What is sent
- The child’s or adult’s instrument description and selected Simple, Medium, or Complex size.
- A bounded text description of the app’s approved built-in instrument, sound, element, and layout catalog.
- For selected local materials: opaque request handles, names, dimensions, sound ranges, component names, and other text descriptions shown during review.
- A strict response schema and repair feedback needed to return a technically valid native instrument package.
What is not sent
- Image pixels, thumbnails, photographs, artwork bytes, sound recordings, audio previews, and original files.
- Other projects, published performances, local recordings, contact lists, Photos library contents, Files library contents, microphone input, or precise location.
- The provider API key, Firebase password, authentication token, or a child profile.
Pinned processor route
VMuse Global sends the text request to OpenRouter, with provider fallback disabled and DeepInfra as the only allowed serving provider for deepseek/deepseek-v4-pro. DeepSeek V4 Pro is used as a text-only model. The returned model and provider identity must match before the app can receive a candidate.
The request sets OpenRouter data_collection to deny and Zero Data Retention to true. These controls prohibit alternate data-collection routes but do not eliminate the transient processing required to generate the response. Read OpenRouter’s privacy information linked in the app before consenting.
Supervised child use
A child may personally enter an idea and choose Generate while using a verified account managed by a parent, guardian, teacher, or other authorized adult. The responsible adult accepts the policies and consents to supervised AI use.
Do not include names, contact details, photos, recordings, school information, location, or other personal information about a child or anyone else. The app cannot guarantee that free-form text contains no personal information, so adult supervision is required before sending.
Temporary result and local acceptance
The service validates the model response and temporarily stores an encrypted native candidate for up to 24 hours. Accepting or discarding it removes the candidate sooner. Request identifiers, result digests, statuses, and quota records remain until account deletion so retries cannot spend twice or bypass the monthly allowance.
Choosing Use instrument downloads, decodes, validates, prepares, and saves the candidate as a new local project. After that, editing, publishing, performance, and local recording do not require the AI service.
Consent, cancellation, and deletion
Each generation has a request-specific review and consent step. Leaving the screen before dispatch costs no slot; cancellation after model work begins consumes the slot because processing has already occurred. Discarding a completed result also consumes the slot.
Account deletion removes server candidates, account records, request and quota records, and finally the Firebase sign-in identity. It does not reverse processing already completed by an AI provider or remove local projects from the iPad. See the Privacy Policy for retention exceptions and contact details.