Is Candy Shorts safe and legit?

"Is Candy AI safe?", "is Candy AI legit?" and "is Candy Shorts legit?" are really four questions: is the company real, how does billing work, what happens to my data, and how do I avoid fakes. We read Candy AI's terms of service (revised September 22, 2026), its privacy notice (July 30, 2026), the candyshorts.com terms (September 30, 2026) and EverAI's help center on October 2, 2026. We have no account and have not tested paid features, so everything below is what those documents say, contradictions included.

Who runs Candy Shorts

candyshorts.com is not a separate business. Its terms name the same operator, and its privacy notice says account registration and payment happen through "our affiliated website Candy.ai". One account and one Premium plan cover both sites. A public help center, full legal pages and a separate Trust & Safety center are the basic signs of a real company rather than a pop-up storefront.

One small inconsistency: a single help article gives support@candyai.ai, while every other official page uses support@candymail.ai. Use the second.

Billing: what you pay and what shows on your statement

The Shorts membership is Candy AI Premium. In the US it costs $3.99 a month on the annual plan (billed $47.88), $8.99 a month on the quarterly plan (billed $26.97) or $13.99 month to month, with local taxes possibly on top. The details are in Candy AI Shorts price.

Charges appear as "EverAI" on a bank or card statement. Candy AI's homepage FAQ calls it a neutral merchant name with "no direct reference to Candy AI". Good for discretion, bad for memory: EverAI's help center has an article titled "I've deleted my account. Why do you keep on charging me?", which suggests plenty of people don't connect the name to the service.

The help center lists cards, crypto, Apple Pay, Google Pay and bank transfer (Volt, Pix), depending on your country; the plans page we read showed Apple Pay, Visa and Mastercard. Two clauses are worth knowing: while you are subscribed you must keep at least one payment method on file, and if a renewal payment fails, the terms let EverAI charge a backup method you designated.

Auto-renewal, cancellation and refunds

Every plan "renews automatically for the same price and term", and the terms allow price increases if they are communicated before the renewal. Cancelling is self-service: My Profile, then Settings, then Unsubscribe. There is no pause option, Premium stays active until the end of the period you paid for, and cancelling does not trigger a refund.

In the EU and UK, Candy AI's terms add a 14-day right of withdrawal on the first purchase, not on renewals, minus a prorated amount for what you used. A chargeback cancels the subscription immediately.

Three traps follow from these rules. The annual plan is the cheapest per month, but it renews at $47.88 in one go, so put the date in your calendar. Crypto and bank-transfer payments fall outside the card-only refund rule, and the documents don't say how Apple Pay or Google Pay are treated. And if you buy on candyshorts.com without an account, you must claim the Candy AI account within about seven days, or the subscription is cancelled and won't renew. Step-by-step instructions are in how to cancel Candy AI.

Deleting your account and the "still charged" problem

To delete an account, go to Settings, then the Danger Zone, then Delete Account. A help article updated October 1, 2026 says that deleting before the renewal date automatically cancels any active subscription, and EverAI keeps some data for legally required periods either way. The company has also published "I already canceled my subscription, where is my refund?", a sign that cancelling, deleting and refunds get confused. The cleanest order is to unsubscribe first and delete the account afterwards.

Privacy: what Candy AI does with your data

This is Candy AI's weakest area for a privacy-minded user, and its documents are frank about it:

• Training. The terms license your content to EverAI for "training, developing, enhancing, evolving and improving" its AI models.
• Human review. The privacy notice says preparing training data "may include human review of de-identified and/or anonymized interactions" with AI companions. Separately, content flagged by moderation can be reviewed manually by EverAI or authorized partners.
• Third parties. Messages may reach "third-party LLM providers and/or hosters", and data may be transferred outside the EU, including to the United States.
• Retention. Account data is kept three years after your last activity (less in some cases, or until you ask for deletion), financial records ten years, marketing data until you withdraw consent or two years at most, and log files are deleted after 30 days.
• No sale. EverAI says it does not sell or trade personal data without your consent "or unless otherwise stated".

For Shorts viewers, the exposure is smaller. Shorts are pre-made videos, separate from your chat conversations, so watching them does not produce the kind of personal text the training clause is about. Your account details, payment records and server logs still exist, as on any streaming service. Use a dedicated email and a unique password, and don't type anything into a chat you wouldn't want a reviewer to read. The terms also say the service is "for entertainment purposes only" and not a form of emotional support.

Age checks, content rules and safety claims

Candy AI is for adults. Its Underage Policy requires users to affirm they are over 18 and reserves further checks "in accordance with local requirements", and the privacy notice mentions third-party age estimation or ID verification where your location requires it. EverAI says it was "the first AI companion platform to become a member of the Internet Watch Foundation (IWF)", that it reports to the National Center for Missing and Exploited Children (NCMEC), and that account terminations for policy violations are always decided by human reviewers. Its terms describe zero tolerance for child sexual abuse material. These are EverAI's own statements; we can't audit them, but they are specific and on the record.

The content rules ban material resembling minors, non-consensual imagery and deepfakes of real people. The only real people in Shorts are performers who licensed a digital twin, and the episodes themselves are adult content — see how adult Candy Shorts is. The terms also forbid access from China and Singapore.

What reviews say, and why Trustpilot shows nothing

On October 2, 2026, Candy AI's Trustpilot page was not visible. Trustpilot shows the notice "The business you're trying to find goes against our guidelines and is no longer visible on Trustpilot", without saying why — that is Trustpilot's wording, not a finding of fraud. It does mean there is no current score to quote or check. A separate, unclaimed "Candy Ai" profile exists for candy-ai.eu, but nothing ties it to EverAI, so ignore it. Reddit blocked our requests, so we can't summarize it either.

The clearest evidence of recurring problems comes from EverAI itself: help articles about charges after deleting an account and about refunds after cancelling exist because people keep asking. Billing confusion, not fraud, is the pattern to plan for.

Official vs copycat: how to tell the real Candy AI

Candy AI has no native app, which leaves room for imitators. Run these checks before you sign in or pay:

Store lookalikes we found on October 2, 2026, none published by EverAI: CandyMate AI and Baebot: AI Character & Chat on the App Store (the second appeared in search results as "CandyAI: Chat, Play & Create"), and Sweet Cherry: AI Girlfriend on Google Play, published by Candy Studio Apps under the package name io.candy.android.app — a name that looks official and isn't. Two more App Store results from the same search were no longer available. More in the Candy Shorts app guide; fake "leak" sites are covered in Candy AI Shorts leaked.

The real service has nothing to install, which removes the biggest risk with adult apps: sideloaded software. If something asks you to install a Candy app, it isn't Candy AI.

Our verdict: is Candy AI safe and legit?

Candy Shorts and Candy AI are legitimate products from a real, identifiable company, and the billing and refund rules are published and specific. That is not the same as risk-free. The cautions are concrete: put the renewal date in your calendar, pay by card if you might want a refund, treat chat as not private, and only pay on candy.ai or candyshorts.com. Whether it is worth the money is a separate question, answered in our Candy Shorts review.

The lowest-risk test is the free episodes: no card, no app. We are an independent guide, and the link below is tracked.

Frequently asked questions

Related guides