地订立本协议以及同意处理个人信息的法律能力；如当地法律要求监护人同意，你只能在取得该同意后使用。你代表他人提交信息前，必须有权这样做。

By creating an account, checking the acceptance box, or using the service, you confirm that you have read and agree to this document. If you do not agree, do not use MedMate. You must have legal capacity under the laws where you live to enter this agreement and consent to personal-information handling. If guardian consent is required, you may use MedMate only after obtaining it. You must have authority before submitting information about another person.

2. 账户与安全

2. Accounts and security

• 请提供准确、最新的信息，并保护密码、登录设备和验证码。
• 使用 Google、Apple、WeChat 或其他第三方登录时，该服务商也会按其条款处理你的登录标识。
• 发现未经授权使用时，请立即更改凭据并通过应用内支持渠道通知我们。
• 你对账户下的活动负责，但法律另有规定或安全事件并非由你造成的除外。

• Provide accurate, current information and protect your password, devices, and verification codes.
• If you use Google, Apple, WeChat, or another third-party sign-in, that provider also handles your login identifier under its own terms.
• If you discover unauthorized access, change your credentials and notify us through the in-app support channel promptly.
• You are responsible for account activity except where law provides otherwise or a security event was not caused by you.

3. 医疗、诊断与 AI 限制

3. Medical, diagnostic, and AI limitations

MedMate 不是医生、护士、药剂师、诊所、药房、保险公司或急救服务。服务中的分诊级别、症状解释、药物对标、保险提示、就医沟通卡和其他输出仅供一般教育、整理与导航，不构成诊断、医疗建议、处方、治疗方案或专业意见，也不会建立医患、药患或其他专业关系。

MedMate is not a doctor, nurse, pharmacist, clinic, pharmacy, insurer, or emergency service. Triage levels, symptom explanations, medicine matching, insurance guidance, doctor communication cards, and other outputs are for general education, organization, and navigation only. They are not a diagnosis, medical advice, prescription, treatment plan, or professional opinion and do not create a clinician-patient, pharmacist-patient, or other professional relationship.

请向有执照的医护人员或药剂师确认与你个人有关的决定，特别是怀孕或哺乳、儿童或老年人用药、过敏、慢性病、药物相互作用、剂量、禁忌及症状加重等情况。

Confirm personal decisions with a licensed clinician or pharmacist, especially for pregnancy or breastfeeding, children or older adults, allergies, chronic conditions, interactions, dosage, contraindications, or worsening symptoms.

4. 紧急情况与持续监控

4. Emergencies and monitoring

MedMate 不适合紧急情况，不保证即时回复，也不会持续监控你输入的信息、自动拨号、发送消息或派出急救人员。若可能危及生命、出现严重症状或症状快速恶化，请拨打 911 或当地急救电话，或前往最近的急诊室。若涉及中毒或用药过量，请联系当地毒物控制中心和急救服务。

MedMate is not designed for emergencies, does not guarantee an immediate response, and does not continuously monitor your entries, automatically call or message anyone, or dispatch responders. For possible life-threatening situations, severe symptoms, or rapid deterioration, call 911 or your local emergency number or go to the nearest emergency department. For poisoning or overdose, contact your local poison centre and emergency services.

5. 药品、保险、位置与第三方资料

5. Medicine, insurance, location, and third-party information

药品名称、监管状态、成分、用途、替代品、库存、价格、门店、营业时间、路线、等候时间、学校政策及保险保障可能来自 Health Canada、地图服务、零售商、学校、保险机构或其他公开来源。附近门店位置和营业时间记录使用 © OpenStreetMap contributors（ODbL） 的数据，可能由 Geoapify 或 Nominatim 提供检索；嵌入地图和导航链接由 Google Maps 提供。这些资料会变化，我们不保证完整、实时、适合你或在任何地点均准确。购买、服用、就医或报销前，请直接与官方数据库、药剂师、商家、诊所、学校或保险机构核实。

Medicine names, regulatory status, ingredients, uses, alternatives, stock, prices, stores, hours, directions, wait times, school policies, and insurance coverage may come from Health Canada, map providers, retailers, schools, insurers, or other public sources. Nearby-store locations and recorded hours use data from © OpenStreetMap contributors (ODbL), with searches potentially provided by Geoapify or Nominatim; embedded maps and directions links are provided by Google Maps. This information changes, and we do not guarantee that it is complete, current, suitable for you, or accurate in every location. Before purchasing, taking medicine, seeking care, or filing a claim, verify with the official database, pharmacist, retailer, clinic, school, or insurer.

6. 允许使用与禁止行为

6. Permitted use and prohibited conduct

我们授予你一项个人、有限、非独占、不可转让且可撤销的许可，用于按本条款访问服务。你不得：

• 使用服务伤害他人、冒充他人、实施欺诈或从事违法活动；
• 提交无权提供的个人、健康、受版权保护或非法内容；
• 绕过安全、访问控制或使用限制，传播恶意代码，或干扰服务；
• 对服务进行未经允许的抓取、批量自动访问、逆向工程，或利用输出训练竞争系统；
• 把 MedMate 输出表述为经医护人员审核的诊断、处方或医疗记录。

We give you a personal, limited, non-exclusive, non-transferable, revocable licence to access the service under these terms. You must not:

• use the service to harm others, impersonate someone, commit fraud, or break the law;
• submit personal, health, copyrighted, or unlawful content that you have no right to provide;
• bypass security, access controls, or usage limits, distribute malicious code, or interfere with the service;
• scrape, automate access at scale, reverse engineer without permission, or use outputs to train a competing system; or
• represent MedMate output as a clinician-reviewed diagnosis, prescription, or medical record.

7. 第三方服务、链接与费用

7. Third-party services, links, and fees

服务可能连接到第三方登录、AI、地图（包括 OpenStreetMap/Nominatim、Geoapify 和 Google Maps）、政府数据库、零售、学校、诊所、保险、支付或其他网站。第三方独立控制其服务、条款和隐私做法，我们不为其内容、可用性或行为负责。离开 MedMate 或使用嵌入式第三方功能前，请查看相关条款。

The service may connect to third-party identity, AI, maps (including OpenStreetMap/Nominatim, Geoapify, and Google Maps), government databases, retail, school, clinic, insurance, payment, or other sites. Third parties independently control their services, terms, and privacy practices. We are not responsible for their content, availability, or conduct. Review their terms before leaving MedMate or using embedded third-party functions.

积分包均为单次付款，不会自动续费，积分不会过期。价格、获得积分数和适用税费会在购买前显示。除法律另有要求外，费用按购买时显示的规则处理。支付卡完整信息由支付服务商直接处理，我们不要求你在健康对话中提交支付信息。

Credit packs are one-time purchases, do not renew automatically, and do not expire. The price, number of credits, and applicable taxes are shown before purchase. Charges are handled under the purchase terms shown at that time unless law requires otherwise. Full payment-card details are processed directly by the payment provider; do not submit payment information in health conversations.

8. 你的内容与知识产权

8. Your content and intellectual property

在你与 MedMate 之间，你保留对自己提交内容的权利。你授予我们一项有限许可，仅用于托管、处理、传输、显示和改写该内容，以提供、保障、排错和改进你所使用的服务，并遵守法律。我们不会因本条款取得你的健康信息所有权。MedMate 的软件、品牌、界面及我们提供的原创内容受知识产权法保护。

As between you and MedMate, you keep your rights in content you submit. You give us a limited licence to host, process, transmit, display, and transform it only to provide, secure, troubleshoot, and improve the service you use and to comply with law. These terms do not give us ownership of your health information. MedMate software, branding, interface, and original content are protected by intellectual-property laws.

9. 服务变更、暂停与终止

9. Changes, suspension, and termination

我们可能为安全、维护、法律或产品原因更改、暂停或停止全部或部分服务。你可随时停止使用，并可通过账户或 Settings 中可用的功能请求删除数据或账户。若你严重或反复违反条款、造成安全风险或法律要求我们这样做，我们可限制或终止访问；在合理可行且不会增加风险时，我们会提供通知。

We may change, suspend, or discontinue some or all of the service for security, maintenance, legal, or product reasons. You may stop using it at any time and may use available account or Settings functions to request deletion of data or your account. We may restrict or terminate access for serious or repeated violations, security risk, or legal requirements and will give notice where reasonably practical and safe.

10. 免责声明与责任限制

10. Disclaimers and limits of liability

在法律允许的最大范围内，服务按“现状”和“可用”状态提供，不作关于准确性、适销性、特定用途适用性、不侵权或不间断可用的明示或默示保证。我们不保证 AI 输出、第三方资料或服务能发现每一种风险或满足你的需要。

To the fullest extent permitted by law, the service is provided “as is” and “as available,” without express or implied warranties of accuracy, merchantability, fitness for a particular purpose, non-infringement, or uninterrupted availability. We do not guarantee that AI output, third-party information, or the service will identify every risk or meet your needs.

在法律允许的最大范围内，MedMate 不对间接、附带、特殊、惩罚性或后果性损失，或数据、利润、机会或商誉损失负责。对于与服务有关的其他责任，我们的累计责任不超过你在引发索赔前 12 个月向 MedMate 支付的金额与 CAD $100 中较高者。本限制不排除法律不能排除或限制的责任，也不限制你依法享有的消费者权利。

To the fullest extent permitted by law, MedMate is not liable for indirect, incidental, special, punitive, or consequential losses or loss of data, profits, opportunity, or goodwill. For any other service-related liability, our total liability will not exceed the greater of the amount you paid MedMate in the 12 months before the claim and CAD $100. This does not exclude or limit liability that cannot legally be excluded or your non-waivable consumer rights.

11. 适用法律与条款变更

11. Governing law and changes to these terms

除所在地强制性消费者法另有规定外，本条款受加拿大不列颠哥伦比亚省法律及适用的加拿大联邦法律管辖。争议由不列颠哥伦比亚省有管辖权的法院处理。我们可能更新条款；重大变更会通过服务、邮件或其他合理方式通知，并更新页面日期。法律要求时，我们会再次取得同意。

Except where mandatory consumer law where you live provides otherwise, these terms are governed by the laws of British Columbia and applicable federal laws of Canada. Disputes will be handled by courts of competent jurisdiction in British Columbia. We may update these terms and will notify you of material changes through the service, email, or another reasonable method and update the date above. We will seek renewed consent where law requires it.

12. 我们收集的信息

12. Information we collect

我们主要从你本人、你的设备、你选择的登录服务，以及你使用的第三方功能收集信息。不要在不需要的字段中输入护照号、社会保险号、完整支付卡号或与服务无关的敏感信息。

We collect information mainly from you, your device, your chosen sign-in service, and third-party functions you use. Do not enter passport or social-insurance numbers, full card numbers, or unrelated sensitive information in fields that do not require them.

13. 使用信息的目的

13. Why we use information

• 创建、验证、保护和管理账户，并保存语言、同意与方案状态；
• 提供分诊导航、健康档案、药物查询、沟通卡、保险与位置相关功能；
• 在你授权后同步手机健康数据，让你在手机和网页上查看同一份健康记录；
• 根据你的选择，把健康档案、近期对话上下文或手机同步的健康数据摘要用于个性化结果；
• 运行、维护、排错、保障安全、防止滥用并改进服务；
• 回复支持、隐私、访问、更正或删除请求；
• 在你另行选择加入时发送产品或营销通信，你可随时退订；
• 履行法律义务、执行条款，并保护用户、公众与服务的权利和安全。

• create, verify, secure, and manage accounts and save language, consent, and plan status;
• provide triage navigation, health profile, medicine search, communication cards, insurance, and location features;
• sync phone health data you allow, so you see the same health record on your phone and on the web;
• use health-profile, recent-chat context, or a summary of phone-synced health data to personalize results when you choose to allow it;
• operate, maintain, troubleshoot, secure, prevent misuse of, and improve the service;
• respond to support, privacy, access, correction, or deletion requests;
• send product or marketing messages only when you separately opt in; you can unsubscribe at any time; and
• meet legal obligations, enforce terms, and protect the rights and safety of users, the public, and the service.

14. 健康信息、AI 与自动化处理

14. Health information, AI, and automated processing

健康信息通常属于敏感个人信息。为了生成分诊、摘要、药物对标或其他 AI 辅助结果，我们可能把你当前提交的内容，以及你明确允许使用的健康档案或会话上下文，发送给代表我们处理数据的 AI 服务商。根据部署配置，服务商可能包括 Google（Gemini）、OpenAI、Anthropic 或兼容模型提供商。我们要求只提供实现功能所需的信息，并采取合同、访问与安全措施，但互联网传输和 AI 处理仍存在残余风险。

Health information is generally sensitive personal information. To generate triage, summaries, medicine matching, or other AI-assisted results, we may send your current submission and health-profile or session context you expressly allow to an AI provider processing data on our behalf. Depending on deployment, providers may include Google (Gemini), OpenAI, Anthropic, or a compatible model provider. We seek to provide only what is needed for the feature and use contractual, access, and security measures, but internet transmission and AI processing retain residual risk.

AI 输出由自动化系统生成，通常不会在交付前由医护人员审阅，也不会单独产生对你具有法律或类似重大影响的决定。请自行检查输出并寻求人类专业判断。若界面提供“允许 AI 使用健康档案”等控制，你可关闭；关闭后可能降低个性化程度，但不应阻止你使用与该信息无关的基础功能。

AI output is generated automatically and is generally not reviewed by a clinician before delivery. It is not used by itself to make decisions with legal or similarly significant effects about you. Review outputs and seek human professional judgment. If the interface offers controls such as “allow AI to use my health profile,” you can turn them off. Doing so may reduce personalization but should not prevent use of basic features unrelated to that information.

手机同步的健康数据：健康档案页的“允许使用健康档案和最近分诊摘要，包括手机同步的健康数据”开关开启时（未保存过健康档案的账户默认开启），分诊和沟通卡草稿可能读取你最近 7 天内同步的健康数据摘要（例如计数、平均值和最近的读数，并注明同步时间），连同请求一起发送给上述 AI 服务商作为参考。这些数据来自消费级设备，只作一般参考：不用于诊断，也不用于判断紧急程度。摘要本身不会写入分诊记录，但 AI 的回答可能提到相关数据，回答会像其他对话一样保存；放进沟通卡的数据会先由你确认。关闭该开关后，AI 功能不会读取这些数据。我们不会出售来自 Samsung Health 或 Health Connect 的数据，也不会把它们用于广告或提供给数据经纪商。

Phone-synced health data: while the health-profile switch “allow use of my health profile and recent triage summaries, including health data synced from my phone” is on (it is on by default for accounts that have never saved a health profile), triage and the communication-card draft may read a summary of the health data you synced in the last 7 days — for example counts, averages, and recent readings, each with when it synced — and send it with your request to the AI providers above as reference. This data comes from consumer devices and is general reference only: it is not used for diagnosis or to decide urgency. The summary itself is not saved to your triage history, but the AI's answer may mention it, and that answer is saved like any other message; any figure placed in a communication card is confirmed by you first. With the switch off, AI features do not read this data. We do not sell data from Samsung Health or Health Connect, use it for advertising, or share it with data brokers.

15. 何时共享信息

15. When we share information

我们不会出售个人健康信息，也不会把个人健康信息提供给数据经纪商或用于第三方定向广告。我们可能在以下必要范围共享：

• 代表我们处理的服务商：云托管、数据库与身份验证（例如 Supabase）、AI 模型提供商、邮件、错误监测、客户支持和支付服务商；
• 地点和地图服务：手动地点文字会发送给 Geoapify 或 Nominatim 做地理编码；附近门店搜索仅提供近似坐标和门店类别，不提供药品名称。Google Maps 嵌入地图和导航链接可能接收 IP、设备及起点/目的地坐标；
• 你主动选择的其他服务：Google、Apple、WeChat 登录，以及零售商、诊所、学校、保险或政府网站。打开链接时，第三方可能收到 IP、设备或查询信息；
• 法律与安全：为遵守有效法律程序，调查欺诈或安全事件，或在法律允许时保护生命、健康、权利和系统安全；
• 组织交易：重组、融资、合并或资产转让，但接收方须依法保护信息且仅按本说明或另行取得的同意处理。

We do not sell personal health information or give it to data brokers or for third-party targeted advertising. We may share information where necessary with:

• Processors working for us: cloud hosting, database and identity services (such as Supabase), AI model providers, email, error monitoring, customer support, and payment providers;
• Location and map services: manually entered location text is sent to Geoapify or Nominatim for geocoding; nearby-store search provides only approximate coordinates and store categories, not the medicine name. Google Maps embedded maps and directions links may receive IP, device, and origin/destination coordinates;
• Other services you choose to use: Google, Apple, or WeChat sign-in and retail, clinic, school, insurance, or government sites. When you open a link, the third party may receive IP, device, or query information;
• Legal and safety recipients: to comply with valid legal process, investigate fraud or security incidents, or protect life, health, rights, and system security where law permits; and
• Organizational transactions: a reorganization, financing, merger, or asset transfer, subject to legal safeguards and use consistent with this notice or new consent.

16. 跨境处理

16. Processing outside your province or country

我们的服务商可能在加拿大、美国或其他司法管辖区存储或访问个人信息。因此，信息可能受当地法律约束，并在合法程序下由当地政府、法院或执法机构访问。我们会评估服务商并采用与信息敏感程度相称的合同、访问和安全保障，但无法改变其他国家的法律。

Our providers may store or access personal information in Canada, the United States, or other jurisdictions. Information may therefore be subject to local law and lawful access by local governments, courts, or law enforcement. We assess providers and use contractual, access, and security safeguards proportionate to sensitivity, but we cannot change the laws of another country.

17. 保存与删除

17. Retention and deletion

我们仅在实现上述目的、维护安全与审计记录、解决争议及满足法律要求所需的时间内保存信息。某些偏好保存在你的设备，账户、健康档案和分诊记录存储在受保护的服务器数据库中。一般而言：

• 账户资料在账户有效期间以及关闭后的合理结算、安全或法律期限内保存；
• 健康档案和对话记录保存至你删除相关记录、删除账户，或不再需要时；
• 手机同步的健康数据保存至你在 App 中选择“删除云端健康数据”、删除账户，或不再需要时；“断开健康数据”只停止以后的同步，不会删除已同步的记录，也不会删除 Samsung Health、Health Connect 或设备里的任何数据；
• 营销同意和退订记录可为证明选择及防止再次发送而保留；
• 备份和安全日志可能在有限周期后轮换删除；去标识化且无法合理关联个人的数据可能保留更久。

We keep information only as long as needed for the purposes above, security and audit records, dispute resolution, and legal obligations. Some preferences stay on your device, while accounts, health profiles, and triage records are stored in a secured server database. Generally:

• account details are kept while the account is active and for a reasonable settlement, security, or legal period after closure;
• health profiles and chat records are kept until you delete the relevant record or account or they are no longer needed;
• phone-synced health data is kept until you choose “Delete synced health data” in the app, delete your account, or it is no longer needed; “Disconnect health data” only stops future syncing — it does not delete records already synced, or anything in Samsung Health, Health Connect, or your devices;
• marketing consent and unsubscribe records may be retained to demonstrate and honour your choice;
• backups and security logs rotate out after a limited cycle; de-identified data that cannot reasonably be linked to a person may be retained longer.

删除请求会从活动系统中删除或去标识化适用信息，但法律保留义务、调查、备份轮换和技术限制可能造成合理延迟。

A deletion request removes or de-identifies applicable information from active systems, subject to reasonable delay for legal holds, investigations, backup rotation, and technical limits.

18. 安全措施

18. Security safeguards

我们根据数据敏感程度采用合理的管理、技术和物理措施，例如身份验证、用户范围访问控制、传输加密、最小权限、日志、备份和服务商审查。任何系统都不能保证绝对安全。请使用唯一强密码、保护设备，不要通过公共链接或不安全渠道发送敏感信息。如怀疑账户或数据安全受影响，请尽快联系我们。

We use reasonable administrative, technical, and physical measures proportionate to sensitivity, such as authentication, user-scoped access controls, encryption in transit, least privilege, logging, backups, and provider review. No system can guarantee absolute security. Use a strong unique password, protect your device, and do not send sensitive information through public links or insecure channels. Contact us promptly if you suspect account or data compromise.

19. 你的权利与选择

19. Your rights and choices

在适用法律规定的范围内，你可以：

• 询问我们是否持有你的个人信息、如何使用以及向谁披露，并请求访问副本；
• 更正不准确或不完整的信息；
• 请求删除账户、健康档案或其他适用信息；
• 撤回非必要处理的同意，关闭 AI 个性化或定位权限；撤回不会影响此前处理的合法性，但可能使部分功能无法使用；
• 随时取消营销邮件，不影响服务性、安全性或账户必要通知；
• 对我们的隐私做法提出问题或投诉。

Subject to applicable law, you may:

• ask whether we hold your personal information, how it is used, and to whom it was disclosed, and request access to a copy;
• correct inaccurate or incomplete information;
• request deletion of your account, health profile, or other applicable information;
• withdraw consent for non-essential processing and disable AI personalization or location permission; withdrawal does not invalidate earlier lawful processing but may make some features unavailable;
• unsubscribe from marketing at any time without affecting service, security, or required account notices; and
• question or complain about our privacy practices.

我们可能需要验证身份后再处理请求。访问权可能有法律例外，例如披露会暴露他人信息、特权资料或安全机密时；如不能满足请求，我们会说明原因和可用申诉方式。

We may need to verify your identity before acting. Legal exceptions to access may apply, such as where disclosure would reveal another person’s information, privileged material, or security secrets. If we cannot fulfil a request, we will explain why and identify available recourse.

20. Cookie、本地存储与设备权限

20. Cookies, local storage, and device permissions

MedMate 可能使用必要的 Cookie、会话存储或本地存储来保持登录、安全会话、语言和偏好。第三方登录、嵌入地图或支付组件可能设置自己的技术标识。你可通过浏览器管理 Cookie 和站点数据，通过设备设置撤回定位权限；阻止必要存储可能导致登录或偏好功能失效。若未来引入非必要分析或广告追踪，我们会在法律要求时提供单独通知和选择。

MedMate may use necessary cookies, session storage, or local storage for sign-in, secure sessions, language, and preferences. Third-party sign-in, embedded maps, or payment components may set their own identifiers. You can manage cookies and site data in your browser and withdraw location permission in device settings. Blocking necessary storage may break sign-in or preference features. If non-essential analytics or advertising tracking is introduced, we will provide separate notice and choice where required.

21. 儿童与青少年

21. Children and young people

MedMate 面向能够理解本说明并作出有效选择的用户，不特意面向儿童。未达到所在地可独立同意年龄或不具备理解能力的用户，应让父母或监护人阅读并在法律要求时同意。监护人如认为儿童在未经适当同意的情况下提供了信息，可联系我们请求审查和删除。

MedMate is intended for users able to understand this notice and make valid choices and is not directed specifically to children. Users below the age of independent consent where they live, or who cannot understand the consequences, should have a parent or guardian review and consent where law requires. A guardian who believes a child provided information without appropriate consent may contact us to request review and deletion.

22. 隐私负责人、请求与投诉

22. Privacy contact, requests, and complaints

隐私负责人对 MedMate 的个人信息管理负责。你可通过 MedMate 的 Settings → Legal & privacy 中所列支持渠道提出访问、更正、删除、撤回同意或投诉请求。请不要在公开 GitHub issue 或其他公开渠道发布健康信息或身份证明文件。

The Privacy Officer is accountable for MedMate’s personal-information practices. Submit access, correction, deletion, consent-withdrawal, or complaint requests through the support channel listed under Settings → Legal & privacy. Do not post health information or identity documents in a public GitHub issue or other public channel.

我们会调查并在法律规定的时间内回复。若你对处理结果不满意，可向 BC 信息与隐私专员办公室（OIPC BC）投诉；若 PIPEDA 适用，也可联系加拿大隐私专员办公室（OPC）。

We will investigate and respond within the period required by law. If you are dissatisfied, you may complain to the Office of the Information and Privacy Commissioner for British Columbia and, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.