What we collect, who can see it, and who else is involved.

The short version

• We collect your location while sharing is on, your account and profile details, your messages and places, the devices you sign in on, and crash reports that go to Radius's own server.
• Only people you're linked to can see you, and only as much as you allow, set per person. Radius runs its own server, and nobody looks at your data except to fix a fault you've asked about.
• Nothing is sold or shared for any commercial purpose. There's no advertising, and the app has no third-party analytics and no tracking library.
• Locations are kept 10 days, messages and photos up to 14 days on the server, and crash reports 90 days.
• Some outside services, like Cloudflare, Google and Apple, are involved. The full policy names every one and exactly what each sees.
• You can delete everything from Settings → Delete account, or on the web.

This summary is here to help. It isn't part of the Privacy Policy. The full text below is what counts.

Only people you are linked to, and only as much as you allow — set per person, changeable at any moment. Being on the same family plan links you with the people on it; outside that, a link is a request you approve by name and face. Either side can end a link, which removes both directions at once.

Whoever operates the server can technically read what is stored on it — that is true of every server, and saying otherwise would be a lie. Radius's server is operated by Radius, is used for nothing but running Radius, and nobody looks at your data except to fix a fault you have asked about.

These are the only third parties in the path, named because a page that promised "none" would be lying:

• Cloudflare — fronts the website and the server, so connections are encrypted and filtered at their edge and the server's address is never exposed. Sees traffic pass through, encrypted. It also counts visits to this website (cookieless, no fingerprinting, never inside the app). Since 2 September 2026 Cloudflare also holds the photos, videos and files sent in chat, in its United States region, for the same fourteen days as the message they belong to and not a day longer. Cloudflare protects a large share of the internet, and its storage is a safer home for those files than a single server would be. They are used for nothing but showing them to the person they were sent to — never for advertising, never sold.
• This website itself — counts its own page views and button clicks: the page, and the country Cloudflare reports. For thirty days it also keeps the network address the request came from, so we can tell a family reading the site from a crawler hammering it; after thirty days those addresses are deleted, and what is left is a number made from the address that changes every day and cannot be turned back into it. No cookie, nothing sold, nothing used for advertising, and none of this exists inside the app — the app never counts you.
• Google (Firebase Cloud Messaging) — the only way Android will wake a closed app, used to make your phone ring for a call and to deliver "arrived at" alerts. Google is told that your device received a message and, for an arrival alert, the sentence itself ("Alex arrived at Alex's Home"). It is not told who is calling whom, any message content, or where anybody is. Positions never go through it.
• Apple and Google — take payment for the family plan through the App Store and Google Play, because a subscription bought inside an app has to go through the store it came from. They see the payer and what was bought. Radius never sees a card number; neither store is told who is in the family or where anyone is.
• Resend — delivers Radius's own emails: sign-in codes, invitations, the welcome note. Sees the address and the email. Sends nothing else.
• Google Sign-In and Sign in with Apple — only if you choose one. The provider confirms who you are; Radius receives your address and name and nothing further.
• Stripe — takes card payment for the family plan on the web, until in-app purchase replaces it. Stripe sees the payer and the amount; Radius never sees a card number. Inside the app stores, Apple and Google take the payment instead (above).
• Google Maps and Apple Maps — draw the basemap you pan around: the streets and the ground under the dots. Your family's positions, the routes, and the addresses you save are computed on Radius's servers and are never sent to a mapping company — but the map tiles themselves come from Google (on Android) or Apple (on iPhone), so the patch of map you are looking at is theirs to serve.
• Your own Google Drive — only if you choose to keep conversations there. Radius can see the files it creates in your Drive and none of the rest.
• The National Weather Service (api.weather.gov, a US government service) — how Radius knows the weather where each person is and warns a family about severe weather nearby. Radius's server asks it about coordinates; the request carries no name, no account, and nothing that says whose position it is. Nothing is sent from your phone.
• Didit — checks that a parent is who they say they are, and only when a parent is adding a child under 13, which federal law requires us to verify. In the app you photograph your government ID, then look into the camera while Didit records a short video of that step — which is how a living person is told apart from a held-up photograph. Didit confirms the document is genuine and the face is yours, and answers Radius with a pass or a fail, the date, and a reference. Radius never receives those images and never stores them, and Didit deletes them within 30 days — the shortest period they offer. What is left after that is a line on our side saying a check passed, and the date. Nobody else is ever put through this: not children, not teenagers, and no adult who is not adding an under-13. There is a form you can sign by hand instead.
• Twilio — delivers Radius's own text messages, and only when one is actually sent. Two kinds are sent. An invitation, when a manager adds somebody by phone number: Twilio sees that number and the invitation text. An SOS alert, to the emergency contacts you have listed and who have replied YES to be textable: that message names who pressed the button, the time, the place they are near if there is one, and their phone number, so the contact can call them. Twilio sees it, because it is the thing carrying it. This is the one message Radius sends that names a person to somebody outside the app, and it is sent only because you pressed a button asking for help — including for a child, whose emergency contacts their plan manager set.

Calls. A call goes directly between the two phones whenever the network allows. On many mobile networks it cannot, and the call is then relayed through Radius's relay servers in the United States. A relayed call is not recorded, stored or listened to — the relay forwards encrypted packets it cannot read — and the call screen tells you when it is happening. No third party carries calls.

Open a conversation and tap Keep, and every message is saved on your own device as it arrives — so you still have the thread after the server has let go of it. Nobody but you can read that copy.

If you would rather it survived losing the phone, you can move it to your own Google Drive and the phone gives the space back. One place or the other, chosen on your device.

In the app: Settings → Delete account. It removes your messages and photos, location history, places, groups, family plan and every connection — the files come off the server's disk, not just out of the database. It cannot be undone, and it takes your side of every conversation with it. A paid family plan is cancelled with it.

Already uninstalled? Delete your account here.

See it — the app is the disclosure: your map, your history, your places and devices are all shown to you, and nothing about you is held that the app does not show. Fix it — your name, photo and contact details are editable in Settings. Delete it — Settings → Delete account, or the web, removes everything, files off disk included.

The opt-outs some state laws require offering — the sale of personal information, targeted advertising, profiling — have nothing here to opt out of: Radius does none of them, for anyone, so every member already has the strongest version of those rights. We never discriminate for exercising a right, and we answer a rights request from anyone, any state, the same way: [email protected].