Privacy

What is collected, who can see it, and who else is involved.

Radius exists so a family can see where each other are without giving that to anybody else. This page says exactly what is collected, who can see it, how long it is kept, which outside services touch any of it and what they see, and how to remove everything.

What is collected

Location — your position, with speed and battery, while sharing is on.
Your account — an email address or phone number to sign in with (or your Google account's address, if you sign in with Google), a display name, and a photo if you set one.
Messages — what you send to people you are connected to, including photos, video and documents.
Places — the spots you name, and which of them each person is inside, so "arrived at Home" can be noticed.
Devices — which phones, watches and browsers are signed in, so you can revoke one you no longer have; and a device identifier used for one thing only, keeping the free month per phone.
What you are listening to — only if you switch it on: the title, artist and app of the track playing, read from the phone's own media controls. Nothing else from your notifications is read.
Your family plan — who manages it and who is on it, and Stripe's reference for the subscription. Never a card number.

Who can see it

Only people you are linked to, and only as much as you allow — set per person, changeable at any moment. Being on the same family plan links you with the people on it; outside that, a link is a request you approve by name and face. Either side can end a link, which removes both directions at once.

Whoever operates the server can technically read what is stored on it — that is true of every server, and saying otherwise would be a lie. Radius's server is operated by Radius, is used for nothing but running Radius, and nobody looks at your data except to fix a fault you have asked about.

Who it is not shared with

Nobody, for any commercial purpose. Nothing is sold, shared, or commercialised in any form — including aggregated or de-identified form, which is the wording some location apps use for the data they do sell. No advertising or ad network is involved anywhere. The app contains no analytics and no tracking library at all. The map is drawn from data stored on Radius's own server, so looking at the map does not tell a mapping company where you are; addresses you type when saving a place are looked up on that same server.

The outside services that are involved, and exactly what each sees

These are the only third parties in the path, named because a page that promised "none" would be lying:

Cloudflare — fronts the website and the server, so connections are encrypted and filtered at their edge and the server's address is never exposed. Sees traffic pass through, encrypted. It also counts visits to this website (cookieless, no fingerprinting, never inside the app).
Google (Firebase Cloud Messaging) — the only way Android will wake a closed app, used to make your phone ring for a call and to deliver "arrived at" alerts. Google is told that your device received a message and, for an arrival alert, the sentence itself ("Alex arrived at Alex's Home"). It is not told who is calling whom, any message content, or where anybody is. Positions never go through it.
Stripe — takes payment for the family plan. Sees the payer's card, email address and an account reference. Radius never sees a card number; Stripe never sees who is in the family or where anyone is.
Resend — delivers Radius's own emails: sign-in codes, invitations, the welcome note. Sees the address and the email. Sends nothing else.
Google Sign-In — only if you choose it. Google confirms who you are; Radius receives your address and name and nothing further.
Your own Google Drive — only if you choose to keep conversations there. Radius can see the files it creates in your Drive and none of the rest.
The National Weather Service (api.weather.gov, a US government service) — how Radius knows the weather where each person is and warns a family about severe weather nearby. Radius's server asks it about coordinates; the request carries no name, no account, and nothing that says whose position it is. Nothing is sent from your phone.
Twilio — delivers Radius's own text messages: an invitation when a manager adds somebody by phone number. Sees that number and the invitation text, nothing else, and only when an invitation is actually sent.

Calls. A call goes directly between the two phones whenever the network allows. On many mobile networks it cannot, and the call is then relayed through Radius's own server. A relayed call is not recorded, stored or listened to — the relay forwards encrypted packets it cannot read — and the call screen tells you when it is happening. No third party carries calls.

How long it is kept

Locations — 10 days, then deleted automatically.
Messages, photos and video — 14 days on the server; longer only where you choose to keep them, on your phone or in your own Drive.
Security log — sign-ins and device changes, 90 days, so a stolen phone can be traced and revoked.
Account details, places, family plan — until you delete the account.

Two things are never stored: what is said on a call, and what the map shows you, because the tiles come from Radius's own server rather than a commercial mapping API.

Keeping it yourself instead

Open a conversation and tap Keep, and every message is saved on your own device as it arrives — so you still have the thread after the server has let go of it. Nobody but you can read that copy.

If you would rather it survived losing the phone, you can move it to your own Google Drive and the phone gives the space back. One place or the other, chosen on your device.

Deleting everything

In the app: Settings → Delete account. It removes your messages and photos, location history, places, circles, family plan and every connection — the files come off the server's disk, not just out of the database. It cannot be undone, and it takes your side of every conversation with it. A paid family plan is cancelled with it.

Already uninstalled? Delete your account here.

Children

Radius is built for families, and a child's location may be shared with a parent. That sharing is set up on the child's device with their knowledge: while it is on, an undismissable notice sits in their notifications. Radius is not built for, and must not be used for, monitoring an adult without their agreement.

Permissions, and why

Location, including in the background — so your family can see where you are when the app is not open, and so "arrived at" can be noticed. This is the core function; a notice sits in your notifications the whole time it is on.
Camera and microphone — only during a call, and only after you accept the prompt. Kept alive by a visible foreground service while a call is in progress, so switching apps does not cut you off.
Notifications — the permanent sharing notice, messages, arrivals, and incoming calls, including on the lock screen.
Bluetooth — only during a call, so a headset can be used.
Notification access — only if you turn on "show what I'm listening to", and only to read the current track from the phone's media controls.
Photos and video — only what you choose to send.

Questions

Write to [email protected]. A person answers.

Last updated: 18 August 2026.