Is Candy AI safe? The company, your data and the content rules
Safety in this category usually gets answered with a vibe. This page answers it with paperwork: the registered company, the billing descriptor, the payment processors, the retention periods in the privacy policy, and the eight categories the content rules ban.
Unofficial fan guide. We earn a commission if you subscribe through our link.
Candy.ai is operated by a named, registered European company rather than an anonymous website, publishes a full set of legal documents, uses established payment processors and states a clear 18+ policy with a content ban list. That is a meaningfully better paper trail than much of this category offers. What it does not publish is how long deletion takes, which countries the service is available in, or what happens to conversation data in practice.
EverAI Limited, registered in Malta
Candy.ai's terms of service state the service is owned and operated by EverAI Limited, incorporated in the Republic of Malta with registration number C107181, at 56 Central Business Centre, Triq Is-Soll, Santa Venera SVR 1833. The same company name and number appear in the site footer. The terms of service and the blocked content policy both carry an effective date of 30 July 2026, and the brand is written with a registered trademark symbol.
Why this matters more than it sounds: a registered EU operator gives you a legal counterparty, a jurisdiction and a statutory consumer-rights floor. A large share of platforms in this category publish no company details at all, which leaves you with nothing to point at if something goes wrong.
What appears on your bank statement
The charge shows as EverAI, not Candy.ai.
Money is handled by named third-party processors rather than by the platform directly — the privacy policy lists Emerchantpay, TrustPay, Volt, Coingate and UpGate. Accepted methods are credit and debit cards, cryptocurrency, Apple Pay, Google Pay and bank transfer through Volt and Pix. Cryptocurrency being on that list is worth noting in both directions: it is the most private way to pay, and it is also the one the published refund clause does not cover.
How long Candy AI says it keeps things
The privacy policy publishes explicit retention periods, which is more than most platforms in this category do.
| Data type | Stated retention |
|---|---|
| Account-related personal data | 3 years after last activity |
| Financial records | 10 years from issuance |
| Marketing data | 2 years after last interaction |
The three-year account clock runs from your last activity unless you request deletion, and the ten-year financial retention is a legal-compliance period that survives account deletion — that is normal for an EU company, and it does mean deleting your account is not the same as erasing every trace.
Deletion is self-service
You delete the account yourself from your profile settings, in a section the platform labels the danger zone. Deleting before a renewal date also cancels an active subscription.
Chat history and memory are linked
There is no way to clear a chat history while keeping the character's memory of you. Memory is tied to the active chat, so resetting a chat starts the relationship over. If privacy from your own household is the concern, that is the only lever available.
Inactivity can cost you content
The terms allow the platform to remove account content after defined periods of inactivity, with no reimbursement and no restoration of anything you paid for. A dormant paid account is not a safe archive.
The 18+ policy and what the platform bans
Candy.ai states that it does not provide services to, or collect personal data from, anyone under 18. Access is controlled by an age gate on entry plus self-affirmation that you are over 18, and the underage policy notes that further verification may be added where local rules require it. In plain terms: the current check is a declaration, not identity verification, and the platform reserves the right to tighten that.
The blocked content policy — effective 30 July 2026 — names eight prohibited categories. The ones most relevant to whether a platform is responsibly run include:
- Child exploitation, with a stated zero-tolerance position.
- Content resembling minors, which is the separate and important one, because it covers stylised or ambiguous output rather than only real imagery.
- Impersonation and celebrity content.
- Non-consensual intimate imagery and deepfakes, banned outright.
Two related mechanics follow from this. The character creation form defaults a new character's age to 18. And there is no refund for content that gets moderated or removed for a policy violation — enforcement and your money are separate questions.
If you decide to use it, do these four things
- Start on the monthly term, not the annual one. The 70% saving is real, but the refund window is 24 hours and the annual plan takes €47.88 in a single charge. Prove you will use it first.
- Pay by card if you might want a refund. The published refund clause covers card purchases. Crypto is the private option, not the recoverable one.
- Watch the token balance, not the subscription. Chat is unlimited, but images, video and voice run down the 100 monthly tokens — that is where an unexpected second bill comes from.
- Know the exit before you enter. Cancelling is self-service and takes a minute, but it does not refund anything and it is a different action from deleting your account.