Disclosure: Some apps we review (currently Candy AI and ourdream.ai) may pay us a commission when you sign up through our links. This page has no affiliate links in its text, and links to other apps are never affiliate links. Affiliate disclosure | Adults only (18+)
Is Candy AI Safe? What We Found in Its Terms and Billing
Last checked: October 25, 2026. Based on Candy AI's terms, help centre and subscription page, and the sources listed in our Candy AI review.
Short answer: Candy AI is a legitimate paid app, not a scam. It's run by a registered company, publishes its billing and cancellation rules, and has adult-content safeguards. The real risks are ordinary ones: what you type is stored data, renewals continue until you cancel, and its documents disagree about leftover tokens.
Safety Scorecard
| Question | What we found |
|---|---|
| Who runs it? | EverAI Limited, a company registered in Malta |
| Is it a scam? | No. You get what the subscription page lists: unlimited chat and 100 tokens a month on paid plans |
| Age checks | Its terms say it may ask users to verify, or re-verify, that they're adults |
| Content rules | Prohibits trying to generate content resembling minors; says known abuse material is reported to NCMEC |
| Privacy | Its own terms advise not sharing sensitive personal information with AI characters |
| Refunds | Within 24 hours of payment, conditions apply; a refund ends the subscription at once |
| Cancelling | Settings, then Unsubscribe; access runs to the end of the period |
Is It Safe to Pay?
Yes, with the usual care. Pick the plan that matches how long you'll use it: the yearly plan is $47.88 up front, while the monthly plan is $9.99 for the first month and then $13.99. Short weekly and two-weekly plans exist, but they're the priciest way to use Candy over a year. Set a calendar reminder a few days before any renewal.
A virtual or single-use card from your bank is a sensible extra layer for any subscription app, Candy included.
Is It Safe for Your Privacy?
Treat every AI companion as a service that stores what you write. Candy's terms say so in effect, advising users not to share sensitive personal information with characters. Privacy researchers have criticised the companion-app category as a whole on this point, so this isn't unique to Candy. Practical steps:
- Use an email address kept for apps like this.
- Don't share your full name, workplace, address or photos of yourself.
- Remember that generated images are stored on the service.
The One Thing That Catches People Out
Leftover tokens. Candy's help centre (August 2026) says cancelling doesn't delete your token balance. Its terms (September 2026) say remaining tokens expire at the end of the billing period. Spend your tokens before your paid period ends and you're covered either way. Our cancellation guide has the steps.
Red Flags That Aren't Candy
- "Candy AI mod" or "free premium" downloads. Unofficial, and a common route for malware.
- Sites selling "lifetime" Candy accounts or token codes.
- Look-alike domains in ads. Type the address yourself.
Questions
Is Candy AI legit?
Yes. It's operated by EverAI Limited and publishes its plans, terms and cancellation rules.
Is Candy AI a scam?
No. The main complaints we see are about renewals and tokens, both of which its documents explain.
Is Candy AI worth it?
For text-first users on the yearly plan, it's the best value we've found. See our full review and Candy AI vs Nomi.
Related: Best AI Girlfriend Apps | Character AI alternatives | Costs