This page is specific to dependent (child) accounts on Routabout — how long each kind of data we may hold for a dependent account is kept, and how it is deleted. For what we collect and why, see our parent/guardian notice (part of our Privacy Policy).
Every category below has a defined point at which it ends — the dependent relationship ending, an account deletion request, or (for safety-alert records) the close of the human review window. None of it is retained "for as long as we want" or without a stated reason. A parent or guardian can request deletion of a dependent's data at any time through Routabout's family account controls.
Retained for the duration of the dependent relationship. We use it only to determine the account's age band and to trigger the re-affirmation prompt on the child's 18th birthday. Deleted when the dependent relationship or the account is deleted.
A small set of non-identifying preferences (response length, tone, which bounded assistant personality is selected, and similar settings) may be retained for the duration of the dependent relationship. These are never facts about the child — see our privacy policy's distinction between "personalized" and "profiled." Deleted immediately on request or on account deletion. Never used to train any shared AI model, at any age — this restriction does not lift when the account later graduates to an adult account.
For an account under 13 that a parent set up directly, Routabout does not keep the conversation: no transcript is stored, so there is no Routabout-held conversation to delete. There are two named exceptions. The first is the school case: where a school has authorized an under-13 student through its roster and that student completes an assignment, the assignment transcript IS retained, inside that school's context only, under the school's authority rather than a parent's. It is governed by our learning-surface retention rule — family-owned, portable, and with an intended year-end deletion default that is not yet running automatically (until it does, deletion happens on request) — and a parent or guardian can still ask us to delete it. The second is the safety-alert record described under Safety-alert records below: if the opt-in safety check flags a serious risk, the message that triggered it is kept for human review, with its surrounding context and identifying account details (including IP address). For an account aged 13 to 17, conversation content is retained only under the privacy setting the parent or teen chose, exactly as it would be for an adult account, and is deleted the same way: by account deletion, or, for the most private setting, by Routabout never writing it down at all. This section describes what Routabout itself keeps. To write a reply, a message has to reach an AI model provider, and a provider may keep its own copy under its own terms — for example, for abuse monitoring — and we do not control how long. The retention rules on this page do not govern a provider's copy.
The record that verifies a parent authorized the dependent account is retained for the life of the dependent relationship, and for a limited period afterward, only as long as needed to demonstrate our own compliance with recordkeeping obligations. For a Cour family, that record is the reference for the paid Cour subscription; for other family accounts, it is the card-transaction reference and the separate email confirmation described in our parent/guardian notice. It is never used for any other purpose.
A safety-alert record is created only when the opt-in safety check (see our parent/guardian notice) flags a serious risk. It is kept only long enough for human review, then deleted — unless the incident was escalated, in which case it is retained under legal hold. No safety-alert record exists for a session where nothing was flagged.
If a dependent is separately enrolled in a Veyay or Resilience learning surface, that participation is governed by that surface's own retention rule — family-owned, portable across classes and schools, with an intended year-end deletion default (not yet running automatically) and parent-only carry-forward — described in that product's own materials, not duplicated here.
Routabout is operated by Cabildo Companies LLC to meet the requirements of the child-safety and children's-privacy law that applies to it — in the United States, principally the Children's Online Privacy Protection Act (COPPA) and its 2025 Rule amendment. That is stated here, publicly and in one place, because several of the model providers we route to require an operator serving minors to say it on its own site — and because a compliance position nobody can find is not one.
Concretely, and each of these is built rather than promised:
Every conversational surface on Routabout — including the ones a student or a child uses — is an AI system, not a human being. No message a learner receives from Routabout is written by a person, and no person is reading along in real time. Where a Routabout feature speaks in the voice of a historical figure or a named character, that is a portrayal generated by an AI model; it is not that person, and it is not a human performer.
We say this here and in the product because a child who does not know they are talking to a machine cannot make sense of what it tells them.
Email privacy@routabout.ai. A parent, guardian, teacher or school administrator may also use it to ask what we hold for a specific child and to have it deleted.
This page is written in-house and has not yet been reviewed by outside counsel, which is true of every legal page on this site. What it describes — the consent gate, the retention rules, the training restriction, the deletion rights — is how the product is built, and each is covered by tests. The legal framing around those facts is ours, not counsel's.
Cabildo Companies LLC · privacy@routabout.ai