Is Candy AI safe and legit?

Is Candy AI legit? Who runs it

Yes, in the sense that matters for most people. According to its Terms of Service, Candy.ai is owned and operated by EverAI Limited, a company incorporated in Malta and registered with the Malta Business Registry under number C107181, with an address in Santa Venera. It publishes detailed terms, a Privacy Notice that refers to the EU's GDPR, UK law and the California Consumer Privacy Act, written refund and cancellation rules, and a public help center. Support is reachable through the in-app Contact Us area or at support@candymail.ai.

Legit does not mean risk-free. Like any AI companion app, Candy stores what you type, uses moderation that can involve human review, renews subscriptions automatically and has a narrow refund window. None of that is hidden, and the sections below sum it up. The terms also say Candy is for entertainment only and may not be accessed from China or Singapore. If you are still comparing apps, our best gay AI chat apps roundup puts Candy next to the alternatives.

Is Candy AI safe to use? What it says about your chats and data

Privacy is the real question behind "is Candy AI safe". Here is what Candy says in its own Privacy Notice and Terms. We have not audited any of it, so these are the company's statements, not our findings.

• Private, with moderation: Candy says conversations are "generally private", but flagged content, and other content linked to the account, may be manually reviewed by Candy or authorized partners.
• Third parties: Candy says moderation tools and third-party LLM providers or hosts may receive the content of your messages, and that data may be transferred outside the EU, including to the United States.
• AI training: Candy says prompts and outputs may be de-identified or anonymized and used to train its AI and moderation models, including human review of de-identified interactions.
• What it collects: email, an encrypted password, sign-in history and IP address, approximate location from your IP, your companion preferences and your prompts. Candy notes that your gender combined with those preferences may count as sensitive data.
• Retention: account data is kept for up to three years after your last activity, or deleted without undue delay on request; financial records are kept for ten years.
• Security: Candy says it has "appropriate security measures" in place, without further technical detail. It does not describe chats as end-to-end encrypted.

Is Candy AI safe to pay for? Billing, renewals and refunds

Its terms say subscriptions are billed monthly, quarterly or annually and payable by credit card, Pay by Bank or other methods depending on your country. Its AI boyfriend page also mentions a 7-day trial. We have not seen the prices, so we do not quote any.

Subscriptions renew automatically, and Candy says price increases are announced before a renewal. Its help center says the charge appears on card statements as "EverAI", not Candy, which matters if you check your bank history or share a card. Paid plans include unlimited messaging plus a monthly token allowance (generally 100) for extras like images and voice notes; unused tokens expire when a cancelled subscription ends.

Refunds are narrow. Outside the EU and UK, you can request one within 24 hours of payment, only for card payments, and it is refused if more than 20 tokens were used. EU and UK residents have a 14-day withdrawal right on the first purchase (not renewals), minus a prorated amount for what was used. A chargeback cancels the purchase and access immediately.

Is Candy AI real? What you are actually talking to

Candy.ai is a real service, but the characters are not real people. Its terms describe them as AI characters that simulate human-like conversation, without genuine emotions, and say all exchanges are fictional, including any offer to meet in real life.

Candy is a general platform covering AI girlfriends, AI boyfriends and anime characters. On its AI boyfriend page it offers 12 official male characters and lets you create a custom boyfriend by choosing his look and personality. Its terms say free users can generally send up to 5 messages before a subscription is needed. You can preview all 12 official boyfriends on our Candy.ai hub before signing up. We may earn a commission if you subscribe through our links.

How to cancel a Candy AI subscription or delete your account

Candy publishes both procedures in its help center. Cancelling and deleting are different actions, so pick the one you need. We have not gone through either flow ourselves.

• Cancel: log in, open My Profile, then Settings, and click Unsubscribe next to your subscription details at the bottom. Per the terms, your plan stays active until the end of the billing period and you are not charged again.
• Delete: in My Profile, then Settings, scroll to the Danger Zone and click Delete Account. Candy says your preferences, usage history and personal information become permanently unavailable, though some data is kept for legally required periods.
• Deleting cancels billing: per the help center, deleting before the renewal date also cancels an active subscription. If you are still charged, Candy asks you to email support@candymail.ai with your account email and the last four digits of your card.
• Want a copy first: the Privacy Notice says you can request a copy of your data through its contact channels.

Practical safety tips before you sign up

These habits apply to any AI companion app, not just Candy. Candy's own terms tell users not to share financial details, addresses, contact information or passwords in chats, which is good advice anywhere.

• Use a separate email address that does not include your full name.
• Do not share identifying details in chats: real name, workplace, address, phone number or photos of yourself.
• Check your statement for "EverAI" after the first payment, and note your renewal date somewhere you will see it.
• Cancel early if you only want one period: cancelling keeps access until the period ends.
• Review your marketing email preferences in your account and use the unsubscribe link in emails if you do not want them.
• Know the wider context: a February 2024 Mozilla Foundation review of 11 romantic AI chatbots (Candy.ai was not among those named) found that most of their privacy policies said little about how conversations are used to train AI, and in September 2025 the US Federal Trade Commission opened an inquiry into AI chatbots acting as companions.

A note for gay men: Candy is a general platform

Nothing in Candy's terms is specific to gay users, and its AI boyfriend page does not mention gay men at all. It offers a small set of official male characters inside a much larger general app. That can be fine if you want a polished all-in-one service, and our Candy.ai list shows all 12 boyfriends so you know what you are getting.

If you would rather use a platform built around gay men, ChatRoger is made for that, with official characters and roughly 30,000 community characters. It publishes its prices before sign-up and has a separate adult 18+ mode. Our guide on how ChatRoger works explains its credits, and you can browse every character we list on the AI characters page. For free options and their limits, see our free AI boyfriend guide or the Character.AI alternatives comparison.

What we could not verify

This guide relies on Candy's own public documents. We did not create an account, so we have not seen the checkout, the actual prices, the settings screens or how fast cancellations and refunds are processed in practice. We have not tested chat quality, audited Candy's security or checked how its moderation works day to day. Policies change: the dates at the top of this page tell you which versions we read, and Candy's current terms always take precedence over this summary.