Sex Robots & AI Companions

Candy AI

Candy AI is an AI companion platform where you build a virtual partner from scratch, then chat with it across text, voice calls, and NSFW images, video, and roleplay. Launched…

Founded 2023 · 3 years on market

·

Visit Candy AI

·

How we score privacy →

·

All brands →

About Candy AI

Candy AI is an AI companion platform where you build a virtual partner from scratch, then chat with it across text, voice calls, and NSFW images, video, and roleplay. Launched in September 2023 and based in Malta, it covers the full feature stack you’d expect from the current generation of explicit companion apps: adaptive conversation that supposedly learns your preferences over time, personalized image generation, and voice messaging. By end of 2024 the platform had reportedly hit over $25 million in annual recurring revenue, which is a meaningful number for a product barely two years old and reflects genuine consumer appetite for this category rather than just hype. The platform markets itself on emotional intelligence and privacy, citing end-to-end encryption for intimate conversations. Both claims deserve the usual scrutiny: “adaptive learning” in this space typically means pattern-matching within sessions rather than anything resembling a persistent relationship, and encryption doesn’t address the broader data handling questions that made AI companions one of 2024’s defining sextech stories. SEXTECHGUIDE covers those considerations in more detail in its roundup of AI companion apps, worth reading before you start sharing your fantasy life with a server in Malta. Candy AI is a competent, well-monetized entry in a crowded field. Whether it earns long-term user trust will depend less on its revenue trajectory and more on how it handles the privacy questions the category still hasn’t answered cleanly.
Archival coverageFirst covered
3 articles 2023–2024 Peak: 2023 (2)

Candy AI

64%
1

Privacy deep-dive

In summary

In our assessment, the reviewed Candy.ai privacy notice and terms of service demonstrate above-average transparency and a detailed data-processing table, but the broad perpetual content license and vague treatment of AI-training data retention appear to weaken user privacy protections in several areas. We did not find explicit CCPA opt-out-of-sale mechanics or clear confirmation that deletion requests remove chat data already used for model training. Unverified

  • The reviewed text includes a detailed table mapping data categories to processing purposes and legal bases
  • The Privacy Notice names specific third-party payment processors (Emerchantpay, TrustPay, Volt, Coingate, UpGate)
  • The TOS grants EverAI a perpetual, transferable, sub-licensable license over user Content including for commercialization
  • The reviewed text discloses that third-party LLM providers/hosters may receive message content
  • We did not find a specific retention period for anonymized/de-identified conversation data used for AI training

Our editorial assessment of Candy AI’s published policy: an opinion based on the policy text we reviewed, not legal advice or a compliance determination. Spot something wrong? Request a correction

Privacy Concerns

  • High Broad perpetual license over chat Content extends to commercialization and marketing, beyond narrower privacy-notice purposes
  • Medium No stated retention period for aggregated/anonymized training data derived from chats
  • Medium Message content may be shared with third-party LLM providers with limited detail on safeguards
  • Medium Account termination permitted with or without notice and for any reason, with no described appeal process
  • Medium Sweeping liability disclaimer limits recourse for users beyond narrow refund windows

Privacy Positives

  • High Impact Detailed data-processing table linking categories, purposes, and legal bases
  • High Impact Detailed contact routes including DPO, UK Representative, and Privacy Team email
  • High Impact Zero-tolerance CSAM policy with reporting to authorities
  • Medium Impact Concrete retention periods stated for account, financial, and marketing data
  • Medium Impact Named payment/crypto processors and specific data fields shared with each

Security Overview

70% Security

Security Headers

HTTPS Secure connection
Pass
HSTS HTTP Strict Transport Security
Pass
CSP Content Security Policy
Fail
X-Frame-Options Clickjacking protection
Pass
X-Content-Type MIME type sniffing protection
Pass
Referrer-Policy Controls referrer information
Pass
Permissions-Policy Browser feature controls
Fail

From Their Published Policies

Direct excerpts from Candy AI's published policiesEvery excerpt found in the documents we assessed September 29, 2026 · Privacy policy assessed candy.ai/privacy-policy

you grant to us a non-exclusive, royalty-free, fully paid-up, transferable, sub-licensable, worldwide, perpetual license to use, distribute, modify, run, copy, publicly display, make available, store, access, upload, distribute, transmit, translate, modify, exploit, create derivative works of, commercialize

Scope of license granted over user chat Content Terms of Service candy.ai/terms-of-service

We have appointed a Data Protection Officer under Art. 37 GDPR, who may be reached at DPO@everai.ai.

Contact route for data protection inquiries Privacy Policy candy.ai/privacy-policy

Log files are automatically deleted after 30 days

Retention period for interaction/debugging logs Privacy Policy candy.ai/privacy-policy

Recommend this brand? Your vote powers Reader favourites.

1