Privacy Policy

Radial is an AI assistant that connects to your accounts and gets things done for you. To do that well, it needs some of your information. This policy explains what we collect, why, who we share it with, and the choices you have.

This policy covers the Radial iPhone app, the Radial web dashboard, the Radial API, and radialhq.ai (together, the “Service”). The Service is operated by Radial Labs, Inc. (“Radial”, “we”, “us”). If you have questions, email support@radialhq.ai.

The short version

We use your information to run your assistant and improve the Service. We do not sell your personal information, and we do not use it for cross-app advertising or tracking.
Your conversations are processed by AI model providers so Radial can respond and take action for you.
You decide which accounts Radial can reach. You can disconnect any of them at any time.
Gmail access is read-only, and bank access through Plaid is read-only.
Radial is in beta. Some data controls are still email-based while we build them into the app.

Information we collect

Information you give us

Account information: your email address, first and last name, profile picture, and password. Passwords are stored only as a salted Argon2id hash.
Phone number: if you add one, along with whether you have verified it.
Conversations: the messages you send Radial, including text, photos, and files you attach, and Radial’s responses.
Early access sign-ups: your email address, whether you want Radial for yourself or your team, and your company name if you give one.
Support requests: whatever you choose to send when you contact us.

Information from accounts you connect

You choose whether to connect other accounts. When you do, we receive and store an access token, encrypted with AES-256-GCM, so Radial can act within the permissions you granted.

Sign in with Google or Apple: your name, email address, and an account identifier from that provider.
Gmail: read-only access to your email (the gmail.readonly permission), so Radial can search and read messages when you ask it to. Radial cannot send, delete, or change email.
Bank accounts through Plaid: read-only access to account details (such as bank name, account type, and the last digits of account numbers), balances, and up to 180 days of transactions. Plaid may also request consent for investment and liability data. Radial cannot move money.

Information collected automatically

Location: if you allow it, the iPhone app shares your approximate position (about 100 meters), city, region, country, and time zone while the app is in use. Radial uses it for things like nearby places and weather. You can turn this off at any time in iOS Settings.
Device and session information: IP address, browser or app user agent, sign-in times, app version, and a push notification token if you enable notifications.
Memories: notes Radial saves about your preferences and details you share (for example, “prefers aisle seats”) so it can help you better over time.
Website analytics: radialhq.ai and the web dashboard use PostHog to understand how visitors use our pages. The website creates a profile only for identified users.
Diagnostics: our servers send error reports and logs to Sentry so we can find and fix problems.

Camera, microphone, and photos

The iPhone app asks for camera and photo access only when you choose to share a picture with Radial, and microphone access for dictation. Dictation is transcribed on your device using Apple’s speech recognition; we receive the text you send, not the audio.

How we use your information

To run your assistant: understand your requests, look things up, read the accounts you connected, and act for you.
To personalize Radial using your memories, location, and time zone.
To send sign-in and verification codes by email or text message, and notifications you have turned on.
To keep the Service secure, prevent abuse (for example, rate limiting by IP address), and fix problems.
To understand how the Service is used and improve it.
To respond to you, including about early access.
To comply with law and enforce our Terms of Service.

We do not use your Gmail data or bank data for advertising, and we do not sell it.

How Radial acts for you

Radial can search the web, read the accounts you connect, and use a secure remote web browser to visit sites and complete tasks, such as filling in and submitting forms. When Radial uses the browser, the sites it visits receive the information needed to complete the task. Ask Radial to stop or check with you at any time.

We share information only as described here.

AI model providers: your messages, attachments, memories, results from the tools Radial uses, and context such as your name, location, and time zone are sent to Google’s Gemini API to generate responses and images.
Search and browsing providers: search queries and web addresses go to Exa and Keenable. Pages Radial browses, and the actions it takes on them, pass through Kernel’s remote browser service. Product searches go to Shopify’s catalog.
Plaid: connects your bank accounts. Plaid’s use of your information is governed by the Plaid End User Privacy Policy.
Infrastructure and service providers: Amazon Web Services hosts our databases, files, search index, and servers in the United States, and sends our emails and text messages. Apple sends push notifications. Cloudflare provides DNS. Sentry receives error reports, PostHog receives analytics, and Slack receives early access sign-ups so our team can follow up.
Legal and safety: when we believe in good faith that the law requires it, or to protect the rights, property, or safety of our users, Radial, or others.
Business transfers: if Radial is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that deal, subject to this policy.
With your direction: when you ask Radial to share something, for example by submitting a form on a website.

These providers process information on our behalf, or under their own terms where noted, and only as needed to provide their services.

Google user data

Radial’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide features you request, we do not use it for advertising, we do not let people read it except with your permission, for security, or to comply with law, and we do not use it to train general-purpose AI models.

Your choices and controls

Connected accounts: disconnect Gmail or a bank account in the app at any time. We delete the stored tokens and revoke access with Google or Plaid.
Sign-in methods and sessions: unlink Google or Apple sign-in, review where you are signed in, and sign out of any or all devices.
Files: delete files you uploaded or images Radial generated.
Memories: ask Radial to forget something, and it will remove that memory.
Location and notifications: turn them off at any time in iOS Settings.
Anything else: if you can’t find a control in the app, email us and we’ll take care of it.
Access, correction, and deletion: to get a copy of your information, correct it, or delete your account and its data, email support@radialhq.ai from the address on your account. We will respond within 30 days.

Depending on where you live, including California and the European Economic Area, you may have additional rights, such as to know what we collect, to object to or limit certain processing, and to not be discriminated against for exercising your rights. Contact us to exercise them. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

How long we keep information

We keep your account information, conversations, memories, and files while your account is active, and delete them when you ask us to delete your account, except where we need to keep something to comply with law, resolve disputes, or prevent abuse. Some data is kept for shorter periods:

Sign-in and verification codes expire within minutes.
Sign-in tokens expire after at most 30 days.
Server logs are deleted after 7 days.

Security

We protect your information with encryption in transit (TLS 1.2 or later) and at rest, AES-256-GCM encryption for connected-account tokens, Argon2id password hashing, and limited access to production systems. No system is perfectly secure, so please use a strong password and let us know right away if you think your account has been compromised.

Children

Radial is not directed to children, and you must be at least 18 to use it. We do not knowingly collect information from children under 13. If you believe a child has given us information, email us and we will delete it.

International users

Radial is operated in the United States, and your information is stored and processed there. By using Radial, you understand that your information will be handled under U.S. law, which may differ from the law where you live.

Changes to this policy

We may update this policy as Radial evolves. If we make material changes, we will let you know in the app or by email before they take effect. The date at the top shows when it last changed.

Contact us

Radial Labs, Inc. support@radialhq.ai