Meta Description: Candy AI privacy policy: the details most users skip, including the controller, retention periods, moderation review and your rights.
Most people never read the privacy notice of the platforms they use, and Candy AI is no exception. The notice covers processing purposes, retention, moderation and user rights, and several of its details change how a companion service should be judged. For readers considering an ai girlfriend South Africa option, this guide highlights the parts that most users skip and why they matter.
- EverAI Limited is named as the controller for the website.
- Account data is kept for three years after last activity, subject to qualifications.
- Chats may be used in aggregated, anonymised or de-identified form for development.
- Flagged and reported content may be reviewed by human moderators.
The Controller and Its Address
The notice identifies EverAI Limited as the controller for the processing carried out through the website. It gives a company address in Malta. Knowing who controls your data is the first step to understanding your rights and where to direct requests.
For background on the operator, read our guide to who runs Candy AI.
Retention Periods Most People Miss
The notice sets a three-year period for account data after last activity, which may be shortened under stated conditions. It also sets a separate period for marketing data, a maximum of two years after your last platform interaction, unless you withdraw consent earlier. Many users never see these figures.
Moderation and De-Identified Data
The notice describes human review of content and users flagged by moderation controls or reported by you. It also says de-identified interactions may be used to develop AI and moderation technologies. These two points are often the most important for people who care about privacy. Read our guide to the human-review clause.
Frequently Asked Questions
Who controls Candy AI’s data?
The privacy notice names EverAI Limited as the controller for the website.
How long is account data kept?
Three years after last account activity, subject to the stated qualifications.
How long is marketing data kept?
Until consent is withdrawn, or for a maximum of two years after your last platform interaction.
Are my chats reviewed?
Flagged or reported content may be reviewed by human moderators, according to the notice.
Are chats used to train AI?
The notice describes de-identified and aggregated use for development purposes.
Can I request deletion?
Yes. The notice says account data is deleted earlier if you request it.
Are the characters real people?
No. The terms say they are AI creations.
Conclusion
Candy AI’s privacy notice contains details that shape how safe the platform is for you: the controller, the retention periods, the moderation review and the use of de-identified data. Most of them sit outside the chat window.
Read the full notice before you share personal information, and keep your rights in mind. Read our privacy and safety guide.
Sources
- Privacy Notice – Candy AI
- Terms of Service – Candy AI
- Is Candy AI Safe and Who Really Reads Your Private Chat Logs
- Is Candy AI Legit? 2026 Review & Real Cost Breakdown
- Candy AI Review 2026: Pricing, Features & Honest Verdict
Important Information: Legal Notice: The information, financial calculations, relationships, and controversies evaluated in this report are strictly alleged and compiled from public digital footprints, video broadcasts, and social media transcripts. This content is published for informational and entertainment purposes only in line with Section 16 of the SA Constitution. Read the full, legally binding adultutopia.shop Legal Disclaimer & Editorial Policy here.