CoExyst Legal
Version: 2026-10-17-v4
Effective at (UTC): 17 October 2026
Effective date: 2026-10-17
CoExyst is operated by SHAUN MICHAEL HODGKINSON (ABN 80 554 964 227).
Contact: PO Box 468, Wynnum QLD 4178, Australia support@coexyst.app
For the purposes of privacy and data protection questions, CoExyst is operated by SHAUN MICHAEL HODGKINSON.
TODO: Confirm whether an EU representative is required or appointed before relying on this policy as final legal copy.
CoExyst stores account, profile, authentication, household coordination data, messages, photos, tasks, lists, bills, allocations, calendar items, reminders, house records, support messages, and collaboration metadata required to provide and secure the service.
Data is processed to provide CoExyst, secure accounts, operate household collaboration features, process billing, respond to support requests, maintain service quality, and meet legal or compliance obligations.
Where EU data protection law applies, processing may rely on contract performance, legitimate interests in operating and securing the service, legal obligations, consent where requested, and other lawful bases that apply to the specific processing activity.
Verified providers in this repository include Stripe for billing, Supabase for authentication and data services, Sentry for error reporting when configured, Resend for email delivery, and hosting providers used to operate and support CoExyst.
TODO: Confirm the final public subprocessors list, hosting region details, email provider details, and any additional operational providers.
CoExyst is operated from Australia and may use service providers in other countries. Where required, appropriate transfer safeguards should be confirmed with each provider.
TODO: Confirm final international transfer safeguards before relying on this policy as final legal copy.
Access controls, server-side enforcement, and security practices are used to restrict data access. Personal details stay protected by CoExyst's privacy and sharing rules unless intentionally shared.
Data is retained according to operational needs, legal requirements, account lifecycle state, support needs, billing records, and security requirements. More detailed deletion behavior is described in the Data Retention & Deletion Policy where available.
We send marketing messages only to people who choose to receive them. You can choose separately whether to hear about CoExyst news and offers and whether we tell you when CoExyst opens in your region, and for each, whether by email, push notification or in-app message. These options start switched off. If we only have your email address, we ask you to confirm it before your choice takes effect. Saying no, or changing your mind later, does not affect your account or the account, security and household messages you need to use CoExyst.
If you joined the waitlist or applied for early access before this section was published, we keep that record separately and do not send you marketing on the strength of it alone.
To decide who receives a message (segmentation) and to measure results, we use your account or contact identifier, email address, language, region and state, your current household role, your account, plan and onboarding status, dates of product activity, how you respond to our campaigns, and your Access programme stage, tags and referral activity. We never use the content of your bills, shopping lists or messages. We leave people out of campaigns while a payment is overdue, an account deletion is in progress or a trial is in arrears, and we do not use those states to target offers. Survey answers are used for marketing only if the survey said so when you answered. Household information is used only while you are a current member of that household.
When you give or change a marketing choice, we record the wording you saw and its version, the purpose and channel, where you made the choice, the time, your country and how the choice reached us.
We measure email delivery with signed delivery events from our email provider. Links in marketing emails pass through a CoExyst address so we can count clicks and see whether a campaign led to activity in CoExyst. We filter out clicks that look automated and, where numbers allow, compare results with a randomly chosen group that did not receive the message. We do not track whether you open an email. Account and service emails contain no marketing link tracking.
We send email through Resend, our email delivery provider, which may process your email address and delivery events outside Australia. Push messages use Apple's and your browser's push services. Within CoExyst, only authorised staff and marketing operators can see campaign data, and audience screens show counts and anonymised samples, never a list of people or addresses.
You can withdraw your consent at any time: use the unsubscribe link in any marketing email or your email app's unsubscribe button, change your choices in Settings, choose "Turn off these messages" on an in-app message, or "Turn off marketing" on a marketing push notification. Unsubscribing from email never requires you to sign in, pay, give more information or close your account. We act on a withdrawal straight away and check it again before each send. An unsubscribe does not expire.
To find out where we got your details, email support@coexyst.app and ask "Where did you get my details?" We will tell you the source of the details we use for marketing and show your consent record, including the form and date where we recorded them. You can also use the data request tools in the app.
We keep consent records for the life of your account plus two years, and de-identify them if you ask us to erase your data. If you unsubscribe, we keep a one-way coded form of your email address so that we never send you marketing again. Campaign delivery records are kept for 13 months and then reduced to totals. Click and conversion records are separated from your identity when you withdraw consent.
We currently send marketing only to people in Australia and New Zealand, with the same choices and the same ways to withdraw in both. Every marketing email identifies the sender, CoExyst, operated by SHAUN MICHAEL HODGKINSON (ABN 80 554 964 227), PO Box 468, Wynnum QLD 4178, Australia, and includes a working way to contact us and to unsubscribe.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact support@coexyst.app to make a request.
If EU data protection law applies, you may have the right to complain to an EU supervisory authority. You can also contact CoExyst first so the issue can be reviewed.