Privacy
Meg Foundation apps privacy notice
How we handle the information you and your child share in the apps we built with The Meg Foundation.
Last updated 26 October 2026
About this notice
This notice explains how Comfort Quest Pty Ltd (ABN 56 639 463 460) ("Comfort Quest", "we", "us") handles personal information in the apps we built with The Meg Foundation. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
It covers these apps:
- SuperMeg Poke Plan (supermeg.comfortquest.io)
- SuperMeg and the Pain Champions (painchampions.comfortquest.io)
- Take Control
- Hack the Vax
- Swab Plan (swab.comfortquest.io)
The Meg Foundation helps families prevent and relieve pain. We built these apps together. Comfort Quest runs them and is responsible for the information collected in them.
Our Poke Plan app has its own notice. Our website has its own privacy policy. Apps we run for other organisations, such as Cap for Boston Children's Hospital, follow that organisation's privacy notice. The Storytime with Spud demo and DECIDE have their own notices.
Children and young people
Our apps help children and young people prepare for medical procedures such as needles and swab tests. They're designed to be used by a child together with a parent or carer. When a parent or carer completes an app with their child, they agree to this notice on the child's behalf.
If you're a young person using one of our apps on your own, please talk to a parent or carer before you share your email address.
We ask for the least we can. We ask for a first name or nickname, not a full name, and we don't ask for dates of birth, addresses, Medicare numbers or medical records.
What we collect
Each app asks a short series of questions, then emails you a plan based on the answers. Depending on the app, we collect:
| App | What we ask for |
|---|---|
| SuperMeg Poke Plan | Your email address, what your child likes to be called, and your child's answers about the needle and the coping skills they'd like to use |
| Pain Champions | Your medical provider's email address when you ask us to send them resources. If you sign up for the Pain Champions beta: your first name, your child's age, your email address and your answers to its surveys |
| Take Control | Your email address, the coping strategies you choose and your language |
| Hack the Vax | Your email address, what you like to be called, the name of someone you'd like to help you on the day, and your answers about vaccines and the strategies you'd like to use |
| Swab Plan | Your email address, what your child likes to be called, and your child's answers about the swab test. If you give feedback: your child's age, your ratings and comments, and your email address |
Health information.Answers about a procedure, a child's worries, pain or medical visits are health information, which the law treats as sensitive. We only collect it with your consent, which you give by completing the app, and we only use it for the purposes in this notice.
Technical information. Our hosting provider records standard details of each visit, such as your IP address, browser type and the pages requested. We use IP addresses to limit repeated submissions and block misuse.
How we use it
- to create your plan and email it to you
- to send one follow-up email asking how the procedure went (SuperMeg, Take Control and Swab Plan)
- to email resources to your medical provider, when you ask us to (Pain Champions)
- to understand whether the apps help and to improve them. When we report on this, including to The Meg Foundation and in research or funding reports, we use combined figures that don't identify you or your child
- to respond to you if you contact us
We don't sell personal information. We don't send your answers to advertisers, and we don't add you to a mailing list.
Who we share it with
The Meg Foundation.The Meg Foundation can see the responses to these apps, so it can understand how families use them and support them. It doesn't use them for marketing.
Service providers. We use service providers to run the apps on our behalf, only to provide their service. They:
- host the apps and the online forms, and store the answers
- pass completed forms to our email system
- send plan, follow-up and resource emails, and hold our email
- measure how the Take Control app is used, such as the screens viewed and buttons pressed, without your name or email address
Your medical provider.If you ask us to send resources to your medical provider, we send them an email from The Meg Foundation. We don't send them your child's answers.
We may also disclose information where the law requires or allows it.
Where it's stored. Some information is stored and processed in Australia. Most of our service providers also store or process it overseas, mainly in the United States, Europe and Japan. We choose providers with strong security practices, and we take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.
Cookies and analytics
Our forms use cookies to work properly and keep them secure. The Take Control app uses analytics cookies to measure how it's used. Our apps don't use advertising cookies, and they don't track you across other websites.
Storage, security and retention
We keep app responses with our service providers, behind accounts protected by strong passwords and two-factor sign-in where available. Only people at Comfort Quest, and at The Meg Foundation, who need the information can see it.
We keep app responses for up to 7 years after you complete the app, then delete them. If you ask us to delete your information sooner, we will, unless the law requires us to keep it.
Your choices
You can ask us at any time, for yourself or your child, to:
- show you the information we hold
- correct anything that's wrong
- delete it
- stop sending follow-up emails
Use the contact details below, and tell us which app you used and the email address you gave. We'll respond within 30 days, and there's no charge. To protect your information, we may need to confirm who you are first.
Questions and complaints
To ask a question, make a request or complain about how we've handled your information, use the contact form or email hello@comfortquest.io. Tell us what happened and how to reach you.
We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).
Changes to this notice
We'll update this notice when the apps or the way we handle information changes. The date at the top shows when it last changed.