Candy AI
Contact

Candy AI

Privacy Policy

This notice explains how information is handled when you browse candys.app, use your account or contact us.

Controller and enquiries

EverAI Limited, Malta registration C107181, is the controller identified for our service. Our postal details are on the About page. Send privacy enquiries through Contact; do not include passwords or complete payment-card details.

Information used to provide the service

Depending on the features you use, information can include account and sign-in details, character settings, conversation inputs and outputs, purchase records and support correspondence. Hosting and security systems also process connection and request information.

Purposes and recipients

Information is used to provide requested features, manage billing, answer enquiries and address misuse. Hosting, payment, moderation and AI processing providers may process information for these tasks. Some processing can take place outside your country. Processing relies on the applicable contract, legal obligation, legitimate interest or consent, depending on its purpose.

Information in your browser

This interface stores saved character IDs, recently opened profiles, character drafts and interface preferences in local storage on your device. These are not automatically erased by signing out elsewhere. Clearing this site's browser data removes local drafts and preferences. People with access to the same browser profile may be able to see them.

Optional statistics

Our Google Analytics property is G-H2EC99GLP5. The Google tag is not loaded until you allow Statistics. Once allowed, it can process page visits and browser or device information. This interface does not add chat messages, character drafts or support-email content as custom analytics events. You can withdraw permission in Cookie preferences.

Retention and your choices

Account, transaction and support records are kept for their operational purpose and any applicable legal requirement. Retention differs by record type; deleting an account does not necessarily remove records that must be retained. Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to certain processing, withdraw consent or contact a data-protection authority.

Making a request

Tell us which account and information your request concerns. We may need proportionate verification before disclosing or changing account information. Use the account-deletion instructions if you want to close your account, or contact us for an individual data request.