Your Privacy is Our Default
Last updated: February 2026 · Effective: February 2026
The Short Version
- Your messages are end-to-end encrypted — we cannot read them.
- We collect only what's strictly needed to run the service.
- We never sell your personal data.
- You can delete your account and all associated data at any time.
- We do not use advertising networks or third-party trackers.
Contents
Who We Are
bigradio is a private, end-to-end encrypted messaging platform. bigradio.io Technologies Ltd is the legal entity responsible for your personal data under this policy.
We built bigradio around a core belief: your conversations belong to you. Privacy is not a feature — it's the foundation of everything we build.
Privacy contact: privacy@bigradio.io
Data We Collect
We collect only what is strictly necessary to provide the service:
- Account information
- Username (required). Email address and full name are optional and only stored if you provide them at registration.
- Profile data
- Profile picture, bio, occupation, education, and location — all optional fields you can add or remove at any time in Settings.
- Message data
- Messages are stored on our servers in encrypted (ciphertext) form. We hold only ciphertext — we cannot decrypt or read your messages.
- Delivery metadata
- Timestamps indicating when messages were sent, delivered, and read. No message content is included in this metadata.
- Security logs
- IP address and login timestamps, retained for a maximum of 30 days for account security and fraud prevention purposes only.
Data We Do NOT Collect
We are explicit about what we will never collect:
- •Message content — all messages are end-to-end encrypted; their content is never accessible to us.
- •Contact lists — we do not access your device contacts without explicit permission.
- •Advertising or behavioral data — we do not track your activity for targeting purposes.
- •Physical location — we do not track your GPS position.
- •Security logs beyond 30 days — server logs are purged on a rolling 30-day basis.
How We Use Your Data
We use your data only for the following purposes:
- •Operating, maintaining, and improving the bigradio messaging service.
- •Account security: detecting suspicious activity and unauthorized access.
- •Customer support: responding to help requests you submit.
- •Email notifications, only if you add an email address and explicitly opt in.
- •Aggregate, fully anonymized usage statistics to guide product decisions.
We do not use your data for advertising, profiling, or any purpose not listed above.
Data Retention
- Account data
- Retained until you delete your account.
- Messages
- Retained until deleted by you or your contact, or upon account deletion.
- Security logs
- Maximum 30 days, then automatically and permanently purged.
- After deletion
- All personally identifiable data is purged within 30 days of account deletion.
Security
We take the security of your data seriously. Our protection measures include:
- •End-to-end encryption: messages encrypted using industry-standard protocols before leaving your device.
- •Encryption at rest: all stored data encrypted using AES-256.
- •Transport security: all connections use TLS 1.3.
- •Regular security assessments and penetration testing.
- •Responsible disclosure program for security researchers.
To report a security vulnerability, contact security@bigradio.io. We operate a responsible disclosure policy and respond to all security reports.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access
- Request a copy of the personal data we hold about you.
- Rectification
- Correct any inaccurate profile information directly from Settings.
- Deletion
- Delete your account and all associated data via Settings > Account > Delete Account.
- Portability
- Request your data in a machine-readable format.
- Objection
- Object to any processing you believe is unlawful or not covered by this policy.
To exercise any of these rights, contact us at privacy@bigradio.io. We will respond within 72 hours.
Third-Party Services
We work with a minimal set of trusted service providers:
- •Infrastructure providers — hosting and storage partners are bound by GDPR-compliant Data Processing Agreements and may not use your data for their own purposes.
- •Content delivery — profile pictures and shared files may be served via CDN for performance.
We do not use advertising networks, third-party analytics, or data brokers.
Children's Privacy
bigradio is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a user under 13 has an account, please contact privacy@bigradio.io and we will take prompt action to remove the account and associated data.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification at least 14 days before they take effect. The "last updated" date at the top of this page always reflects the most recent version.
For minor clarifications that do not affect how we process your data, we may update the policy without prior notice.