Website operator: Fang Wilson · Support email and user-submitted diagnostics: Fang Wilson · Effective date: 2026-10-23
About this policy
This policy explains how Avelume Notes and the Wilson Studio websites handle information. For privacy questions or support, contact [email protected].
The Wilson Studio website is operated by Fang Wilson. Wilson Studio is a software brand, not a registered company.
Fang Wilson handles support email and diagnostic materials that users voluntarily send. Fang Wilson's parents are responsible for Apple commercial reports, including sales, financial and subscription reports. These are separate responsibilities; operating this website does not by itself identify the Apple Developer account holder or app licensor.
Avelume Notes provides note creation, editing, organization, import and export, with optional assistant and sync features. This policy describes the app and the separate data flows involved in iCloud, external websites, optional component downloads, feedback and this support website.
Core note features do not require an Avelume account. iCloud sync uses the Apple Account on your device; external websites may require their own sign-in. Avelume does not ask for your Apple Account password.
Notes and device storage
Note titles, text, handwriting, images, imported PDFs and attachments, folders, favorites, page information and Recently Deleted records are stored in the app's local library. Imported files generally become copies, not continuously linked edits of the original. The share extension temporarily stages selected files or links in Avelume's shared inbox for review in the main app.
The app also keeps preferences, recovery points, safety copies, sync checkpoints and necessary temporary files. Ordinary deletion does not promise irrecoverable erasure from all storage media. Device backups, exported backups and copies held by recipients are managed by the respective systems or by you.
The local library is saved in the app's Application Support storage as a structured archive, including handwriting data and imported document or image data. A previous valid copy and separate recovery points can also remain on the device.
Exported JSON library backups are not password-encrypted by the app. Their checksum helps detect damaged or inconsistent content; it does not encrypt the backup or authenticate its sender. Anyone with access to the file may be able to read its contents. Store and share backups only in locations and with recipients you trust.
Optional iCloud sync
When you confirm and enable sync, notes and attachments, organization information, and deletion or restoration state are sent to the current Apple Account's private CloudKit database so other enabled devices can read them. Apple provides the service under its terms, account requirements and storage limits.
Turning sync off stops subsequent app-initiated sync; it does not automatically delete data already uploaded. This note-sync flow excludes chat Memory and model files. Sync pauses while an editor is open: return to the library to check status. Sync is not a backup and does not guarantee an offline device has received every change.
Manage individual notes in the library and Recently Deleted. With sync enabled, deletion and restoration state can propagate to other enabled devices. Permanent deletion uses deletion markers rather than a promise to physically erase every CloudKit record. For account-level iCloud storage controls, use Apple's settings and review their effect before deleting anything; the app does not provide a one-click purge of the entire cloud database.
A private CloudKit database is not a public notebook collection; that is not an independently verified end-to-end encryption promise. Old sync records with an unknown or different cloud environment are not silently migrated. The recovery flow preserves a local backup, shows the target and impact, and asks for confirmation.
Assistant, conversations and Memory
The assistant stores conversations, session identifiers, necessary task state and compact summaries locally. History may include text, function graphs, related drafts you provide or generate, and image thumbnails used in the conversation. It retains up to the most recent 300 complete conversations; the oldest complete conversation is removed when the limit is exceeded.
A new conversation separates the current task but keeps historical Memory. The app retrieves limited relevant local summaries and excerpts alongside recent turns, not the entire history on every request. Continuing a saved conversation preserves original messages and related drafts, without restoring old pending actions, retries or attachments. Deleting a conversation removes it from the app's history retrieval, not from earlier backups or exported copies.
For a model request, the app also provides part of the library directory: titles, identifiers and page counts of the first 24 notes, folder names and identifiers, and titles and identifiers of the first 12 Recently Deleted entries. A request without an attachment is therefore not necessarily isolated from all note information. Explicitly provided pages, selections or attachments, and content read for your current request, may enter on-device model context. The Memory retrieval collection consists of chats, not an index of all notebook text.
Text in history or documents does not authorize new edits. Supported changes still require validation, preview and confirmation. AI can misunderstand or answer incorrectly; check the target and content before confirming.
Local AI and Apple on-device AI
Text and vision weights do not ship inside the app. For local offline text answers, choose to download the pinned text model in AI settings — 1,280,835,840 bytes, approximately 1.28 GB — or import a compatible file. File-size and SHA-256 verification and installation must complete before use. Verification, loading and inference happen on the device. Models do not download automatically, and local AI does not require Pro.
Automatic mode prefers an available Apple on-device capability, otherwise using an available local model according to settings. An explicitly chosen unavailable engine reports its status; it does not silently switch to a cloud model. The app currently has no remote-model answer-generation interface or workflow for training on your notes, images, PDFs or chats. iCloud, website access and component downloads are separate online activities.
Apple manages its system resources; availability depends on the device, OS, resources and required capability. A text model alone does not establish image understanding. On-device OCR and PDF text extraction are not equivalent to full image understanding. Turning off local AI does not automatically delete downloaded models; they can be removed separately.
Voice, camera and permissions
Tapping the microphone checks or requests microphone and speech permissions and requires on-device recognition support. Recognized text fills a draft and is sent only when you choose. This path does not save a notebook audio recording or fall back to cloud speech recognition. Typing remains available if recognition is unsupported, denied or fails. System-keyboard dictation is a separate system feature.
Document scanning uses the system camera-scanning interface. Confirmed pages become note content and may later sync if iCloud is enabled. Photo and file import use system pickers for selected content. File providers' own network processing is governed by those providers. Focus reminders use local notifications after permission. Permissions can be managed in system settings.
External websites and model downloads
Opening or importing a link connects the app's web view or downloader to that website. Requests may follow redirects and load page resources. Websites receive IP addresses and ordinary request information; sign-in may involve account information you supply and temporary cookies. Imported content may retain its source URL. The web view uses nonpersistent website storage, but that does not guarantee the website or its providers keep no logs or load no third-party resources. Avoid sharing source URLs containing private tokens.
Text and vision components are separate optional downloads. Vision is 668,227,264 bytes, about 668 MB, is downloaded only when separately chosen, and is not required for text answers. The app checks space and validates the pinned size and digest before installation; receiving all bytes is not completed installation. Writable model storage is excluded from the app's requested backup scope.
Downloading, retrying or choosing another source contacts the selected model host. Current sources include Hugging Face and user-selected HF Mirror, which may redirect to delivery networks. Requests carry the model path and ordinary network information, not the notebook or chat context prepared for an AI answer. Providers may process IP addresses, headers and access records. See the Hugging Face Privacy Policy. We have not independently verified HF Mirror's operator or retention terms, and we do not guarantee that either provider keeps no logs.
The pinned files are supplied from the unsloth/Qwen3.5-2B-GGUF repository on huggingface.co, or the same repository path on hf-mirror.com when that source is selected. These hosts deliver model files; they are not Avelume's remote inference service.
Feedback and diagnostics
Report a Note Issue prepares the note title and your description locally. The complete preview and shared text match; no note body, image, chat or log is automatically attached. You review the text and choose a recipient using the system share sheet. Review other screenshots or materials you add separately. There is no fixed app feedback-upload server.
If you contact support, Fang Wilson receives and handles the materials and contact details you send to address your request, including any diagnostic materials you voluntarily attach. Operator-held copies of support materials are used for handling and following up on your request. There is currently no automatic expiry mechanism or fixed maximum retention period. Deletion requires manual handling of mailbox copies, sent replies and downloaded attachments. You can request deletion at [email protected]; no fixed response time is promised here. Do not send passwords, verification codes, unreviewed logs or an unnecessary complete private library.
The app records local performance counts, stages and timings. CloudKit attachment diagnostics are limited to time, fixed error categories/codes, bounded nested codes, file existence, size and modification-state information. New records exclude record identifiers, paths and raw error descriptions. Older records are minimized on the next write of this diagnostic, not necessarily on launch. Neither old nor new logs should automatically be called anonymous. The app has no proprietary interface that automatically uploads these logs.
Apple's system crash and diagnostic reporting is governed by your device settings and Apple's policies. Reports made available to the developer are distinct from the app's local diagnostic files. A local-only log does not mean that a report you choose to send to support remains on your device.
Operator-held copies of manually downloaded Apple diagnostic reports also require manual deletion and currently have no automatic expiry mechanism or fixed maximum retention period. Deletion requests can be sent to the same support email. This describes copies held by the operator, not Apple's original records, Cloudflare or model-host records, or diagnostic files on your device. Those systems have their own retention rules; the app's local diagnostic file is size-bounded and has no one-month automatic-expiry rule.
Subscription information
Free allows new-note creation while the total of existing notes and recoverable notes in Recently Deleted is below 5. Pro removes only the new-note count limit; existing editing, AI, downloads, export, sync and recovery remain available. Expiry does not lock existing content or block recovery. The plans have no regular free trial or subscription Family Sharing and no additional app device-count limit.
Apple StoreKit supplies products, purchase and restore flows, and verified current entitlements, including product ID, purchase date, revocation, upgrade and ownership state. Apple processes payment. Avelume does not collect card numbers or Apple Account passwords and has no purchase server, purchase account system or device roster.
StoreKit maintains signed transaction history. The app holds verification state, current product ID and product information in process memory, without its own persistent entitlement database. Temporary verification failure retains only an already verified grant in the current process. Relaunch and offline restoration depend on StoreKit; no fixed offline-cache lifetime is promised.
Apple may make sales, financial and subscription reports available to developers. Aggregate reports differ from reports containing subscriber identifiers. Fang Wilson's parents are responsible for these Apple commercial reports and their downloaded copies, which are stored locally on a computer. No fixed automatic deletion period is currently set for these commercial-report copies. The support-material deletion process does not apply to these commercial reports. Apple's original records remain governed by Apple. Privacy requests may be sent to the contact address above for coordination with the responsible person. The app itself has no automatic developer-report collection interface.
Retention, deletion and your choices
- Deleted notes can be restored from Recently Deleted during the current 30-day retention period. Permanent deletion or expiry affects recovery, and deletion state may sync. Deletion markers may remain to prevent old devices bringing content back; independent recovery points and exported backups have separate lifecycles.
- Export editable Avelume files or create a library backup. A PDF is for portable viewing and does not fully replace an editable backup. Library backups exclude chats, model files, full settings and independent recovery-point files.
- Delete chats by whole conversation. Starting a new chat does not erase Memory; turning AI off does not automatically delete chats.
- Model settings manage downloaded models and clearable cache. Removing a model does not delete notes or chats. Beginner practice uses separate data and does not change personal notes or cloud settings.
- Deleting inside the app does not remove copies sent to other people, file providers or earlier device backups.
For privacy and deletion requests, contact [email protected].
This website
This website uses Cloudflare Pages hosting for Wilson Studio's domains. Cloudflare processes visitor network information, including IP addresses and traffic information, to provide its services, and may make service data available through the operator's account dashboard. Static HTML does not mean the host processes no information. See the Cloudflare Privacy Policy. Provider processing and retention depend on its applicable policy and service configuration; no zero-log commitment is made.
This site's files include no analytics scripts, advertising, external fonts, contact forms or automatic app-data uploads. The current hosting configuration has no Cloudflare Web Analytics site, no Logpush export job and no configured Zaraz tool. This does not disable Cloudflare's own hosting, security or operational data processing, or promise that its dashboard contains no service data. A selected light/dark appearance is stored in your browser's local storage; the website does not transmit that preference. Following an external link connects you to the linked provider, separately from Cloudflare serving this website.
Service providers and processing locations
The support mailbox, [email protected], is hosted by Migadu. Messages, sender details, attachments and delivery information pass through your email provider and Migadu, separately from the app. Fang Wilson uses Mac Outlook as a mail client connected directly to Migadu over encrypted IMAP and SMTP; this mailbox does not use Microsoft Cloud synchronization or Cloudflare Email Routing. See the Migadu Privacy Policy and, for the Outlook client, the Microsoft Privacy Statement. The operator's copy-retention rule covers copies under the operator's control, including mailbox and downloaded support copies; it does not set email providers' independent service-log or backup retention.
Apple services, Cloudflare hosting, model-file hosts, email providers and websites you open have separate data flows and policies. Depending on the provider and service configuration, information may be processed outside your country or region. This is not a claim that notebook contents are sent to every provider, or that all data is stored in a single country. Hugging Face's policy describes processing in the United States and other countries; the mirror's processing locations and retention have not been verified.
Security, changes and contact
The app uses the system sandbox, platform permissions, selected-file access, validation and saving mechanisms. Its reviewed implementation contains no advertising, cross-app tracking or third-party analytics SDK. This is not a promise that all data always stays on the device or that security incidents cannot occur.
We update this policy when our data handling changes. For questions about this policy or your information, contact [email protected]. Apple's services are also subject to Apple's Privacy Policy.