Is Candy AI safe and legit? Who runs it, refunds, privacy and fakes
Quick answer: Yes, on the official sites. Candy AI is owned and operated by EverAI Limited, registered in Malta under number C107181. You can cancel auto-renewal at any time, and the terms let you request a refund within 24 hours of paying if you used no more than twenty tokens. The risks are indirect: long data retention, tokens on top of Premium, and scam pages that borrow the Candy name.
Is Candy AI safe? For an adult subscription service, yes: a registered Maltese company runs it, the terms spell out refunds and cancellation, and nothing needs installing. The real dangers sit around the brand, in copycat sites, fake video players and "free premium" downloads. This guide covers the owner, payments, what the Privacy Notice allows, the app question, and a checklist to run before you pay.
Is Candy AI safe? The short answer
Yes, on the points that count: you can identify the company, the product is real, and paying on the official site gets you what was advertised. Candy.ai and its Shorts catalog, from free-to-start Standard titles like My Father's New Queen to Premium-only Spicy ones, belong to a company on the Malta Business Registry with published terms, a refund clause and a detailed Privacy Notice.
Safe is not the same as risk-free. The content is adult and for 18+ only, your chats and prompts are stored on Candy's servers, and the sites that copy the brand are the genuine hazard. We are an independent guide with no tie to Candy.ai or EverAI; the facts below come from Candy's own terms, Privacy Notice and subscription page, checked on November 8, 2026.
Who owns Candy AI, and where is it based?
EverAI Limited owns and operates Candy AI. The company is incorporated in the Republic of Malta and registered with the Malta Business Registry under number C107181, at 56 Central Business Centre, Triq Is-Soll, Santa Venera SVR 1833. Maltese law governs the terms, disputes go to Maltese courts, and the Privacy Notice is written around the EU's GDPR.
Support runs through support@candymail.ai and a help center at everai.zendesk.com, and the Privacy Notice names a data protection officer. For how the product itself works, see our plain explainer on Candy AI Shorts.
Try it before you read on: episode 1 of every Standard series plays free, no account.
Start free on Candy AIIs Candy AI legit or a scam?
It is a real business, not a scam: a registered company sells a working product, and you can cancel from your account settings. The fair criticisms are about value, not fraud. Tokens come on top of Premium, and the social teasers promise more than the free episodes show. Even the creator series, such as My Stepmom Mia Malkova Needs a Date, rest on likenesses licensed through the Candy Creators program rather than borrowed faces.
Is Candy AI real? Why the scam label sticks
The scam reputation mostly comes from pages that are not Candy. Searches for free, leaked and uncensored Candy content are common, and fake players, card-grabbing "age checks" and malware downloads borrow the name to catch that traffic. Our breakdown of Candy AI leak pages shows how they operate. The rule is simple: if the checkout is not on candy.ai or candyshorts.com, it is not EverAI.
Is Candy AI safe to pay for?
Yes, provided you pay on Candy's own domain. The Privacy Notice names Emerchantpay and TrustPay among the payment providers and lists the card data Candy holds, such as the card brand, the last four digits, the expiry and the transaction details. The money rules in the terms:
- Cancel anytime: switch off auto-renewal in your account settings. The plan stays active until the end of the period you paid for, then the account goes back to free.
- Refund window: ask within 24 hours of payment. After that a refund is refused, and it is refused at any time if you used more than twenty tokens. Only card payments qualify.
- EU and UK: a separate section gives a 14-day right of withdrawal.
- Leftover tokens: they expire when a subscription ends, so spend them first.
- Chargebacks: filing one cancels the plan at once and removes your remaining tokens.
Premium cost $3.99 a month on the 12-month plan ($47.88 billed yearly), $8.99 a month on the 3-month plan, or $9.99 for the first month and $13.99 after that, at checkout on November 8, 2026. Spicy titles such as Blackout at My Yacht Party need Premium plus tokens. Our Candy AI pricing and tokens guide has the details. The most likely money problem is a forgotten renewal, so note the date.
Is Candy AI private? What the Privacy Notice says
Partly. The Privacy Notice, revised October 19, 2026, is detailed, and it allows more than many users assume. In broad strokes:
- What is collected: email, an encrypted password, screen name, gender if you share it, location from your IP address, sign-in history, token balance, payment details, age-check results where local law requires them, and your prompts and chats.
- Who receives data: payment, hosting, email-marketing, affiliate and moderation providers, age-verification services and, at Candy's discretion, outside AI model providers, which may see message content.
- Training: de-identified interactions may be used to train models, and flagged content can be checked by human moderators.
- Retention: account data is generally kept for three years after your last activity, or until you ask for deletion.
GDPR rights apply: access, correction, deletion and a complaint to a regulator. Watching Shorts mostly involves account and payment data; chatting adds a record of everything you type, so treat the chat side with more care.
Two free episodes on most Standard series. Tokens only if you want the rest.
Start free on Candy AIIs Candy AI banned? Is there an app?
We found no official ban we could confirm; what limits access is age. The terms and the Privacy Notice restrict Candy to adults who are 18, or the age of majority where they live, and local rules on adult sites differ, so check yours.
As for an app, Candy runs in the browser on phone or desktop. Its own "Get App" prompt asks you to tap Share and then "Add to Home Screen", which saves a web-app shortcut; nothing gets downloaded. We have not verified an official listing in the Apple or Google stores, so treat any "Candy AI APK" or download link from another site as unofficial.
Official Candy AI versus the copycats
Check the address bar first, then the company name. The side-by-side:
| Check | Official Candy | Copycat or fake |
|---|---|---|
| Domain | candy.ai or candyshorts.com | Misspelled brand, new domain, no legal pages |
| Company | EverAI Limited, Malta, C107181 | None named, or a copied footer |
| Install | Nothing; optional home-screen shortcut | APK, zip, extension or "codec" |
| Card request | Only at Premium checkout | Before any video, framed as an age check |
| Free content | Episode 1 with no account, episode 2 after a free sign-up, nothing for Spicy | "Every episode free" behind a form |
Our guide to what Candy really gives away free covers the last row in detail.
A safety checklist before you sign up
Five habits cover most of the risk:
- Confirm the address bar reads candy.ai or candyshorts.com before you sign in, and use a password you use nowhere else.
- Test with free episodes first: Couples Therapy With Margot Vey and I Can See Through Everyone But Her both open with a free pair.
- Read the refund clause before paying: 24 hours, card payments only, no more than twenty tokens used.
- Write down the renewal date and cancel in settings, not through a bank chargeback, which wipes your remaining tokens.
- Know what you are buying: the paid episodes are adult and AI-generated, all characters are adults (18+), and our guide to Candy's NSFW levels spells out the levels.
Start free in 3 steps
The safest first move costs nothing: use the official site and the free episodes.
Open Candy Shorts
Episode 1 of every Standard series plays without an account.
Open Candy ShortsCreate a free account
An email is enough. It unlocks episode 2 of every Standard series.
Sign up freeDecide on Premium
Only if you want the rest: tokens open the locked episodes, Spicy needs Premium.
See Premium prices
Editorial take
By the standards of adult subscription services, Candy AI sits on the safer end: a registered EU company, written refund and cancellation rules, nothing to install, and a Privacy Notice that at least spells out what it does. Its weak points lie elsewhere. Account data can stay on file for years after you stop using the service, chat content may reach outside AI providers, and tokens make the true cost of a series harder to predict than the plan price suggests.
None of that makes it a scam. Start with a free Standard series such as Every Wife on Candy Lane, choose the monthly plan if you are unsure, keep the chat side at arm's length if privacy worries you, and ignore anything wearing the Candy name outside its two official domains.
Frequently asked questions
Is Candy AI safe to use?
Yes, on the official sites candy.ai and candyshorts.com. EverAI Limited, a registered Maltese company, runs the service in your browser with nothing to install, and payments go through established processors. The cautions are the adult content, long retention of account and chat data, and copycat pages that only borrow the Candy name.
Is Candy AI legit, or is it a scam?
Legit. EverAI Limited sells a product that exists and lets you cancel auto-renewal from your account settings at any time. The bad reputation is earned by outside pages that hijack the Candy AI name for fake players, card forms and malware. Those have nothing to do with the operator and are best avoided entirely.
Who owns Candy AI?
EverAI Limited owns and operates Candy AI. It is incorporated in Malta, its Malta Business Registry number is C107181, and its office is in Santa Venera. The same company runs the Candy Shorts catalog and the candyshorts.com site, and Maltese law governs its terms of service.
Is it safe to pay for Candy AI Premium?
Yes, as long as the payment page is Candy's own. The Privacy Notice names processors such as Emerchantpay and TrustPay and lists limited card data, like the last four digits. Outside the EU and UK, you can request a refund within 24 hours if you used no more than twenty tokens; EU and UK buyers get a 14-day withdrawal right.
Can Candy AI be trusted with your data?
Partly. The Privacy Notice, revised October 19, 2026, lists email, location from your IP, payment details and your chats and prompts among the data collected. De-identified chats may train models, and outside AI providers may receive message content. Account data is usually kept three years after your last activity unless you ask for deletion.
Is Candy AI banned anywhere?
We found no official ban we could confirm. Access is limited by age instead: 18, or the age of majority where you live. Candy runs in the browser and offers a home-screen shortcut rather than an app download, and we have not verified any app-store listing, so treat any Candy AI APK from another site as unofficial.