Candy AI is an 18+ AI girlfriend site run by EverAI Limited, a company registered in Malta. Free users get 5 messages, one custom character and one image. Subscribers get unlimited chat and 100 tokens a month for images and voice, at £13.99 a month or £47.88 a year as Candy showed its prices to me in the UK. It is a legitimate business, but its terms let it use your chats to train its AI.
This Candy AI review answers the questions people search most: is Candy AI free, is it safe, is it legit, and what it really costs once tokens come into play. It also covers the adult content rules, age checks, refunds and the terms you accept at sign-up.
Candy AI review: the short version
Everything in this table comes from Candy's home page, subscription page, help center, terms of service, privacy notice and content policies, read on October 31 and November 1, 2026.
| Check | What Candy's pages say |
|---|---|
| Who runs it | EverAI Limited, registered in Malta under number C107181 |
| Price | £13.99 a month, £26.97 for 3 months or £47.88 a year, shown in pounds from the UK |
| Free plan | 5 messages, one custom character and one image |
| Paid plans include | Unlimited messages and 100 tokens a month; Premium Plus gives 330 |
| Tokens | Pay for images, voice and video; the terms and help center disagree on whether they survive cancelling |
| Adult content | Allowed for adults, with a long published list of banned content |
| Age checks | An 18+ age gate, with further checks where local law requires them |
| Privacy | TLS 1.2 or higher in transit; de-identified chats can train its AI |
| Refunds | Within 24 hours, and only if you have used 20 tokens or fewer |
| Disputes | Maltese law and the courts of Malta; no arbitration clause |
| Where you use it | In a web browser; I found no app store link on its site |
How I reviewed it
I did not create an account for this review, so nothing here describes using the app. It is built from Candy's own published pages, read on October 31, 2026, and the eight checks on our how we review page. Candy dates every policy. The terms were revised on September 22, 2026 and the privacy notice on October 19, 2026. Where Candy does not publish something, I say so instead of borrowing a number from another site.
A correction. The first version of this review said Candy does not publish its prices. It does, on a subscription page I had missed, and its help center spells out the free and paid limits. I updated the review on November 1, 2026 with both.
Is Candy AI free? The 5-message limit
Only just. Candy's terms say a free user may "generally send a maximum of 5 messages" to its characters, and further use needs a subscription. Its help center adds that free users can create one custom character and generate one image. The home page calls this a free trial for people who are curious or cautious, which is a fair name for it. Five messages lets you see how a character writes. It does not let you build a companion and live with it for a week.
If a free start matters most, our guide to free AI girlfriend apps compares apps with bigger free tiers.
Candy AI pricing: what you actually pay
Candy lists its prices on its subscription page, at candy.ai/subscriptions. Its /pricing and /premium addresses send you back to the home page, which is why I missed it at first. Checked from the UK on November 1, 2026, the page showed:
- 1 month: £9.99 for the first month, then £13.99 a month
- 3 months: £26.97, shown as £8.99 a month
- 12 months: £47.88, shown as £3.99 a month and labelled 70% off
- Weekly and fortnightly billing at checkout, at £5.60 and £9.79
I saw pounds because I checked from the UK, and the page warns that local taxes may apply, so expect your own currency at checkout. The 70% label compares the yearly plan with paying £13.99 every month. A higher tier, Premium Plus, comes with 330 tokens a month, but the page I loaded did not show its price.
What the terms add:
- Plans bill monthly, quarterly or yearly and renew automatically.
- Candy can raise prices, but says it will tell you before a renewal at the higher price.
- If your main card fails at renewal, Candy may charge a backup payment method you saved.
- It takes Visa, Mastercard, Pay by Bank and crypto including Bitcoin, Ethereum, USDC and Litecoin, though some methods only work in certain countries.
- Charges appear under a neutral merchant name with no mention of Candy AI.
Candy AI tokens: where the real cost sits
A subscription buys unlimited messages plus a monthly token allowance, which the terms say is "generally 100 per month". Candy's help center lists what tokens pay for. That covers images, video, voice messages, voice calls in beta, creating a custom character and private content packs. You can buy more tokens at any time. The home page also warns that "the more detailed your companion, the more tokens you'll use."
Three rules make the allowance worth more care than it looks:
- The terms say subscription tokens expire when your billing period ends and do not carry over, even if you resubscribe. An older help center article says cancelling does not delete your tokens. Until Candy settles it, assume they expire.
- Tokens cannot be cashed out, traded or moved to another account.
- A refund on a token pack is refused once you have used any of its tokens.
The pages I read did not say how many tokens an image, a voice note or a video costs. That is the number that decides your real monthly bill, and Candy keeps it inside the app. If images and voice are why you want Candy, expect to top up, and judge the plan by what 100 tokens buys you in the first week.
Characters, memory and what you can make
Candy lists over 100 ready-made characters across Girls, Anime and Guys categories. Its builder lets you set ethnicity, age range, eye colour, hairstyle, hair colour, body features, personality, voice and hobbies. Characters can chat, send voice notes, generate images and appear in AI videos.
Candy says its characters learn what you like and remember what matters to you. It does not publish how far back that memory reaches. The terms also let Candy remove characters or features at any time, with no refund for anything you paid toward them.
Candy AI NSFW rules: what is allowed and what is banned
Candy's home page promises "uncensored fantasy experiences", as long as roleplay stays fictional, consenting and within its Community Guidelines. Its Blocked Content Policy and Community Guidelines then ban a long list, including:
- Anything involving minors, and any attempt to generate content that resembles a minor
- Images of real people, deepfakes and celebrity impersonation
- Non-consensual intimate imagery
- Animal abuse, including sexual acts with animals
- Self-harm, extreme violence and terrorism
- Hate speech and content that glorifies drug misuse
- Trying to jailbreak or get around the moderation
Candy runs moderation built on its own language model. It can change a request before anything is generated, and staff or authorised partners can read flagged chats. If Candy flags one of your messages, this moderation is the likely reason. Candy reports child sexual abuse material to NCMEC, and it gives no refund for content removed or accounts restricted under these rules. If an image ever looks like you or someone you know, its Content Removal Policy explains how to ask for it to be taken down.
For how these rules compare with other adult chat apps, see our comparison of the best NSFW AI chat apps.
Age verification
Everyone meets an age gate and must confirm they are over 18. Candy's Underage Policy says it may add further checks to meet local requirements, and its privacy notice lists the results of third-party age estimation or ID checks "as applicable based on your location". Candy does not name the provider or the methods on the pages I read. The terms also say Candy can ask you to prove you are an adult at any point. Candy is not for teenagers, and its policies say so plainly.
Is Candy AI safe? What happens to your chats
Safe from fraud, yes. Private, only partly. Candy is a registered company that publishes dated policies and protects data in transit. Its policies also give it wide room to read, keep and learn from what you type:
- The home page says data in transit is encrypted with TLS 1.2 or higher. It does not claim end-to-end encryption, which is the honest description for a chat app that must read your messages to reply.
- The privacy notice says chats, prompts and replies can be de-identified and used to train Candy's AI models and moderation tools, including human review of those de-identified chats.
- Under the terms you keep ownership of what you type, but you grant Candy a perpetual, worldwide, transferable licence to use it, including to train its AI and for marketing.
- Third-party AI model providers "may receive the content of your messages", and your data can be transferred outside the EU, including to the US.
- The Community Guidelines say Candy may also monitor chats for quality checks.
- Account data is kept for up to three years after your last activity unless you ask for deletion. Payment records are kept for ten years, and log files for 30 days.
On the plus side, Candy says it will not sell your personal data without your consent, and it names a data protection officer and a UK representative. To delete your data, email support@candymail.ai. As with any companion app, keep real names, addresses and photos of real people out of your chats. Our guide to whether AI companion apps are safe covers the wider risks.
Is Candy AI legit?
Yes. EverAI Limited is registered with the Malta Business Registry under number C107181, at an address in Santa Venera, and Candy's terms and privacy notice both name it. Candy publishes a complaint policy that promises to acknowledge a complaint within 24 hours and resolve it within 7 calendar days. Its home page says support runs around the clock through Zendesk.
The terms put disputes under Maltese law and the courts of Malta. They contain no arbitration clause or class action waiver, which is friendlier to users than the arbitration terms OurDream uses. Two other details explain common searches. The terms block access from China and Singapore. And filing a chargeback cancels your plan at once, while the complaint policy warns that wrongful chargebacks can get you blacklisted.
Refunds and how to cancel Candy AI
Cancelling is easy. Go to My Profile, then Settings, and choose Unsubscribe. Your plan stays active until the end of the period you paid for. Cancelling is not a refund request, so if you want money back you must also email support@candymail.ai within 24 hours of paying. Refunds are the hard part. The terms say:
- You must ask within 24 hours of paying.
- A subscription refund is refused once you have used more than 20 tokens, however soon you ask.
- Only card payments can be refunded.
- Technical problems on your side do not qualify.
- EU and UK users can withdraw within 14 days of their first purchase, minus a share for what they used. Renewals are not covered.
In practice, the refund window can close before you finish building your first character, so decide quickly whether Candy suits you.
A note on other Candy AI reviews
Most reviews ranking for Candy earn from sign-ups, and many read like ads. One widely ranked review says Candy claims not to store chat logs permanently and that the free tier has ads and no adult content. I found none of that on Candy's pages, and the privacy notice describes keeping account data for up to three years after your last activity. Whichever review you trust, check its date and whether it links Candy's own terms.
Candy AI vs OurDream AI
Since our home page sends people to OurDream, here is how the two compare on their own published pages:
| Check | Candy AI | OurDream AI |
|---|---|---|
| Price | £13.99 a month or £47.88 a year, from the UK | $19.99 a month or $119.88 a year |
| Free plan | 5 messages, one character and one image | Free sign-up; chat costs 1 dreamcoin per message; no images or video; starting coins not published |
| Monthly allowance | Unlimited messages and generally 100 tokens | Unlimited standard chat and 1,000 dreamcoins, which images, video and voice spend at published rates |
| Refunds | 24 hours, 20 tokens or fewer | Unused time generally not refunded |
| Encryption claim | TLS 1.2 or higher in transit | Home page claims end-to-end; privacy policy says at rest and in transit |
| Disputes | Courts of Malta | Individual arbitration, with an opt-out |
Candy wins on candour about encryption, on dispute terms and on a cheaper yearly plan. OurDream wins on a bigger monthly allowance for images and video, with published costs per item. For the free side, see our guide to OurDream's free plan, and for everything else read our full OurDream vs Candy AI comparison.
Verdict: who Candy AI suits, and who should skip it
Candy AI suits an adult who wants to design a companion in detail and does not mind paying for images and voice as they go. It is a registered Malta company with dated, specific policies, a long banned-content list and a complaints process with set deadlines. Unlike some rivals, its home page makes no end-to-end encryption claim it cannot keep. Three things count against it. The free tier is about five messages, so it is a preview rather than a free plan. The monthly plan at £13.99 is steep next to the £47.88 yearly plan, and 100 monthly tokens must cover every image, video and voice note, so your real bill depends on how many you make. And the refund window shuts after 24 hours, or sooner once you pass 20 tokens. Skip it if you want your chats kept out of AI training, because its privacy notice says de-identified conversations can train its models.
Compare before you pay
If you want a bigger monthly allowance for images and video, with published costs, the Crushella home page lets you pick a look and a mood for your AI girlfriend, then continue to OurDream.ai to chat with her. Sign-up is free. To weigh more options, see our Candy AI alternatives or our guide to the best AI girlfriend apps.
Frequently asked questions
Is Candy AI free?
Only as a short trial. Candy's help center says free users can send up to 5 messages across all characters, create one custom character and generate one image. Sign-up is free, and five messages is enough to sample how a character writes. Anything past that takes a paid plan, and images, voice and video draw on the tokens that come with it.
How much does Candy AI cost?
Candy's subscription page showed me £13.99 a month after a £9.99 first month, £26.97 for three months, or £47.88 for a year, which it shows as £3.99 a month. I checked from the UK, so prices showed in pounds. Every plan includes unlimited messages and 100 tokens a month for images and voice, and renews automatically.
Is Candy AI safe?
It is a registered company with dated policies and TLS encryption in transit, so it is safe from fraud. It is not very private. Its privacy notice says de-identified chats can train its AI, outside AI providers may receive your messages, and moderators can read flagged chats. Account data is kept up to three years after your last activity.
Is Candy AI legit?
Yes. Candy.ai is run by EverAI Limited, registered in Malta under number C107181, and its terms, privacy notice and complaint policy all name the company. It promises to acknowledge complaints within 24 hours and resolve them within 7 days. Disputes go to the courts of Malta, and the terms block access from China and Singapore.
Can I get a refund from Candy AI?
Only if you email support within 24 hours of paying and have used 20 tokens or fewer. Cancelling in Settings does not count as a refund request. Token packs are refunded only if unused, and only card payments qualify. EU and UK users can withdraw within 14 days of a first purchase, minus a share for what they used.
Does Candy AI allow NSFW content?
Yes, for adults. Its home page promises uncensored fantasy roleplay within its Community Guidelines. It bans anything involving or resembling minors, real people and deepfakes, non-consensual imagery, sexual acts with animals, self-harm, extreme violence and attempts to get around its moderation. Flagged chats can be reviewed by staff, and Candy reports abuse material to NCMEC.
Does Candy AI have an app?
Candy runs in a web browser on desktop and mobile, and its home page says no installation is needed. It suggests adding the site to your phone's home screen through your browser's share menu to get notifications. I found no App Store or Google Play link on Candy's own site when I checked on October 31, 2026.
Sources
- Candy.ai home page and FAQ
- Candy.ai subscription plans
- Candy.ai help: What can I do as a free user?
- Candy.ai help: What can I do as a paid user?
- Candy.ai help: What is Premium Plus?
- Candy.ai help: What can I do with tokens?
- Candy.ai help: Do I lose my content and tokens after I cancel?
- Candy.ai help: Does canceling give me a refund?
- Candy.ai Terms of Service
- Candy.ai Privacy Notice
- Candy.ai Community Guidelines
- Candy.ai Blocked Content Policy
- Candy.ai Underage Policy
- Candy.ai Content Removal Policy
- Candy.ai Complaint Policy
- OurDream help: What costs coins?
- OurDream help: Can I generate images or videos if I don't have a subscription?