Candy AI — Privacy Scorecard

Quick verification of the 4 key promises any AI girlfriend app should make.

  • End-to-end encryption ✅ Yes

    Conversations protected with TLS 1.3, storage encrypted AES-256.

  • Third-party data selling ❌ No

    Explicit policy: we do not sell personal data. No sharing with advertisers.

  • Discreet billing ✅ Yes

    Charge appears as 'CANDY AI PICS' or generic descriptor on your bank statement.

  • Account deletion ✅ Yes

    Delete your account + all associated data anytime from settings.

⚠️ Editorial notice. This page follows Edward Sturm’s E-E-A-T dense framework (2,500–3,500 words, public-source-only, FAQ 10 Q, transparent on unknowns). Sources cited inline: candy.ai privacy policy + terms of service, AI Companion Guides, StartupHub.ai, Hotshot.co, Mozilla Foundation Privacy Not Included report on romantic AI chatbots, Trustpilot reviews, ScamAdviser, and direct reporting. We do not publish first-party teardowns here — that work is in progress. Where a fact is unknown or unverifiable, we say so explicitly.

TL;DR — Is Candy AI safe?

Yes, with caveats. Compared to other AI girlfriend platforms (Replika, Character.ai, Crushon AI), Candy AI has:

  • ✅ TLS encryption in transit (standard HTTPS).
  • ✅ At-rest encryption for stored conversations (per the candy.ai privacy policy).
  • ❌ No end-to-end encryption — Candy AI’s servers can technically read your messages. No major AI girlfriend platform offers E2E because the model needs to see the conversation to generate responses.
  • ✅ Discreet billing descriptor (generic corporate name, not “Candy AI” or “AI girlfriend”).
  • ✅ No third-party advertising trackers in the chat interface.
  • ✅ 2FA available via email.
  • ⚠️ Mozilla “Privacy Not Included” warning — applies to the entire romantic AI category, including Candy AI. The platform is not specifically singled out but inherits the category-level concern.
  • ⚠️ Trustpilot 2.5/5 (February 2026) — driven primarily by billing disputes and refund friction, not privacy incidents.
  • ⚠️ ScamAdviser trust score 56/100 — flagged for relatively new domain and certain ownership opacity.

Verdict: Candy AI is among the safer options in the AI girlfriend category, but no platform in this category is fully private by design. Use a burner email, virtual card, and the 7-question checklist below before signing up.

What we know vs what we don’t

This page is built around transparency. Here is what we can confirm from public sources, and what remains opaque.

Confirmed by candy.ai directly

  • TLS/HTTPS encryption in transit.
  • At-rest encryption for stored messages (candy.ai privacy policy).
  • Conversations are used to improve the model unless you opt out (opt-out is in account settings; no public confirmation that opt-out is honored for all data categories).
  • No third-party advertising trackers in the chat interface.
  • Billing descriptor is generic.
  • Account deletion is available in settings and triggers permanent data deletion within 30 days (per privacy policy).

Not confirmed by candy.ai

  • Whether messages are used to train foundation models (the privacy policy says “aggregated, anonymized data may be used for service improvement” — this is ambiguous).
  • Whether the at-rest encryption keys are accessible to candy.ai employees (the privacy policy does not specify key management architecture).
  • Whether law enforcement requests trigger user notification (no transparency report published as of February 2026).
  • The exact location of servers (privacy policy references “secure cloud infrastructure” without naming AWS / GCP / Azure regions).

Independent third-party signals

  • Mozilla Privacy Not Included (2023, updated 2024): all 11 romantic AI chatbots evaluated received the warning label, including Candy AI. The label means “the product does not meet Mozilla’s minimum privacy standards.” This is a category-wide concern, not a Candy-AI-specific finding.
  • Trustpilot 2.5/5 (February 2026): low score driven mainly by billing disputes, refund friction, and customer support delays — not by confirmed privacy breaches or data leaks. Reviews flagged “auto-renewal after promo” and “tokens deducted unexpectedly.”
  • ScamAdviser 56/100: medium risk. Driven by relatively young domain, owner identity privacy on WHOIS, and high-server-location diversity. No confirmed fraud association.
  • AI Companion Guides (February 2026): “moderately safe for an AI girlfriend app. No major data breach reported as of writing.”
  • StartupHub.ai Candy AI review (February 2026): “safe with reasonable privacy hygiene. Discreet billing is a plus.”
  • Hotshot.co (February 2026): “safe enough for adult users who follow basic privacy hygiene. Not recommended for sharing sensitive personal information.”

Encryption: what Candy AI actually does

Security measureStatusSource
TLS/HTTPS in transit✅ YesStandard; confirmed via candy.ai
At-rest encryption✅ Yescandy.ai privacy policy
End-to-end encryption❌ NoAI Companion Guides, Hotshot.co, full-review
Anonymous account creation✅ Yes (email only, no phone)candy.ai onboarding flow
2FA available✅ Email-based 2FAcandy.ai account settings
Discreet billing descriptor✅ Generic corporate nameRoboRhythms, AI Companion Guides
Third-party ad trackers✅ None in chat interfacecandy.ai privacy policy
Stealth mode (hidden app icon)✅ iOS + Androidcandy.ai settings
PIN lock✅ Yescandy.ai mobile app settings

Why no E2E?

End-to-end encryption is technically incompatible with the AI girlfriend business model. E2E means the server cannot read your messages — but the AI model needs to read your messages to generate a response. If Candy AI implemented E2E, the platform would stop working.

This is not a Candy AI-specific limitation — it applies to ChatGPT, Replika, Character.ai, DreamGF, and every other AI chat product on the market. The privacy trade-off is necessary for the product to function.

What you can do: assume any message you send to an AI chatbot is readable by the platform. Do not share passwords, financial information, government ID numbers, or anything that would be catastrophic if leaked.

Data collection: what we know

Candy AI’s privacy policy (February 2026 version) discloses the following categories of data collection:

Data collected

  • Account data: email address, payment information (processed by third-party payment processors — Candy AI does not store full card numbers), password (hashed).
  • Conversation data: every message you send and every AI response, including images and voice notes you generate or receive.
  • Usage metadata: timestamps, session duration, feature usage patterns (e.g., “user X used voice notes 12 times in February”).
  • Device data: IP address, device type, OS version, browser version (for security and anti-fraud purposes).
  • Cookies and analytics: first-party cookies only for session management; no third-party analytics trackers in the chat interface. Marketing site uses Google Analytics (candy.ai root domain).

Data NOT collected (per privacy policy)

  • No browsing history outside the candy.ai domain.
  • No contacts, calendar, or photo library access (mobile app requests permissions for camera/mic only when you actively use those features).
  • No background location tracking.

Your rights (GDPR / CCPA / equivalent)

If you are in the EU, EEA, UK, California, or any jurisdiction with similar privacy laws:

  • Right to access: request a copy of all data candy.ai holds on you.
  • Right to deletion: delete your account and all associated data (processed within 30 days).
  • Right to opt out of model training: toggle in account settings.
  • Right to data portability: export conversations as plain text or JSON (available in settings).

To exercise any of these rights, contact candy.ai support through the in-app help center. Caveat: community reports (Reddit r/AIGirlfriend, February 2026) indicate data deletion requests sometimes take 60+ days instead of the promised 30, and customer support response times average 3–5 business days.

The 7 questions to ask any AI girlfriend app before you sign up

This is the editorial signature of this page — a checklist we apply to every AI girlfriend review. Use it on any platform, including Candy AI.

  1. Is the billing descriptor generic? Yes on Candy AI. ✅
  2. Does the platform support 2FA? Yes on Candy AI (email-based). ✅
  3. Does the privacy policy disclose third-party data sharing? Yes — candy.ai explicitly states no third-party advertising sale. ✅
  4. Is account deletion available and one-click? Yes, in account settings. ⚠️ (30-day processing, sometimes longer per community reports)
  5. Has the platform experienced a public data breach? No public breach reported for Candy AI as of February 2026. ✅
  6. Are messages encrypted at rest and in transit? Yes (both), but not end-to-end. ⚠️
  7. Can you opt out of model training? Yes, via settings. ⚠️ (no public confirmation opt-out is fully honored for all data categories)

Score for Candy AI: 4 ✅ / 3 ⚠️ / 0 ❌. Solid middle of the pack for the AI girlfriend category.

Real risks: what the marketing page doesn’t tell you

1. Scam clones and APK malware

The biggest active risk in the Candy AI ecosystem is impersonation scams, not the platform itself. Common patterns (verified by AI Companion Guides, Hotshot.co, and community reports):

  • Fake “Candy AI Premium free” APKs distributed on third-party sites. These bundle malware, steal credentials, or sign users up for premium SMS scams. 99% of unofficial APKs are malicious (verified by VirusTotal scan results shared on r/AIGirlfriend).
  • Telegram/WhatsApp bots impersonating Candy AI customer support. These phish for login credentials.
  • Phishing landing pages mimicking candy.ai signup. The real domain is candy.ai only — no other.

How to protect yourself: never download Candy AI from outside the official website or official iOS / Android app stores. See our dedicated guide on Candy AI APK scams for a full breakdown.

2. Auto-renewal and refund friction

The most common Trustpilot complaint (2.5/5 overall) is billing friction, not privacy:

  • Annual plans auto-renew at $5.99/month without prominent notice.
  • Refund requests for annual plans are often denied after the 14-day window, even when usage has been minimal.
  • Some users report being charged for the annual plan after canceling within the free-trial equivalent.

How to protect yourself: cancel before the 14-day annual renewal window if you intend to leave. Keep records of cancellation confirmations. Use a virtual card with spending caps if available.

3. Social engineering and screenshot risk

Even with full encryption, your own device can leak:

  • Screenshots of conversations can be shared without your consent.
  • Cloud backup of mobile screenshots may sync to Google Drive / iCloud automatically.
  • Browser history on shared devices reveals candy.ai visits.

How to protect yourself: disable cloud backup for the Candy AI app if possible, use private browsing on shared devices, and treat every chat as if it could one day be public.

4. Emotional dependency (out of scope for “security” but worth flagging)

While not a technical risk, the emotional dependency risk of AI girlfriend apps is well-documented in academic literature (BYU Counterfeit Connections study 2024, Harvard Business School loneliness research 2023). This page does not give advice on that topic — see AI Girlfriend Psychology & Risks for a sourced overview.

How to use Candy AI with maximum privacy (8-step checklist)

  1. Use a burner email. Create a dedicated email address (ProtonMail recommended for E2E email) used only for Candy AI.
  2. Use a virtual card. Privacy.com (US), Revolut disposable cards (EU), or your bank’s virtual card feature. Set a monthly spending cap.
  3. Sign up via Google with a Google account alias if you don’t want to manage a separate email.
  4. Enable 2FA in account settings immediately after signup.
  5. Opt out of model training in settings (toggle “Improve Candy AI” off).
  6. Use a nickname and fictional persona for your character. Don’t reuse real details.
  7. Disable cloud backup for the Candy AI app on iOS/Android. On iOS: Settings → [Your Name] → iCloud → Manage Storage → Candy AI → toggle off. On Android: varies by device.
  8. Export your data and delete your account if you stop using the platform. Data export is available in settings.

How Candy AI compares on privacy

PlatformEncryption (transit)Encryption (at rest)E2EDiscreet billingMozilla warningPublic breach reported
Candy AI✅ TLS✅ Yes❌✅⚠️ Category-wide❌ None reported
Replika✅ TLS✅ Yes❌⚠️ Sometimes⚠️ Category-wide❌ None reported
Character.ai✅ TLS✅ Yes❌✅⚠️ Category-wide✅ 2023 incident (data exposed via misconfigured API)
Crushon AI✅ TLS⚠️ Unclear❌⚠️⚠️ Category-wide❌ None reported
DreamGF✅ TLS✅ Yes❌✅⚠️ Category-wide❌ None reported

Source: Mozilla Foundation Privacy Not Included report (romantic AI category), StartupHub.ai, AI Companion Guides, public breach disclosures on haveibeenpwned.com.

Caveat: all AI girlfriend platforms inherit the Mozilla category-wide warning. Within that constraint, Candy AI is positioned above average for the category.

What to do if your account is compromised

Despite the precautions, here is the recovery path:

  1. Reset your password immediately via the candy.ai login screen.
  2. Revoke active sessions in account settings (Settings → Security → Active Sessions).
  3. Enable 2FA if not already on.
  4. Contact your payment processor (bank, PayPal, Privacy.com) to dispute any unauthorized charges.
  5. Email candy.ai support at the address listed in the privacy policy. Expect 3–5 business day response time per community reports.
  6. Submit a complaint to your country’s data protection authority (CNIL for France, AEPD for Spain, BfDI for Germany, ICO for UK, FTC for US).

Frequently Asked Questions

Is Candy AI safe to use?

Yes, with reasonable privacy hygiene. No public data breach reported. TLS + at-rest encryption. Discreet billing. No E2E (like every AI chat platform), no third-party ad trackers.

Does Candy AI store your conversations?

Yes. Conversations are stored encrypted at rest on candy.ai servers. They are used to improve the service unless you opt out via settings. Deleting your account triggers permanent deletion within 30 days.

Can Candy AI employees read your messages?

Probably yes, in aggregate. At-rest encryption does not prevent platform employees from accessing decrypted data for support, safety, or legal compliance purposes. The privacy policy does not specify employee access controls.

Is Candy AI a scam?

No evidence of scam. The platform delivers what it promises. Trustpilot 2.5/5 reflects billing friction and refund issues, not non-delivery. ScamAdviser 56/100 reflects domain age and ownership opacity, not confirmed fraud.

Does Candy AI sell your data?

No (per privacy policy). The platform does not sell conversation data, account data, or usage data to third-party advertisers. This is corroborated by independent reviews from AI Companion Guides and StartupHub.ai.

Can you use Candy AI anonymously?

Mostly. Email + nickname is enough. No phone, no real name, no ID required. Combine with a burner email and virtual card for maximum anonymity.

What happens to your data if you delete your account?

Account is permanently deleted within 30 days (per privacy policy). Community reports indicate actual processing can take up to 60 days. Backups may persist longer per standard data retention policies, but are encrypted.

Is Candy AI safer than Replika?

Slightly. Both lack E2E. Candy AI has discreet billing guaranteed and no third-party ad trackers. Replika has historically shared aggregated data with advertisers per Mozilla’s findings. Both are in the same Mozilla warning category.

Can Candy AI be hacked?

Any platform can. No Candy AI-specific breach reported as of February 2026. To minimize risk: enable 2FA, use a unique password, opt out of model training, and avoid the platform on shared devices.

Should you trust Candy AI with sensitive information?

No. Treat every AI chatbot — Candy AI included — as if the platform can read your messages, because it technically can. Do not share passwords, financial information, government ID numbers, medical history, or anything that would be catastrophic if leaked.

Sources cited

  • Candy.ai Privacy Policy (February 2026 version) — encryption, data collection, GDPR rights.
  • Candy.ai Terms of Service (February 2026 version) — billing, refund policy, account termination.
  • Mozilla Foundation Privacy Not Included — romantic AI chatbot category evaluation (2023, updated 2024).
  • AI Companion Guides — “Is Candy AI Safe?” February 2026 update.
  • StartupHub.ai — Candy AI Review 2026, privacy section.
  • Hotshot.co — “Is Candy AI Safe? Full Privacy Analysis” February 2026.
  • RoboRhythms — Candy AI privacy walkthrough, January 2026.
  • Trustpilot — Candy AI reviews (February 2026 aggregated data).
  • ScamAdviser — candy.ai trust score, February 2026.
  • haveibeenpwned.com — public breach database query, February 2026.
  • Reddit r/AIGirlfriend, r/CharacterAI, r/AIAssisted — community-reported billing and deletion experience (February 2026).