Candy AI’s checkout page says it’s “Trusted by 50M Users” and lines up five-star testimonials under its plans. Try to check that on Trustpilot and you’ll hit a dead end: when we looked on September 30, 2026, Trustpilot said the candy.ai profile had been removed because the business “goes against our guidelines.”
That doesn’t make Candy AI a scam. It’s run by a registered company in Malta, it publishes its prices and billing rules, and we found no reported data breach. Our verdict is Caution. The product does what it advertises, but refunds close 24 hours after you pay, the cheapest-looking price is a full year charged up front, and what you type can be used to train its AI.
Last checked: September 30, 2026. How we checked this is explained at the end.
Is Candy AI legit? Who runs it, and what you’re signing up for
Candy AI is an AI companion site for adults. You pick a ready-made character or build your own, chat with it, and spend tokens on generated images, voice messages and short videos. Its subscription page advertises 18+ images and video. It isn’t something to hand to a teenager, and it isn’t something to open on a work laptop.
The operator is EverAI Limited, registered in Malta under company number C107181 at 56 Central Business Centre, Santa Venera, according to Candy AI’s Terms of Service (revised September 22, 2026). EverAI is also the name on your bank statement. So if you’ve spotted an “EverAI” charge you don’t recognize, this is almost certainly where it came from.
The free tier is thinner than older reviews suggest. The terms cap free users at 5 messages. After that you need a subscription or a token purchase.
The “$3.99 a month” plan is a $47.88 charge
The plan picker leads with “$3.99 /month” and a “70% OFF” badge. Read the line underneath and that’s the 12-month plan, billed as a single payment of $47.88. It “renews automatically for the same price and term,” so next year’s $47.88 goes through on its own unless you switch renewal off.
Here’s what each option costs over a year, using the prices on candy.ai/subscriptions when we checked (US dollars, before local taxes):
| Plan | Charged each time | Cost over 12 months |
|---|---|---|
| 12 months | $47.88 | $47.88 |
| 3 months | $26.97 | $107.88 |
| 1 month | $13.99 | $167.88 |
| Every 2 weeks | $9.79 | $254.54 |
| Weekly | $5.60 | $291.20 |
The weekly and fortnightly options appear in the page’s payment text but not among the three plans it lists up front, so you may never be offered them. If you are, the table shows the problem. Weekly billing costs about six times as much as the annual plan.
Every paid plan includes unlimited text chat and a monthly token allowance, which the terms put at “generally 100.” Tokens pay for images, voice and video. They don’t roll over. When a subscription ends, leftover tokens expire, and a new subscription starts from zero.
Two more clauses are easy to miss. Prices can go up, though the terms promise notice before a renewal at the higher price. And if your main card fails at renewal, EverAI can charge a backup payment method you’ve saved on the account.
How the 24-hour refund rule plays out
This is where people get caught. Outside the EU and UK, Candy AI’s refund policy has three conditions, and failing any one of them ends the request:
- Time. You must ask within 24 hours of the payment.
- Usage. A subscription refund is refused if you’ve used more than 20 tokens, even inside those 24 hours. For token packs, any use at all rules out a refund.
- Payment method. The terms say only purchases made by card can be refunded.
Put a clock on it. Buy the annual plan at 9 p.m. on Monday, try it a few times, and decide on Wednesday that it isn’t for you. You’re past 24 hours, so the $47.88 stays with EverAI. Decide by 8 p.m. on Tuesday instead and you’re still inside the window, but only if you’ve used 20 tokens or fewer.
The annual plan also only makes sense if you’ll stick around. Three months at $13.99 comes to $41.97, which is less than $47.88. Four months comes to $55.96, which is more. If you’re not sure you’ll still be using it after three months, the monthly plan is the cheaper way to find out.
EU and UK residents get more room: a 14-day right to withdraw from the first purchase, by email to [email protected]. It’s prorated, so you get back what you paid minus the share of service already used, and it doesn’t apply to renewals.
One warning. The terms say a chargeback cancels premium access and wipes remaining tokens the moment it’s filed. If the charge really wasn’t yours, go to your bank anyway. If it was yours and you just regret it, cancel renewal first and ask support before disputing.
What happens to what you type
Break-ins aren’t the main worry. The site runs over HTTPS, and the Privacy Notice (revised July 30, 2026) names the payment processors it uses. The trade-offs sit in how long data is kept and who else touches it:
| Data | How long it’s kept | Who else may see it |
|---|---|---|
| Account details (email, sign-in times, IP address) | While the account exists, then up to 3 years after your last activity (sometimes cut to 1 year), unless you ask for deletion | EverAI staff and hosting providers |
| Your messages and generated media | No separate period given; the general rule is while your account exists | Third-party AI model providers “may receive the content of your messages”; human moderators if content is flagged; random quality checks |
| De-identified chat data | No limit stated | Used to train EverAI’s models, including human review |
| Payment records | 10 years, for tax law | Emerchantpay, TrustPay, Volt, CoinGate, UpGate |
| Debugging logs | 30 days | Internal |
The terms go a step further. When you submit content, you grant EverAI a royalty-free, “perpetual” worldwide license to use it, including to train its AI models and for marketing, in a way it says is consistent with the privacy notice. Deleting your account later doesn’t cancel data that’s already been de-identified and folded into training.
Candy AI’s own terms tell users not to share financial details, addresses, contact information or passwords with the characters. Take that literally. Use a nickname, don’t upload photos of real people, and assume anything you write could one day be read by a moderator.
The missing Trustpilot page: what it tells you, and what it doesn’t
Trustpilot removes profiles when it decides a business breaks its guidelines. The removal notice doesn’t say which rule applied, so we can’t tell you why. It isn’t proof of fraud, and we’d be misleading you if we framed it that way.
It matters for a practical reason. The most common independent place to read complaints is gone, while Candy AI’s plan page still shows its own hand-picked testimonials. Treat those as advertising. For real experiences, search Reddit for recent posts about “EverAI charge” or Candy AI refunds, and check the dates before trusting them.
Cancel renewal and delete your data
These steps come from Candy AI’s terms and privacy notice as they read on September 30, 2026. Menu labels change, so check them as you go.
- Log in at candy.ai and open My Profile, then Settings.
- Choose Unsubscribe and confirm. The terms say premium stays active until the end of the period you’ve paid for and you won’t be charged again.
- Screenshot the confirmation and keep any email. If an “EverAI” charge shows up later, that’s your evidence.
- Spend any leftover tokens before the period ends. They expire with it.
- To delete your data, email [email protected] and ask for account deletion under the privacy notice. It says account data is deleted “without undue delay” on request, and that the privacy team tries to answer within a month. Payment records stay for ten years regardless. The data protection officer is at [email protected].
Who it suits, and who should skip it
If you’re an adult who wants an AI companion, pays by card, and reads the plan before clicking, Candy AI is a working product from a company you can identify. Start monthly, set a reminder for 20 hours after you pay, and decide before the refund window shuts.
Skip it if you share a card or device with family, if you’d hate to see your chats in a training set, or if you’re leaning on it for emotional support. Candy AI’s own terms say the service is for entertainment and isn’t meant as support.
If you’re comparing companion apps, our reviews of Janitor AI, Poly AI and Venice AI ask the same privacy questions. For another subscription where the headline price isn’t what renews, see our Use.AI breakdown.
How we checked this
On September 30, 2026 we read Candy AI’s Terms of Service (revised September 22, 2026) and Privacy Notice (revised July 30, 2026) in full, loaded the public plan page at candy.ai/subscriptions to record the prices and billing text, and opened Trustpilot’s candy.ai page, which showed the removal notice. We also searched for reported breaches, regulator actions and lawsuits naming Candy AI or EverAI and found none.
We didn’t create an account, subscribe, generate anything or contact support, so we can’t confirm how quickly refunds or deletion requests are handled in practice. Prices can differ by country and currency.
Prices, plans and features change often. Check the official site before you pay. Datalevo isn’t affiliated with or paid by any company mentioned here. Research and drafting were AI-assisted, and every figure was checked against the linked sources. Our full process is on the How We Review page.
FAQs
Is Candy AI safe to use?
It’s a real service from a registered Maltese company, and we found no reported data breach. The risks are about money and privacy: refunds close 24 hours after payment, and your messages can be shared with third-party AI providers and used, once de-identified, to train its models.
Is Candy AI legit or a scam?
It’s legit in the sense that it’s a working product run by EverAI Limited (Malta, company number C107181) with published terms. Its Trustpilot profile was removed for breaking Trustpilot’s guidelines, which Trustpilot doesn’t explain, so treat the testimonials on its own site as marketing.
What is the EverAI charge on my bank statement?
Candy AI’s plan page says charges appear as “EverAI.” If you didn’t sign up, contact your bank. If you did and want to stop it, cancel under Settings, then Unsubscribe, and keep a screenshot of the confirmation.
Can I get a refund from Candy AI?
Outside the EU and UK, only if you ask within 24 hours of paying, used 20 tokens or fewer, and paid by card. EU and UK residents have 14 days to withdraw from the first purchase, minus a prorated amount for what they used.
How much does Candy AI cost per month?
When we checked on September 30, 2026, it was $13.99 for one month, $26.97 every three months, or $47.88 a year (shown as $3.99 a month). All plans renew automatically at the same price and term.
Does Candy AI use my chats to train its AI?
Yes. Its privacy notice says de-identified conversations can be used to train its models, including human review, and its terms give EverAI a perpetual license to content you submit. Keep real names, addresses and photos out of your chats.
