Sex Robots & AI Companions

Candy AI

Candy AI is an AI companion platform where you build a virtual partner from scratch, then chat with it across text, voice calls, and NSFW images, video, and roleplay. Launched…

Founded 2023 · 3 years on market

·

Visit Candy AI

·

How we score privacy →

·

All brands →

About Candy AI

Candy AI is an AI companion platform where you build a virtual partner from scratch, then chat with it across text, voice calls, and NSFW images, video, and roleplay. Launched in September 2023 and based in Malta, it covers the full feature stack you’d expect from the current generation of explicit companion apps: adaptive conversation that supposedly learns your preferences over time, personalized image generation, and voice messaging. By end of 2024 the platform had reportedly hit over $25 million in annual recurring revenue, which is a meaningful number for a product barely two years old and reflects genuine consumer appetite for this category rather than just hype. The platform markets itself on emotional intelligence and privacy, citing end-to-end encryption for intimate conversations. Both claims deserve the usual scrutiny: “adaptive learning” in this space typically means pattern-matching within sessions rather than anything resembling a persistent relationship, and encryption doesn’t address the broader data handling questions that made AI companions one of 2024’s defining sextech stories. SEXTECHGUIDE covers those considerations in more detail in its roundup of AI companion apps, worth reading before you start sharing your fantasy life with a server in Malta. Candy AI is a competent, well-monetized entry in a crowded field. Whether it earns long-term user trust will depend less on its revenue trajectory and more on how it handles the privacy questions the category still hasn’t answered cleanly.
Archival coverageFirst covered
2 articles 2023–2024 Peak: 2024 (1)

Candy AI

69%
1

Privacy deep-dive

In summary

Candy AI provides above-average structural transparency with detailed purpose tables and GDPR rights coverage, but raises serious privacy concerns around human review of intimate chats, sharing conversation content with unnamed LLM providers, and indefinite retention of chat data in AI training pipelines even after account deletion. The absence of the actual Terms of Service document leaves key fairness provisions unevaluated.

  • Detailed purpose-legal basis tables for each data category
  • Named DPO and UK GDPR Representative with contact details
  • Concrete retention periods for most data categories
  • Human moderators can review intimate chat content
  • Chat content shared with unnamed third-party LLM providers

Privacy Concerns

  • High Chat data used for AI training with vague de-identification claims and no opt-out mechanism
  • Medium Intimate conversation content shared with unnamed third-party LLM providers and hosting services with no specificityUnverified
  • Medium Human staff can review flagged intimate chat content with broad scopeUnverified
  • Medium International data transfers to the US and beyond disclosed without naming specific safeguards (e.g., SCCs)
  • Medium AI companion preference data (ethnicity, body type, etc.) may constitute sensitive personal data with limited control

Privacy Positives

  • High Impact Named DPO (DPO@everai.ai) and UK Representative (Shoosmiths) with physical addresses provided
  • High Impact Concrete, category-specific retention periods given (3 years account, 10 years financial, 2 years marketing)
  • High Impact Full GDPR rights inventory covering Articles 15–21 with actionable steps for each
  • Medium Impact Payment processors specifically named (Emerchant Pay, TrustPay, Volt, Coingate, UpGate) with data fields listed
  • Medium Impact Explicit opt-in consent required before sharing data with third parties for marketing

Security Overview

70% Security

Security Headers

HTTPS Secure connection
Pass
HSTS HTTP Strict Transport Security
Pass
CSP Content Security Policy
Fail
X-Frame-Options Clickjacking protection
Pass
X-Content-Type MIME type sniffing protection
Pass
Referrer-Policy Controls referrer information
Pass
Permissions-Policy Browser feature controls
Fail

From Their Privacy Policy

Direct excerpts from Candy AI's published privacy policyVerified June 14, 2026

Please note that these third parties may receive the content of your messages exchanged with our chatbot.

Disclosure that unnamed LLM and hosting providers can access intimate conversation content

Information associated with you, including exchanges with AI Companions, including prompts, requests, and corresponding Outputs, may be aggregated, anonymized, and/or de-identified in order to perform the processing purposes explained herein

Chat content used for AI model training with vague de-identification language and no opt-out

We retain your Personal Data for as long as your account is in existence or necessary to fulfill the purposes for which we collect it or as needed to provide you with the Services, except if required otherwise by law.

General retention baseline before category-specific periods are specified

Recommend this brand? Your vote powers Reader favourites.

1