Privacy Policy

What this notice covers

This notice covers the Wexon application and the specimen archive it keeps on the device where you install it. It covers photographs, the facts you type beside a stone, the drawers you arrange, the cards you render, and the system permissions the app asks for so those tasks can run. It also covers an optional name and a short note you may leave on the device, and the choice you make when the operating system asks about tracking.

Wexon does not operate a separate website for the archive, and this notice is not a description of some other product. If a future version of the cabinet handles information in a materially different way, the notice inside the app will be replaced and its effective date will change.

Opening the cabinet without an account

Wexon has no mandatory account system. You can file stones as soon as the app is on your device. We do not ask you to set up access details, and we do not keep a remote record that identifies you to us as a named user of a service.

You may type a display name and a short note. Both stay in local preferences on the device and can appear inside the app so the cabinet can address the shelf in your own words. That text is a local label for your reference. It is not an account, it is not published, and it is not used to recognize you in another service. If you leave the name blank, the app uses a generic stand-in so the screen still has a heading.

Records kept beside each stone

What the archive holds is mostly what you choose to put there. For each specimen, Wexon can store:

• One or more photographs, saved as image files in the app's documents folder and referenced by a relative path, so the app can find them again on that device.
• A catalog number generated on the device, a name you give the stone, and the dates the entry was created and last changed.
• Size text for length, width, and height, and a weight figure if you enter one.
• A place name you type yourself. Wexon does not collect a map location for you, and it does not offer a tool that reads hidden location data out of an image file and files it as a place.
• A date you set for when you acquired the piece, if you set one.
• A source label you select to describe how the stone came to you. That label is about the stone. It is not a record of a transaction with Wexon.
• Notes and tags you write, and the drawers you assign the entry to.

A drawer keeps a title, a kind, a color label, an optional cover chosen from a specimen, and the date the drawer was created. The first time the cabinet is prepared, and again if you clear the archive, Wexon can restore a small set of starter drawers, including River Finds, Mineral Specimens, and Tumbled & Raw, together with a drawer for stones you already owned before you filed them. You can add your own drawers and rename them.

A few technical flags stay in local preferences. They remember setup steps, such as whether starter drawers have already been prepared and whether the tracking prompt has already been requested. They are not your catalog. The app can also read its own version number to show it on screen. That version text is not sent to a Wexon archive service.

Notes, tags, names, and place text are free text. They contain whatever you decide to write, which may be sensitive if you choose to make it so. A photograph can show more than the stone: a hand, a room, a label with someone else's writing, or a place you did not intend to publish. Treat those fields as part of the device, not as a private channel to us.

Why those records are processed

The archive processes this information on the device so the cabinet can do the things you ask of it. That includes creating and editing a specimen, showing it in a grid or a list, searching by name, catalog number, typed place, or tag, and sorting by newest, oldest, name, weight, or size. Filtering by drawer, source label, or tag happens on the device as well. Search text is not sent away to be interpreted.

The same records are used to draw the entry, to choose a cover for a drawer, and to render a specimen card. Wexon offers three card layouts: Classic Label, Dark Mineral, and Field Note. A rendered card carries the primary photograph, the catalog number, the name, size, weight, place, acquisition date, and source label, plus tags when you have added them. The Field Note layout can also include a portion of your notes. The other two layouts do not print the notes. Empty facts appear as blanks. The line "Archived with Wexon" is part of the card layout. It marks the template. It is not a statement that a laboratory checked the stone.

The optional name and note are processed only to display and store that local label. The tracking-prompt flag is processed only so the app does not keep presenting the same system question after it has already been handled.

Camera, photo library, and microphone

Wexon asks for system permissions at the moment a task needs them, not as a condition of opening the cabinet.

Camera access is used to photograph a specimen while you create or edit an entry. The picture can become the main image on the entry, the cover of a drawer, and the photograph on an exported card. If you decline, that capture path is unavailable. You can still type a record, and you can still import an existing picture if photo library access is allowed.

Photo library access, for reading, is used when you choose to import a picture you already have into an entry. The imported image is copied into the app's documents folder and kept with that entry. Photo library access, for adding, is used only when you choose to save an exported card to your photo library. Wexon does not browse your library in the background and does not add images unless you start that save.

Microphone access is requested when you open the camera path, because that capture flow asks for it. The specimen record stores still photographs. Wexon does not keep a separate sound file on the entry, and it does not listen while the app is closed or sitting in the background. If you decline the microphone, still-photo capture can continue.

You can refuse any of these permissions. Refusal limits the related action and leaves the rest of the cabinet usable. After the first choice, the operating system is where you change the permission. Wexon does not have a separate switch that overrides the system.

When a card leaves the device

The archive itself is not uploaded to a server operated for Wexon. Photographs, notes, drawer lists, catalog numbers, and the optional name stay in the app's local storage unless you take a step that copies something out.

Two steps do that, and both wait for you. Saving to Photos writes the rendered card image into your photo library, if add permission is allowed. The system share sheet hands that image to an app, a person, or an action you pick. From the moment the image leaves Wexon, the destination handles its own copy. A shared card can be stored, forwarded, or printed by whoever receives it. Wexon cannot pull that copy back, because it does not sit in a cabinet we host.

Look at a card before you send it. Depending on the layout, it can show the photograph, the place name you typed, the source label, the tags, and, on Field Note, part of the notes. If those details should stay on this device, do not share that card.

The tracking question at launch

When Wexon starts, it may ask the operating system to present a tracking permission prompt. The prompt's purpose is to allow measurement of which specimen workflows and related prompts you engage with across partner apps and websites, so onboarding tips, export-card prompts, and recommendations can better match how the cabinet is used. Your specimen photographs and notes remain stored on the device either way.

If you allow tracking, you authorize the measurement the system prompt describes. That measurement can involve partner apps and websites, because that is the scope of the permission. If you decline, that authorization stays off, and the cabinet still opens, files stones, and renders cards. Wexon stores a local marker that the prompt has already been requested, so it does not repeat the question on every launch. The marker is a yes-or-no flag about the prompt. It is not your catalog and it is not the optional name.

You can revisit the choice later in the system settings for this app, where the operating system offers that control. The current app does not bundle a separate analytics product of its own for the specimen archive.

Other hands that may receive material

Wexon does not sell the specimen archive, and it does not operate a brokered catalog of collectors. Material can still leave your sole control in a few concrete cases.

• You, when you save a card to the photo library or pass it through the system share sheet.
• The person or application you choose as the destination of a share. Their practices apply to the copy they receive. Wexon does not control that destination and does not receive a report of what they do with the image.
• The maker of the operating system, because the camera, the photo library, the tracking prompt, and the share sheet are system features. Those features follow the system software and the settings on your device.
• If you allow tracking, the partner apps and websites covered by that system permission, for the measurement described in the prompt.

Certain features that depend on the platform may cause the device to contact the platform's own services. That contact is not an upload of your specimen archive to a Wexon server. We do not claim that a card, once shared, stays limited to the people you had in mind.

How long a record stays

Specimen records and their photographs remain on the device until you delete them, clear the archive, or remove the app. Deleting one photograph removes that file from the app's documents folder. Deleting a specimen removes its record and its image files, and if that specimen was a drawer cover, the cover link is cleared. Deleting a drawer removes the drawer and the links from specimens to that drawer. It does not delete the specimens themselves.

Clearing archive data, from the screen that also holds the optional name, deletes every specimen and its photographs and restores the starter drawers. The optional name and the short note are left in place. This action cannot be undone from inside Wexon, and we have no server copy we could send back to you.

Removing the app deletes its sandbox on that device, including the archive, the photographs, the technical flags, and the optional name, except where a copy remains in a backup made by the operating system or by you. Wexon does not provide its own cloud shelf. If a backup still holds the app's data, that copy lasts until you remove it from the backup. Catalog numbers are local. After a clear, numbering can start again, so a number is a label on this device, not a permanent public registry entry.

Choices you can make on the device

You decide how full an entry is. Name and at least a photograph are the practical core of a useful record, and the other facts can stay blank. You can decline the camera, the microphone, either photo library permission, and the tracking prompt. You can delete a single photograph, a single specimen, or a drawer. You can clear the whole archive. You can edit or remove the optional name and note. You can refrain from saving or sharing a card. You can delete the app.

Because the archive is local, these choices take effect on the device. They do not reach a copy you have already saved to the photo library, already shared, or already left inside a system backup. If you need a card to disappear from those places, you have to remove it there as well.

Care of a shelf that lives on the phone

Specimen files sit in the application sandbox, in the documents area, with image paths stored relative to that area rather than as a fixed machine address. Writes go to ordinary local files. That design keeps the cabinet portable across launches on the same device. It is not a promise that the files cannot be lost, copied, or read by someone who can unlock the device or who holds a backup.

Protection depends in large part on the device itself: a passcode or similar lock, the operating system's file protections, and who else can use the phone or tablet. No storage method available to an app of this kind can be described as incapable of failure, theft, or unauthorized access. If the device is lost, repaired, or erased, the archive on it can go with it. Exporting a card to the photo library is a personal copy you choose to make. It is not an offsite vault operated by Wexon.

Younger people and shared devices

Wexon is a personal filing tool for someone old enough to use a device and to agree to the terms under applicable laws. It is not made as a service for children, and it does not ask anyone to submit an age, a school, or a guardian contact, because it does not run an account system at all.

If a younger person uses a device you control, you should decide whether the app stays installed and you should supervise what is photographed and typed. Notes and pictures can identify a person or a place even when nobody meant them to. The same delete and clear controls remove local records. We do not receive those records on a server, so we also cannot erase a copy that exists only on a device we cannot see. Please do not send us a child's photograph or a child's identifying story by email unless you are the parent or guardian and you intend that message to reach the address below.

If this notice is revised

We may revise this notice when the cabinet changes or when relevant regulatory requirements change. The copy available inside the app is the current one. The effective date shown with that copy is the day the revised notice took effect. There is no mailing list and no account inbox, so we do not send a separate announcement to an address we do not hold. If you keep using Wexon after a revised notice is available in the app, you do so under that notice, to the extent applicable laws allow. If you do not agree with a revision, stop using the app and delete it, and delete any cards you no longer want to keep outside it.

Applicable laws and relevant regulatory requirements govern how this notice is read. This notice does not name a country, region, state, or city, and it does not assign your archive to a hosting region, because we do not host it.

Writing about this notice

Questions about this notice, or a request that we explain a permission or a local control, can be sent to bryn.silt@marlfolio.app. Use the same address throughout. Describe the device in general terms and the question you have. Do not attach a specimen photograph unless you are comfortable with that image sitting in the mailbox you are writing to.

We will read what arrives and reply when we can. A reply cannot restore an archive that was cleared on the device or that lived only in a backup we never held. For the rules of use, read the Wexon Terms of Use beside this notice. Where a question is about information handling, this notice is the one to follow.