Privacy Policy

Your privacy matters to us. Learn how we protect your data.

Last updated: June 10, 2026

1. Introduction

Candy AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

Personal Information: When you create an account, we may collect your email address, username, and password. If you subscribe to a paid plan, we collect payment information through our secure payment processors.

Usage Data: We collect information about how you interact with the Service, including chat messages, feature usage, session duration, and device information (browser type, IP address, operating system).

Cookies: We use cookies and similar tracking technologies to enhance your experience, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Personalize your AI companion experience
  • Respond to your comments, questions, and requests
  • Send technical notices, updates, security alerts, and support messages
  • Monitor and analyze trends, usage, and activities in connection with the Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Conversation Privacy

Your conversations with AI companions are private and encrypted. We do not sell, rent, or trade your conversation data to third parties for marketing purposes.

We may process conversation data internally to:

  • Improve AI model responses and accuracy
  • Ensure compliance with our Terms of Service
  • Detect and prevent abuse or harmful content
  • Troubleshoot technical issues

All conversation data is anonymized before being used for AI training purposes.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

  • Service Providers: We may share information with third-party vendors who provide services on our behalf (hosting, payment processing, analytics).
  • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • Protection of Rights: We may disclose information to protect the rights, property, or safety of Candy AI, our users, or others.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmission
  • AES-256 encryption for data at rest
  • Regular security audits and vulnerability assessments
  • Restricted access to personal information on a need-to-know basis

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.

Conversation history may be retained in anonymized form for AI model improvement purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct inaccurate or incomplete information
  • Deletion: Request that we delete your personal information
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to certain types of processing
  • Withdraw Consent: Withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

To exercise any of these rights, please contact us at privacy@canadyai.com.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

We ensure that appropriate safeguards are in place to protect your information when transferred internationally, including the use of Standard Contractual Clauses approved by relevant authorities.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@canadyai.com

Address: Candy AI Inc., 123 Innovation Drive, San Francisco, CA 94105