Effective date and operator
Effective September 13, 2026. Policy version: 2026-09-13. VMuse Global is operated by Tszyui Liu. Privacy questions and requests may be sent to liutszyui1@gmail.com.
This policy applies to VMuse Global and its optional Account, AI Create, and signed-language services. The separate offline 乐绘 app and its Simplified-Chinese pages under /cn have their own scope.
Information that stays on the iPad
Instrument projects, drafts, published versions, imported images and sounds, tutorial progress, and Performance recordings are stored locally in the app container. They are not synchronized to an account or automatically uploaded.
When a creator selects local material for AI Create, image pixels, sound recordings, and original files remain on the iPad. Only the material names, dimensions, sound ranges, and other text descriptions listed in the request review can be sent.
Managed account information
Firebase Authentication processes the account email, password credential, email-verification state, and authentication security data. VMuse Global stores an optional display name, policy versions accepted by the responsible adult, consent time, account lifecycle state, pseudonymous quota and request records, and deletion state.
The service does not store a birth date, child profile, local project library, prompt text in the quota ledger, password, authentication token, or the account email in its application database. Authentication providers may retain records required to operate and secure authentication under their own policies.
Children and supervised AI use
A parent, guardian, teacher, or other authorized adult age 18 or older must manage the account, verify its email, accept the current Terms and Privacy Policy, and consent to supervised AI use by children. Children may personally type a description and choose Generate while using that managed account.
AI Create is not designed to collect personal information about a child. Do not enter a child’s or another person’s name, contact details, photo, recording, school information, precise location, or other personal information. The responsible adult should supervise descriptions before they are sent.
AI processing and recipients
For AI Create, the service sends the creator’s description, the bounded built-in catalog description, selected material text metadata, and a strict output schema through OpenRouter to DeepInfra, which serves the pinned deepseek/deepseek-v4-pro text model. No image or audio bytes are sent and provider fallback is disabled.
Each provider request asks OpenRouter to deny data collection and to route only under its Zero Data Retention control. The content must still be processed transiently to generate a response. OpenRouter, DeepInfra, DeepSeek, Google Cloud, and Firebase may process security, billing, network, or service-operation data under their applicable policies and locations.
Why information is used
Account information is used to register and secure the managed account, verify eligibility, show the profile, enforce three generations per UTC month, prevent duplicate charges, provide candidates, and complete deletion. AI request content is used only to generate and technically validate the requested instrument. Operational records are used to keep the service secure and reliable.
VMuse Global does not use an analytics SDK, behavioral advertising, third-party ad network, project sync, public profile, or sale of personal information. It does not use creator prompts to train an app-owned model.
Retention and deletion
A generated candidate is encrypted in the production service database and is available for at most 24 hours unless it is accepted, discarded, or deleted sooner. Compact request and monthly-allowance records remain for replay prevention and quota integrity until the account is deleted. Account data is removed before the Firebase sign-in identity; interrupted deletion resumes from durable state.
Completed deletion fences are eligible for removal after 24 hours. Ordinary application logs are retained for 14 days and exclude raw prompt, generated package, token, password, and app-owned Cloud Run request records. Mandatory cloud administrative audit records can remain for 400 days, and Firestore can retain normal short-lived versions for approximately one hour. Provider-side handling follows the controls and policies linked from the AI data page.
Your choices and requests
An account is optional for local instruments. The responsible adult may sign out, change the display name, stop using AI, or request permanent account deletion in the app. Removing an account does not erase local projects or recordings; those remain under the iPad user’s control.
For access, correction, deletion, or privacy questions that cannot be completed in the app, contact liutszyui1@gmail.com. Do not email a password or authentication token. Applicable non-waivable privacy rights continue to apply.
Security and changes
Protected service routes require Firebase authentication and Apple App Attest through Firebase App Check. Provider credentials stay in managed server secrets and are not bundled in the app. Transport uses HTTPS and the service validates bounded, versioned data before storing a candidate.
Material changes will be published with a new policy version and require renewed acceptance when appropriate. The effective date above identifies this version.