CoExyst Legal
Version: 2026-10-23-v10
Effective at (UTC): 23 October 2026
CoExyst is operated by SHAUN MICHAEL HODGKINSON (ABN 80 554 964 227).
Contact:
PO Box 468, Wynnum QLD 4178, Australia
support@coexyst.app
Where Mya’s AI option is available in the web app, it helps interpret a request that Mya’s built-in rules could not understand. It uses Anthropic’s Claude Haiku 5.5 through Anthropic’s API. The model suggests a supported request and details taken from your words. CoExyst supplies Mya’s replies from fixed text. The model does not make household changes; you review and confirm a proposed change before it is made. The native iPhone app does not yet offer this AI option.
The option starts off. Before a request is sent, Mya asks for permission in the chat. “Allow once” applies to that request, not later requests. Choose “Not now” to continue with the rules. You can stop using the option at any time by declining later requests. Declining does not stop the rules from working. Permission already used cannot recall a request that has reached the provider. A note reading Read with the AI model appears under a reply that used the model.
A permitted request includes your message and, when needed for an open question, a small number of your recent messages, together with language, date, time and time zone. Names you type, including other people’s names, are sent to Anthropic as part of your message. CoExyst tries to replace email addresses, phone numbers, street addresses and links with placeholders, using a lookup held in server memory for that request. Other personal information may pass through exactly as typed. This attempt can miss information. CoExyst tries to block amounts, card details, passwords, access codes and identifiers before sending; detection can miss information. House records and attachments are not added to the model request. Do not include secrets or information you are not entitled to share.
The request is sent to Anthropic over HTTPS (TLS). CoExyst and Anthropic can read the request in order to process it. Anthropic may process it outside Australia, including in the United States or other countries it uses. When read on 23 October 2026, its first-party API offered no Australian-only processing option.
As published on 23 October 2026, Anthropic’s published commercial terms say it does not train its models on API content, subject to the exceptions in its terms. Its organisation retention policy permits standard API inputs and outputs to be retained for up to 30 days, with exceptions for particular features, agreements, enforcement and legal obligations. Content flagged for possible misuse may be kept for up to two years, and associated classification scores for up to seven years; legal requirements can extend retention. CoExyst has not signed a separate zero-retention agreement. See Anthropic’s retention policy and Commercial Terms.
CoExyst does not keep a separate copy of the outbound model request or raw model response. It keeps the Mya chat described below, the resulting interpretation needed for the conversation, and operational records such as outcome, timing and usage counts. A copy of a message awaiting permission can remain in conversation state after permission expires, until the conversation is next processed for cleanup. The temporary placeholder lookup is cleared after the request. These controls do not delete provider-held records.
A voice message is stored as audio so the members of that conversation can play it. The current version of the app does not send voice messages to an AI or speech service to turn them into text, and does not use your browser’s speech service to write text for them. Earlier versions did, using OpenAI for the audio and, in some browsers, your browser’s speech service, and any text they produced stays with its message and follows the same lifecycle as the message. A version of the app that is still installed or open from before this change may keep using your browser’s speech service until it updates.
Where CarPlay Ask Mya is available and you turn on its voice setting, it uses Apple speech recognition after the relevant microphone and speech permissions, and it can send audio to Apple. That path does not promise processing only on your device. You can change microphone or speech permissions in your device settings. Provider retention and improvement settings depend on that service; CoExyst does not promise a common deletion period for it.
When staff assistance is enabled and an authorised staff member requests it, selected support-ticket text, comments and relevant internal notes can be sent to OpenAI to help prepare a summary or reply for staff review. CoExyst tries to mask contact details and other identifiers, but names and other personal information may remain. This service uses OpenAI’s Responses API without an Australian processing pin; processing may be outside Australia. Requests disable response storage; OpenAI’s separate abuse-monitoring logs can retain content for up to 30 days, or longer when required by law or reasonably necessary to protect OpenAI’s services or another party from harm. API content is not used for training by default. This is a staff tool, not an automatic answer sent to you. Contact support@coexyst.app if you have a concern about a ticket’s handling.
Shopping image and receipt recognition uses Apple Vision on supported iPhones or Tesseract in the browser. These recognition steps process the image locally. The browser may download OCR software and language files from jsDelivr, which receives network-request information. This does not mean a receipt or its contents stay only on the device: when you attach a receipt or confirm recognised items, the resulting records can be stored in CoExyst and shared according to the feature’s permissions. Review recognised text before confirming it.
A separate model-based notice-interpretation feature is not enabled. It does not currently send household notice text to its model provider.
Where the Mya conversation is available, a pinned chat in Messages keeps your requests, Mya’s replies and references to actions taken. Requests made through the Dashboard can be recorded in the same conversation. The chat requires an online connection. The iPhone app does not keep your Mya chat on the phone.
CoExyst tries to mask money amounts and withhold text detected as card numbers, passcodes, Wi-Fi passwords or account details before keeping your typed words. Detection can miss information. Money and personal details that Mya looks up are represented by references, then resolved under your current access when you view the chat. If the item or your access has gone, the detail is unavailable.
Other housemates cannot open your Mya conversation. Ordinary admin and support screens do not display its thread. This is an application access boundary, not a claim that authorised database operators or infrastructure providers cannot access stored data. A support report is a separate record visible to staff handling it.
Messages older than 180 days are removed when the conversation is next opened or written to; there is no promise of deletion at the exact 180-day mark. A conversation row limit can remove older messages sooner. Clear history deletes the conversation’s messages and pending work, but does not undo household changes already confirmed. Completed account deletion removes your Mya conversation. If you leave a house you can no longer open or clear that conversation. It stays until you rejoin and clear it, your account deletion completes, or the house is deleted. Contact support to ask for earlier removal. Backups and service records are kept on their own schedules, described in the Third-Party Notices and the Data Retention & Deletion Policy, and clearing history does not change them.
Where Mya improvement is available, it is optional and starts off. If you choose it, contributions you select may be used to evaluate Mya and prepare reviewed examples. Before sending a report, you can review its excerpt and choose whether to include your typed words. Looked-up amounts, balances and item names are excluded. Contributions are not eligible for external provider training. Turning improvement off stops future eligible use under that choice; it does not automatically delete a support ticket already submitted. Contact support to request deletion of a report. Using Mya or accepting these policies does not itself opt you into improvement or provider training.
Where Mya reminders are enabled, an unfinished task can prompt up to three reminders, at about 1, 25 and 73 hours after its last touch. The second and third reminders follow about 24 and then 48 hours after the one before. Delivery respects your Mya notification setting and quiet hours. It uses push first, with email fallback when there is no eligible push device. The reminder uses fixed wording without conversation text; it creates no Inbox item, badge or unread count. A reminder link opens the Mya chat in your browser or email; push on the web app opens the CoExyst launch screen. The iPhone app will open Mya directly only once it carries Mya. You can turn Mya reminders off in notification settings. Feature availability and delivery checks can prevent a reminder.
Where the Mya conversation is available, Mya uses your typed requests, current conversation state, language and date/time context to suggest supported actions such as adding a shopping item, preparing a bill or task, or setting up a calendar entry. The AI option assists interpretation; it does not decide whether a household change should be made or bypass the review and confirmation step. Other rules use your account, membership and permissions to decide whether a feature or record is available, and, where reminders are enabled, task state and notification choices to decide whether a reminder is due. Support assistance helps staff review a ticket; OCR helps produce text from images. These outputs can be wrong. Check the relevant record or review card and contact support to question an outcome or ask for a correction.
For the purposes of privacy and data protection questions, CoExyst is operated by SHAUN MICHAEL HODGKINSON.
For privacy enquiries, including enquiries from outside Australia, contact us at the address above. This policy does not identify an appointed EU representative.
CoExyst stores account, profile, authentication, household coordination data, messages, photos, tasks, lists, bills, allocations, calendar items, reminders, house records, support messages, and collaboration metadata required to provide and secure the service.
Data is processed to provide CoExyst, secure accounts, operate household collaboration features, process billing, respond to support requests, maintain service quality, and meet legal or compliance obligations.
Where EU data protection law applies, processing may rely on contract performance, legitimate interests in operating and securing the service, legal obligations, consent where requested, and other lawful bases that apply to the specific processing activity.
We use Supabase for accounts and stored data, Vercel for hosting, Stripe for billing (and, for App Store purchases and subscriptions where available, Apple), Resend for marketing email and other email where Resend is the configured sender, Sentry for error reporting when enabled, and Apple and browser push services for notifications. The AI and speech services are described above. Browser OCR may download software and language files from jsDelivr. Other configured services include an SMTP relay that other non-marketing email may go through, Microsoft for support mail, Nominatim for address search, and external media or font providers such as Google and Vimeo. These services receive the data needed for the feature or resource request. The Third-Party Notices describe the data each service receives and the limits of the available location and retention information.
CoExyst is operated from Australia. Our configured application functions and database region include Tokyo, Japan. Providers may also process information in the United States and other countries through their infrastructure, support and subprocessors. A hosting region does not keep all processing in that country. In particular, the Anthropic option is not an Australian processing service.
Provider contracts and data-processing terms govern these transfers. This policy does not promise that overseas law gives the same rights as Australian law or that a particular contractual transfer mechanism applies to every provider. Contact us for information about a particular transfer. Choosing an optional feature does not waive rights that the law gives you.
Access controls and server-side permission checks restrict who can use household information. These controls do not mean that CoExyst or its service providers cannot process the information needed to operate the service. See Security and Responsible Disclosure for reporting a concern.
The CoExyst app for iPhone prepares an encrypted copy of your household information automatically after your first ready online Home. A one-time notice explains this and where to turn it off. The copy includes your Home summary, calendar and recent messages. You can turn off Keep this house on this phone in Settings. Turning this off removes the encrypted vault and stops automatic preparation until you turn it on again. Your Mya chat is not part of this copy.
Where the option is available, you can also choose files to keep offline, up to the size limit shown in Settings (1 MiB per file, or 3 MiB where the larger-file option is available). If Keep house documents offline is available and you turn it on for a house, the copy includes that house's documents, such as lease agreements, sub-letting agreements and entry notices, up to 50 MiB for that house.
This copy is encrypted and protected by your device's security. It is available only while your device is unlocked, and only within the CoExyst app. While you view a kept document, a temporary decrypted copy exists on your device and is removed when you close it.
Offline access lasts up to 72 hours from the last verified online access check (24 hours on older versions of the app, or when the longer period is not yet enabled for your account), counting time your device is asleep. Opening saved information does not extend that period. Expiry hides the content; it does not delete the encrypted copies. Information shown from your device displays how old it is.
After a restart, Face ID or your passcode can open the copy for the shorter of the remaining access period and 24 hours since the restart. When that allowance ends, the app explains why and asks you to connect and open Home for an access check. A clock or device-security check can also require an online check before access resumes.
CoExyst removes offline copies from your device when:
you sign out or switch accounts
your access to a house or document is removed, the next time the app connects
a verified deletion requires removal
you remove a kept file, turn off Keep house documents offline, or turn off Keep this house on this phone
If you have changes that have not been sent yet, they stay on your device until they are sent or you discard them. The app asks you before you sign out.
Accepted encrypted copies remain until you remove them or a verified deletion or access revocation requires removal. Age and storage pressure do not silently remove them. When storage is full, CoExyst refuses a new download and asks you to remove a copy to make room. This does not preserve every earlier version of a document or message.
Attachments and chat media are not downloaded automatically. You can see how much space CoExyst is using, and remove offline copies, in Settings.
CoExyst on the web does not keep this encrypted offline copy.
Data is retained according to operational needs, legal requirements, account lifecycle state, support needs, billing records, and security requirements. See the Data Retention & Deletion Policy for account deletion, Mya history, provider retention and the limits on deletion.
Accepted encrypted copies kept on your device remain until you remove them or a verified deletion or access revocation requires removal, as described in "Data stored on your device". Offline access expires separately; opening a local copy does not renew access.
We send marketing messages only to people who choose to receive them. You can choose separately whether to hear about CoExyst news and offers and whether we tell you when CoExyst opens in your region, and for each, whether by email, push notification or in-app message. These options start switched off. If we only have your email address, we ask you to confirm it before your choice takes effect. Saying no, or changing your mind later, does not affect your account or the account, security and household messages you need to use CoExyst.
If you joined the waitlist or applied for early access before this section was published, we keep that record separately and do not send you marketing on the strength of it alone.
To decide who receives a message (segmentation) and to measure results, we use your account or contact identifier, email address, language, region and state, your current household role, your account, plan and onboarding status, dates of product activity, how you respond to our campaigns, and your Access programme stage, tags and referral activity. We do not use the content of your bills, shopping lists or messages for marketing segmentation or campaign measurement. This does not prevent processing needed to provide the features you use, described above. We leave people out of campaigns while a payment is overdue, an account deletion is in progress or a trial is in arrears, and we do not use those states to target offers. Survey answers are used for marketing only if the survey said so when you answered. Household information is used only while you are a current member of that household.
When you give or change a marketing choice, we record the wording you saw and its version, the purpose and channel, where you made the choice, the time, your country and how the choice reached us.
We measure email delivery with signed delivery events from our email provider. Links in marketing emails pass through a CoExyst address so we can count clicks and see whether a campaign led to activity in CoExyst. We filter out clicks that look automated and, where numbers allow, compare results with a randomly chosen group that did not receive the message. We do not track whether you open an email. Account and service emails contain no marketing link tracking.
We send email through Resend, our email delivery provider, which may process your email address and delivery events outside Australia. Push messages use Apple's and your browser's push services. Within CoExyst, only authorised staff and marketing operators can see campaign data, and audience screens show counts and samples with identifying details withheld, rather than an address directory.
You can withdraw your consent at any time: use the unsubscribe link in any marketing email or your email app's unsubscribe button, change your choices in Settings, choose "Turn off these messages" on an in-app message, or "Turn off marketing" on a marketing push notification. Unsubscribing from email never requires you to sign in, pay, give more information or close your account. We act on a withdrawal straight away and check it again before each send. An unsubscribe does not expire.
To find out where we got your details, email support@coexyst.app and ask "Where did you get my details?" We will tell you the source of the details we use for marketing and show your consent record, including the form and date where we recorded them. You can also use the data request tools in the app.
We aim to keep consent records for the life of your account plus two years, and de-identify them if you ask us to erase your data. If you unsubscribe, we keep a one-way coded form of your email address to honour your withdrawal from those marketing messages. A suppression record is kept for as long as needed to honour your withdrawal. Campaign delivery records are kept for 13 months and then reduced to totals. Click and conversion records are separated from your identity when you withdraw consent.
We currently send marketing only to people in Australia and New Zealand, with the same choices and the same ways to withdraw in both. Every marketing email identifies the sender, CoExyst, operated by SHAUN MICHAEL HODGKINSON (ABN 80 554 964 227), PO Box 468, Wynnum QLD 4178, Australia, and includes a working way to contact us and to unsubscribe.
CoExyst’s Terms require users to be at least 16. Features involving payment responsibility or financial authority require users to be at least 18, as set out in the Terms. Do not submit a child’s sensitive information or another person’s secrets through an AI feature. If you believe a child’s information has been provided improperly, contact support@coexyst.app so we can review it.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact support@coexyst.app to make a request.
Contact support@coexyst.app with a privacy complaint so we can review it and respond. Depending on the law that applies, you may also complain to the Office of the Australian Information Commissioner or an EU supervisory authority. Contacting us does not remove any right to complain to a regulator.