Privacy
Poke Plan privacy notice
How we handle the information you and your child share when you use Poke Plan.
Last updated 26 October 2026
About this notice
This notice explains how Comfort Quest Pty Ltd (ABN 56 639 463 460) ("Comfort Quest", "we", "us") handles personal information in Poke Plan (poke.comfortquest.io), including its referral and feedback forms. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Comfort Quest built Poke Plan and is responsible for the information collected in it.
The apps we built with The Meg Foundation have their own notice. Our website has its own privacy policy. Apps we run for other organisations, such as Cap for Boston Children's Hospital, follow that organisation's privacy notice. The Storytime with Spud demo and DECIDE have their own notices.
Children and young people
Our apps help children and young people prepare for medical procedures such as needles and swab tests. They're designed to be used by a child together with a parent or carer. When a parent or carer completes an app with their child, they agree to this notice on the child's behalf.
If you're a young person using one of our apps on your own, please talk to a parent or carer before you share your email address.
We ask for the least we can. We ask for a first name or nickname, not a full name, and we don't ask for dates of birth, addresses, Medicare numbers or medical records.
What we collect
Poke Plan asks a short series of questions, then emails you a plan based on the answers. We collect:
| Form | What we ask for |
|---|---|
| Poke Plan | Your email address, your name or what your child calls you, what your child likes to be called, the reason for the needle, how anxious you feel about it, and your child's answers about what worries them, how they'd like to be comforted and the coping skills they'd like to use |
| Referral | The first name and email address of the parent or carer you invite, so we can send them Poke Plan |
| Feedback | Your email address, your child's age, how the procedure went, how often your child has medical visits, whether your child was held still and how, any pain afterwards, and your comments |
Health information.Answers about a procedure, a child's worries, pain or medical visits are health information, which the law treats as sensitive. We only collect it with your consent, which you give by completing the app, and we only use it for the purposes in this notice.
Technical information. Our hosting provider records standard details of each visit, such as your IP address, browser type and the pages requested. We use IP addresses to limit repeated submissions and block misuse.
How we use it
- to create your child's plan and email it to you
- to send one follow-up email, about two days later, asking how the procedure went
- to invite the person you refer
- to understand whether Poke Plan helps and to improve it. When we report on this, including in research or funding reports, we use combined figures that don't identify you or your child
- to respond to you if you contact us
We don't sell personal information. We don't send your answers to advertisers, and we don't add you to a mailing list.
Who we share it with
Service providers. We use service providers to run Poke Plan on our behalf, only to provide their service. They:
- host the app and the online forms, and store the answers
- receive completed forms and create your plan
- send plan and follow-up emails, and hold our email
We may also disclose information where the law requires or allows it.
Where it's stored. Some information is stored and processed in Australia. Most of our service providers also store or process it overseas, mainly in the United States, Europe and Japan. We choose providers with strong security practices, and we take reasonable steps to make sure they handle your information in line with the Australian Privacy Principles.
Cookies and analytics
Our forms use cookies to work properly and keep them secure. Poke Plan doesn't use advertising cookies, and it doesn't track you across other websites.
Storage, security and retention
We keep app responses with our service providers, behind accounts protected by strong passwords and two-factor sign-in where available. Only people at Comfort Quest who need the information can see it.
We keep app responses for up to 7 years after you complete the app, then delete them. If you ask us to delete your information sooner, we will, unless the law requires us to keep it.
Your choices
You can ask us at any time, for yourself or your child, to:
- show you the information we hold
- correct anything that's wrong
- delete it
- stop sending follow-up emails
Use the contact details below, and tell us which app you used and the email address you gave. We'll respond within 30 days, and there's no charge. To protect your information, we may need to confirm who you are first.
Questions and complaints
To ask a question, make a request or complain about how we've handled your information, use the contact form or email hello@comfortquest.io. Tell us what happened and how to reach you.
We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).
Changes to this notice
We'll update this notice when the apps or the way we handle information changes. The date at the top shows when it last changed.