RadioChatPrivacy Policy
Who we are
RadioChat is a chat app — stations (group chats, some with a shared board or notebook), friends and direct messages — run by Vikhanden Pty Ltd, Brisbane, Australia. This policy explains what we collect, why, and what you can do about it. Contact: hello@radiochat.ai.
What we collect and store on our servers
- Your Google account, when you sign in with Google: its unique id, email address (and whether Google has verified it) and name. We use them to sign you in and keep your account; your name becomes the nickname your friends see. Strangers see a separate public name, not your Google name or email.
- Your month and year of birth, to check you're old enough when you create an account. It's never shown to anyone.
- Your profile: nicknames, status message, and anything you choose to add (age range, country, interests).
- Other sign-in methods: passkey public keys, a hashed password (only if you set one), a confirmed email, and a list of your signed-in devices labelled by browser and system (for example "Chrome on Windows").
- Your friends list and what you post: messages in stations and friend chats, station boards and notebooks, polls and drawings — so conversations are there when you come back. Older messages are removed when a conversation reaches its storage limit.
- Files you share in a chat: a share record — the file's name, type and size, its Google Drive id and link, and which chat it was shared in. The file itself stays in your Google Drive (see below).
- Reports and moderation records, if you report someone or are reported.
- Support messages you send from Help & Support, delivered to us by email.
- Short-lived security records: one-time codes, pairing codes and invite links, which expire within minutes to days.
Google user data (Sign in with Google and Google Drive)
RadioChat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
- Sign in with Google gives us your Google account's id, email address and name, used only as described above.
- Google Drive is only used if you choose to connect it, and only with the "drive.file" permission: RadioChat can see and change only the files you upload through RadioChat or pick yourself in Google's file picker — nothing else in your Drive.
- When you send a file from your device, it's uploaded to a "RadioChat shares" folder in your Drive and shared as "anyone with the link can view"; RadioChat gives that link only to the people in the chat you shared it in. A file you pick from your Drive keeps its own Google sharing — RadioChat doesn't change it.
- Our servers never receive your files' contents or your Google access tokens: your browser talks to Google directly, and access tokens stay in your browser's memory and expire within an hour.
- We don't use Google user data for advertising, don't sell it, don't use it to train AI models, and people at RadioChat don't read it — except with your permission, for security or where the law requires.
- You can stop sharing any file from its window in RadioChat, remove a connected Google account in RadioChat's Google Drive window, and revoke RadioChat's access at any time at https://myaccount.google.com/permissions.
What stays on your device
RadioChat uses your browser's storage (local storage and IndexedDB) for things the app needs to work: the token that keeps you signed in, your settings, saved stations, friend groups, a copy of your chat history, your Notebooks and Personas, the list of Google accounts you've connected, and your AI API keys. These stay on your device; we don't receive them. We don't use advertising or analytics cookies, and we don't track you across other websites.
AI friends
If you add Claude (Anthropic) or ChatGPT (OpenAI) with your own API key, your device sends what the AI needs — the conversation, and any notebooks or personas you give it — straight to that provider under your key. That provider's privacy policy applies to it. Our servers don't see those requests or your key.
What we don't do
- We don't sell your data or show ads.
- We don't read your messages to profile you. Moderation runs on your own device before a message is sent.
- Other people never see your email, your Google name (unless they're your friend), your backup code, or your account ids. Strangers see your public name and a session number that changes every visit.
Services we rely on
- Fly.io hosts our servers; Cloudflare serves the app and runs the "I'm human" check on sign-up.
- Google provides Sign in with Google, Google Drive and a network helper (STUN) for direct connections.
- Resend delivers our emails (codes, support and account notices).
- Hugging Face and jsDelivr serve the on-device moderation model and its runtime.
- GIPHY provides GIF search.
- Anthropic and OpenAI, only if you add an AI with your own key (see above).
How long we keep it
Temporary accounts are deleted 30 days after last use. Saved accounts unused for about 18 months are deleted (with a data export emailed first when there's a confirmed email). Deleting an account removes its profile, friends, sign-in methods, Google sign-in link and file share records; station messages you posted may remain without your name. Files in your Google Drive stay there — they're yours.
Your choices
You can edit your profile, remove sign-in methods and devices, disconnect Google Drive and stop sharing files from within the app. To ask for a copy of your data or to delete your account, contact hello@radiochat.ai or use Help & Support in the app.
Children
RadioChat is only for people old enough under our Terms of Service. Sign-up asks for your month and year of birth and refuses anyone under age. If you believe a child has an account, contact us and we'll remove it.
Changes
If we change this policy materially we'll show you the new version in the app and ask you to accept it.