MeWill Privacy Policy
Version 2026-11-09.2・Effective 2026-12-01・MeWill is operated by MIDWAY Health Consultant Co., Ltd.
Under legal review; the version will be updated when finalized
This English version is a translation provided for reference. If there is any inconsistency, the Traditional Chinese version prevails.
MeWill is a health promotion and employee care platform operated by MIDWAY Health Consultant Co., Ltd. (米蔚健康顧問股份有限公司, "Midway", "we", "us"). This policy explains what personal data we collect on MeWill, how we use it, who can see it, how we protect and keep it, and the rights you have. It is provided as notice under Taiwan's Personal Data Protection Act (《個人資料保護法》).
1. Who this applies to and who is responsible
| Situation | Who is responsible for your data |
|---|---|
| Employee app (MeWill in LINE): health promotion features provided by your company | Your company decides which features to offer and imports the employee list; Midway processes the data on your company's behalf. |
| Care Center (Employee Assistance Program, EAPs): employees and family members | Your company purchases the program, but your requests and consultations are never given to your company. Your data is handled by Midway and the partner provider serving you. |
| Self-pay requests (public request page) | Midway collects your contact details and needs and, with your consent, provides them to the assigned provider to contact and serve you. |
| Company contacts, partner providers and professionals, and external advisors using the admin consoles | Midway collects your account data to provide and manage the service; rights and obligations are also governed by the contract between your organization and Midway. |
2. What data we collect
| Category | Details | Source |
|---|---|---|
| LINE identifiers | LINE user ID and display name. We verify your identity with LINE; we never receive your LINE password, friends or chats. | Provided by LINE when you open MeWill |
| Employment data | Name, employee number, company email, department, employment status | Employee list imported by your company; what you enter when linking |
| Usage records | Activity registration and check-in, health task and habit records, satisfaction surveys, buddy and team interactions, rewards and redemptions | Created when you use features |
| Health data | Check-up values and red/yellow/green levels, activity measurements, nurse interviews, gratitude journal, meal records and photos, weight and body fat, exercise records, weekly reports, professional consultation records, daily steps from device sync, etc. | Imported by your company, measured on site, entered or uploaded by you, or written by professionals |
| Care Center data | Your request (how to address you, contact details, what you want to talk about, preferred times, and any background you choose to provide), conversations with care specialists, appointments and attendance, records of on-site and online consultations (records of in-person counseling are not kept on the platform; see section 5), referral resources; for family members, which employee they are related to, the relationship and the family member's name | Entered by you in the Care Center; recorded by care specialists and professionals |
| Complaint data (SpeakUp) | If you choose to be named: your name, unit and title, contact details and address; the facts and evidence. You may file anonymously | Entered by you when filing |
| Self-pay request data | Name, mobile number, email, city or county, service category, a brief description, preferred times, whether you work for a partner company and its name | Entered by you on the self-pay request page |
| Admin account data | Name, email, role and permissions, two-factor settings; payout bank accounts of partner providers and professionals | Account setup and what you enter |
| System records | Sign-in and activity logs (for example, who viewed sensitive data and when), consent and withdrawal records | Generated automatically |
We do not read your LINE friends, chats or contacts. The web pages do not use advertising trackers or third-party analytics tools.
3. How we use it
- To verify your identity and provide your account and the features enabled by your company.
- Employee health management and promotion: health tasks, activities, measurement and check-up trends, nurse interviews, diet and exercise suggestions, weekly reports.
- To arrange and provide Care Center services, and to match and contact you for self-pay requests.
- To receive and handle complaints under your company's complaint procedure.
- To give your company de-identified statistics (no breakdowns for any group of fewer than 5 people).
- Information security, auditing, preventing misuse, and meeting legal obligations.
Health-related items (such as meal photo AI analysis, weekly reports and device sync) require your separate consent. You may consent to only some items and withdraw at any time.
4. Data levels and protection
MeWill classifies data into the levels below. The more sensitive the data, the fewer people can see it and the stronger the protection:
| Level | Examples | Protection |
|---|---|---|
| Public | Public articles, service catalog | Visible to everyone |
| Organization | Employee list, registration and attendance, case status and counts, aggregate statistics | Access controlled by role and company; the database also restricts reads to your own company's data |
| Self-pay requests | Contact details and the brief description | Visible only to Midway operations staff and the assigned provider; never sent to AI; deleted twelve months after the request is closed |
| Health | Check-ups, measurements, interviews, journal, meals and photos, professional consultations | Health values and content are encrypted with AES-256-GCM using a separate derived key for each company; the master key is held by a cloud key management service; every view is logged |
| Case | Care Center requests, conversations and records, family-member links, complaint cases | Each case is encrypted with its own key; only people assigned to the case can open it, and every opening is logged; never included in statistics or reports and never sent to AI (the single exception is conversation translation, see section 6) |
| Restricted | Payout bank accounts | Encrypted separately; handled only by finance and platform administrators |
All data in transit uses HTTPS. Admin sign-in requires an email verification code plus two-factor authentication, and sessions end automatically after a period of inactivity. No system can guarantee absolute security; we keep reviewing and improving our safeguards.
5. Who can see your data
| Who | What they can see |
|---|---|
| You | Your records, health data, weekly reports, and the requests and complaints you submitted; you can download your own data |
| Your company's authorized health staff (occupational health nurses) | Your check-up and measurement values, risk levels and nurse interviews. Every view is logged |
| Other company contacts (for example HR, safety, managers) | The employee list, activity registration and attendance, de-identified statistics. They cannot see individual health values, whether you use the Care Center, or what you said |
| Your company's complaint contacts | Only the complaint cases assigned to them; company administrators can add handlers case by case, every addition is logged, and the respondent and other interested parties are excluded |
| Buddies, group members, teammates | Only your name and whether you completed a task; never any health values |
| Care specialists and the professionals serving you | Only the cases they are responsible for: requests, conversations and consultation records. Records of on-site and online consultations are encrypted on the platform, readable only by the assigned professional and the care specialist, never sent to AI and never aggregated. For in-person counseling at a partner provider's premises, the provider keeps the records itself under health authority rules; the platform records only the appointment and session times |
| Midway field staff | When scanning your QR code at an on-site event, they see your name and enter your measurements; they cannot see past results or the employee list |
| Midway nutrition reviewers | When reviewing an "analysis is wrong" report you sent, they see only the photo and AI result, not who you are |
| Midway operations staff | Contact details and the brief description in self-pay requests, to match a provider; they cannot see employees' health data or case content |
| Other Midway staff and external advisors | Only counts, aggregates, case progress and settings; no employee personal data |
Midway system operators have administrative access to the infrastructure in order to maintain the system. Case data uses per-case keys, and emergency unlocking requires two platform administrators acting together and recording the reason. We do not sell your personal data or provide it to advertisers.
6. Use of AI
The AI service MeWill uses is Claude, provided by Anthropic. Data sent to the AI does not include your name, employee number or company name. AI is currently used for:
- Meal photo analysis and the nutrition coach (with your separate consent): photos are resized on your phone and stripped of location and similar information before upload.
- Weekly reports (with your separate consent): data is de-identified before it is sent to the AI. We do not send your name or anything that could identify you, and we do not send actual values, only the direction and range of change (for example, "weight slightly down from last week").
- Care Center conversation translation (with your separate consent): when you and the care specialist use different languages, messages are sent to the AI for translation after names, emails and phone numbers are masked. This is the only situation in which case data is sent to AI.
- LINE group assistant: in work groups that have added MeWill's assistant, messages are pseudonymized and sent to the AI to summarize key points; health, complaint and care-related content is excluded. Original messages are kept for at most 7 days.
- Translation of public content (for example articles and task descriptions).
Complaint cases, Care Center consultation records and requests, and the brief descriptions in self-pay requests are not sent to AI for analysis.
7. Third-party services and international transfers
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud | Hosting, database, key management, file storage, scheduling | Taiwan (asia-east1) |
| Google Workspace | Creating Google Meet meetings and calendar invitations for online consultations (attendees' email addresses are provided to Google) | Per Google's service locations |
| LINE (LY Corporation) | LINE Login, Official Account messages and menus, and invitation messages you share yourself with "Invite a buddy" (task name, invitation link and code; no health data). Care conversations held in LINE also remain in LINE | Per LINE's service locations |
| Amazon Web Services (Amazon SES) | Sending verification codes and notification emails (emails contain no health values) | Japan (Tokyo) |
| Anthropic (Claude) | The AI features listed in section 6 | Outside Taiwan |
Some providers process data outside Taiwan. We provide only the minimum data each service needs, and we follow any restrictions on international transfers imposed by the competent authority under Article 21 of the Personal Data Protection Act. LINE handles your data on LINE under its own terms.
8. Retention
| Data | Retention and deletion |
|---|---|
| Employee app data | Kept while you are employed. After your company marks you as having left, you have 30 days to download your own data in LINE; after that it is handled under the contract between your company and Midway. Health check-up records your company must keep by law are kept for the periods set by the Labor Health Protection Rules (《勞工健康保護規則》) |
| Health-related consent items | When you withdraw consent, processing stops and that item's data is deleted (for example, withdrawing meal photo analysis deletes the photos and results; withdrawing weekly reports deletes the reports already generated) |
| Meal photos | Retention period of 1 year; after it ends, Midway reviews and deletes them periodically |
| Care Center data | Kept for the retention period set in your company's EAPs program; after it ends, Midway and the Care Center review and delete the data periodically. Case data is deleted by destroying that case's key |
| Complaint data | Kept as required by complaint-related regulations (3 years after the case is closed or withdrawn) |
| Self-pay request data | Twelve months after a request is closed we delete your name, contact details, the brief description and internal notes, keeping only the request number, service category, city or county and outcome; you may ask us to delete it earlier at any time |
| LINE group assistant originals | At most 7 days |
| Financial and accounting records | For the periods required by tax and business accounting laws |
| Short-term records such as verification codes and sessions | Kept for 1 to 30 days; after that, Midway clears them periodically |
| Visitor records not linked to a company | If not linked for 90 days and no other data exists, Midway reviews and deletes them periodically |
| Activity and audit logs | Kept for information security and evidentiary purposes |
After deletion, copies in backups disappear as backups rotate. Data that the law requires us to keep is not used for other purposes during the retention period.
9. Your rights
Under Article 3 of the Personal Data Protection Act, you may inquire about or review your personal data, request a copy, request supplementation or correction, request that collection, processing or use be stopped, and request deletion. These rights cannot be waived in advance or limited by contract.
- Download your data: on the "Me" page of the employee app you can download your own data (CSV), including within 30 days after leaving your company.
- Withdraw consent: item by item on each feature's "Settings & privacy" or "Privacy & consent" page.
- Other requests: email admin@midwayforyou.com or contact your company. For requests about company data (such as employment or check-ups), we will forward them to your company and help handle them.
We respond within the periods in Article 13 of the Act: 15 days for inquiries, reviews and copies; 30 days for correction, supplementation, stopping processing and deletion. Each may be extended once when necessary, with written notice of the reason.
If you do not provide data: employment data is required to link your company. Health-related items are optional; declining affects only that feature and should not affect your employment rights.
10. Data breaches
If personal data is stolen, leaked, altered or otherwise infringed, we will notify the companies concerned immediately and, after investigating, notify you by appropriate means such as a LINE message or email of what happened and the measures taken.
11. Minors
MeWill is provided for company employees and their family members. People under 18 should use services such as the Care Center with the involvement or consent of a legal guardian.
12. Changes to this policy
When this policy changes, we will post the new version and its effective date on the platform. For significant changes, such as new data items or purposes, we will ask for your consent again.
13. Contact us
MIDWAY Health Consultant Co., Ltd. (operator of MeWill)
Personal data requests and questions: admin@midwayforyou.com