Is CandyAI Safe? Privacy, Billing & What to Know in 2026

Updated September 2026 · 8 min read

Quick answer: Yes, for adults who go in with reasonable precautions. CandyAI is a legitimate platform, not a scam, with no publicly documented data breaches as of mid-2026. It's less transparent than some competitors about encryption and data handling, and its token-based billing can cost more than the advertised subscription price suggests. Treat it accordingly.

CandyAI is operated by EverAI Limited, based in Malta, and is one of the larger platforms in the AI companion category with roughly 11.6 million monthly visitors. Here's what its actual privacy and billing practices look like, not just the marketing.

Is It a Scam?

No. It's a functioning, web-based platform (no app install required) that delivers what it advertises. There are no widely verified reports of data breaches tied directly to CandyAI as of mid-2026, which is worth something given how many apps in this category have been breached in the same period. That should be read as "no known incidents," not as proof of strong security, since the platform doesn't publish detailed security documentation.

Privacy: What's Actually Disclosed

Traffic is encrypted in transit (standard HTTPS), but conversations are not end-to-end encrypted, meaning the platform itself can read chat content server-side. This is standard across the entire AI companion category, not unique to CandyAI.
The privacy policy is thinner than some competitors, with limited public detail on how long conversation data is retained or exactly how it's used.
Age verification is a soft 18+ confirmation at signup, with stricter checks for explicit content in some jurisdictions.

Billing: The Real Cost to Watch

The base subscription runs $12.99/month, but images, videos, and voice calls consume tokens on top of that. The free tier is closer to a limited demo (fewer messages, blurred images) than a full trial. If you want to properly evaluate the platform first, look for the 7-day free trial with full access rather than relying on the standard free tier.

Not appropriate for minors. CandyAI is an adult-only platform with explicit content available. It is not designed or safe for use by anyone under 18.

How to Use It Safely

Don't use your real name, address, or personal photos
Set a spending limit before you start, given the token system
Pay by credit card or PayPal rather than less reversible methods, for better refund protection
Avoid saving or screenshotting explicit conversations
Don't treat it as a substitute for real emotional support or professional care

Bottom Line

CandyAI is a real, working platform, not a scam, and reasonably safe for informed adult users who budget consciously and avoid oversharing personal information. See our full AI girlfriend privacy guide for practices that apply across the whole category, or compare it directly against other apps on our AI Girlfriend apps page.

Try CandyAI →

FAQ

Has CandyAI ever had a data breach?
No publicly documented breaches as of mid-2026, though the platform's privacy documentation is thinner than some competitors.

Is CandyAI free?
There's a limited free tier and a 7-day free trial with full access. The core subscription is $12.99/month, with additional tokens required for images, video, and calls.

Is CandyAI safe for minors?
No. It's an adult-only platform with explicit content and should not be used by anyone under 18.