Privacy Policy
Last Updated: March 19, 2026At Candy AI, your privacy and the security of your digital experiences are our highest priorities. This Privacy Policy outlines how Candy AI ("we", "our", or "us") collects, uses, discloses, and safeguards your personal information when you access our website, applications, and services (collectively, the "Service"). We recognize the deeply personal and private nature of the interactions you share with your Candy AI companions. By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.
1. Information We Collect
To provide you with a highly personalized and seamless experience, we must collect certain information about you and your usage of our platform. We categorize the data we collect into the following groups:
A. Information You Provide to Us Directly
- Account Registration Data: When you register for an account to create your AI character, we collect your email address, a chosen username, and a password. You may also choose to link third-party accounts (like Google or Apple) for easier sign-in, from which we receive basic profile information.
- Billing Information: If you upgrade to a premium subscription to access advanced features like fast image generation or unlimited voice messaging, our third-party payment processors (such as Stripe or crypto gateways) collect your billing details, including credit card numbers and billing addresses. Candy AI does not directly store full credit card numbers on our servers.
- User Inputs and Preferences: Any preferences you set regarding the appearance, personality, voice, and traits of your AI girlfriend or AI boyfriend are stored to customize your experience.
B. Interaction Data and Chat Logs
The core functionality of Candy AI involves conversational exchanges. We collect the textual prompts, voice recordings (if you use voice-to-text features), and image requests you submit to the AI. We also store the generated responses, generated images, and voice synthesis outputs. This interaction data is necessary to maintain context in your ongoing conversations and ensure your AI companion "remembers" you across sessions.
C. Automatically Collected Information
- Device and Usage Data: We automatically collect information about how you access the Service. This includes your IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, links clicked, and the dates and times of your visits.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track activity on our Service and hold certain information to enhance your user experience. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
2. How We Use Your Information
Candy AI uses the collected data for various operational, personalization, and security purposes, including:
- To Provide and Maintain the Service: To authenticate your login, process your subscription payments, and deliver the core functionality of interacting with your Candy AI companion.
- To Personalize Your Experience: Your chat history and preferences are utilized by our language models solely to provide contextually relevant, personalized responses. This ensures that your AI remembers past conversations, preferred nicknames, and ongoing roleplay scenarios.
- To Improve Our Artificial Intelligence: We continuously strive to make our AI models more empathetic, accurate, and conversational. We may use anonymized, aggregated snippets of interaction data to fine-tune our underlying machine learning algorithms. We employ strict sanitization processes to strip personally identifiable information (PII) before any data is used for model training.
- For Security and Safety: We monitor interaction logs using automated systems to prevent abuse, enforce our Terms of Service (e.g., detecting illegal content or non-consensual imagery), and protect the integrity of the Candy AI platform against malicious attacks.
- For Customer Support: To assist you when you contact our support team regarding technical issues or billing inquiries.
3. How We Share Your Information
Candy AI does not sell, rent, or trade your personal information or private chat logs to third-party data brokers or advertisers. We only share your data under the following specific circumstances:
- Service Providers: We employ third-party companies to facilitate our Service, such as cloud hosting providers (e.g., AWS, Google Cloud), payment processors, and analytics services. These third parties have access to your personal data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Legal Requirements: We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency), specifically in cases involving investigations of illegal activity, child exploitation, or threats to physical safety.
- Business Transfers: If Candy AI is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that business asset. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
4. Data Security and Encryption
We understand that conversations with an AI companion can be highly intimate. Candy AI implements robust, industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. We utilize Transport Layer Security (TLS/SSL) encryption for data in transit and AES-256 encryption for data at rest, including your chat logs and generated media.
Despite our extensive efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
5. Your Data Rights and Choices
Depending on your location (such as residents of the European Economic Area under the GDPR, or California residents under the CCPA), you may have certain rights regarding your personal data:
- Access and Portability: You have the right to request a copy of the personal data we hold about you, including your chat logs.
- Correction: You have the right to request that we correct any inaccurate or incomplete information.
- Deletion (Right to be Forgotten): You can request the deletion of your account and associated data. You can delete your account directly from your Candy AI dashboard. Upon account deletion, your profile, chat history, and generated images will be permanently scrubbed from our active databases, subject to legal retention requirements.
- Opt-Out of Marketing: You may opt-out of receiving promotional communications from us by following the unsubscribe link in those emails.
6. Children's Privacy
The Candy AI platform features mature content and is strictly restricted to individuals who are 18 years of age or older. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from children without verification of parental consent, we take immediate steps to remove that information and terminate the account.
7. International Data Transfers
Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
8. Changes to this Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer. You can reach out to our privacy team via the support portal located in your Candy AI Dashboard.