Meta Description: Candy AI data collection: what the privacy notice says happens beyond the chat window, including account data and retention.
Most people think about what they type in a chat, but Candy AI‘s privacy notice describes a wider picture of personal information processing. Account activity and interactions are part of that picture. For readers considering an ai girlfriend South Africa service, knowing what the notice discloses helps you judge the platform fairly. This guide explains the data picture and why it matters, without assuming a breach where the notice describes ordinary processing.
- The privacy notice names EverAI Limited as the controller for the website.
- Account activity and interactions are part of the data picture.
- Account data may be kept for three years after your last activity, subject to qualifications.
- Describing processing is not the same as describing a breach.
Who Controls the Data
The privacy notice identifies EverAI Limited as the controller for the processing carried out through the website. It gives a Malta address for the company. Knowing the controller tells you who is responsible for handling your information and who to contact about it.
For background on the operator, read our guide to who runs Candy AI.
What Is Covered Beyond Chat
The notice covers account information and activity alongside the conversations themselves. It describes processing for providing the service, and separate purposes such as development and moderation. Read those sections directly to see the full list of purposes.
The useful editorial angle is explaining what the notice discloses. Data processing described in a policy is not, by itself, evidence of a breach or unauthorised exposure.
Retention and Deletion
The notice says account data is kept for three years after your last account activity. It states this period may be shortened to the later of one year after your last activity or after your paid subscription ends. Account data is deleted earlier if you request deletion. Read our privacy and safety guide.
Frequently Asked Questions
Who is the data controller for Candy AI?
The privacy notice names EverAI Limited as the controller for the website.
What does the platform collect beyond chats?
The notice covers account information and activity. Read it for the full list.
How long is account data kept?
Three years after your last account activity, subject to the stated qualifications.
Can I have my data deleted?
Account data is deleted earlier if you request deletion, according to the notice.
Are marketing data periods different?
The notice sets separate retention periods for marketing data, so read that section.
Does data collection mean a breach?
No. Describing processing is not evidence of a breach.
Are the characters real people?
No. The terms say they are AI creations.
Conclusion
Candy AI’s data collection extends beyond the chat window to account information and activity, governed by the privacy notice. Understanding the controller, retention periods and deletion rights helps you judge the platform accurately.
Read the privacy notice, note the retention and deletion terms and share with those in mind. Read our guide to what to check before you spend.
Sources
- Privacy Notice – Candy AI
- Terms of Service – Candy AI
- Is Candy AI Safe and Who Really Reads Your Private Chat Logs
- Is Candy AI Legit? 2026 Review & Real Cost Breakdown
- Candy AI Review 2026: Pricing, Features & Honest Verdict
Important Information: Legal Notice: The information, financial calculations, relationships, and controversies evaluated in this report are strictly alleged and compiled from public digital footprints, video broadcasts, and social media transcripts. This content is published for informational and entertainment purposes only in line with Section 16 of the SA Constitution. Read the full, legally binding adultutopia.shop Legal Disclaimer & Editorial Policy here.