Is Candy AI legit? Who owns Candy AI
Candy AI is run by EverAI Ltd, a Malta-based company. The same operator stands behind candyshorts.com and the Shorts tab on candy.ai, and both use one Candy account. Candy says it has 50 million users. That’s its own figure, which we can’t check independently, but it’s clearly a big, established service rather than a fly-by-night site.
Legit doesn’t mean everything is free, though. Candy is a paid adult service with a freemium model: episodes 1–2 of each public series cost nothing, and the rest costs tokens. Nothing is hidden. Each locked episode shows its price before you unlock it.
What about the famous faces? The creator series star AI twins of adult performers who licensed their likeness to Candy. Candy’s help center says these twins are made “in direct partnership” and “with full consent”. Everyone else on screen is a fictional, AI-generated adult. Our digital twins guide explains how that works.
Is Candy AI safe to pay for?
This is the question most people are really asking. According to Candy’s help center, charges show up on your bank statement as “EverAI”, the operator’s name. Not “Candy”, not “Shorts”, nothing adult. Your bank may add a city or a reference code, so the exact line can vary.
The name is discreet; the amount isn’t. On the yearly plan you’ll see $47.88 once a year. The 3-month plan bills $26.97 each quarter, and the monthly plan $9.99 for the first month, then $13.99. Local taxes may apply. Our Candy AI price guide breaks down every plan.
How you can pay. Candy lists credit and debit cards, crypto, Apple Pay, Google Pay and bank transfer, depending on your country. PayPal and gift cards are not on its list. So if a site asks you for either “to activate Candy”, you’re not talking to Candy. Walk away.
A tip if refunds matter to you: Candy’s refund rule only covers card payments (details below), so a card is the payment method that keeps that option open.
What Candy says about your data
Like any account-based service, Candy holds some of your data: your email and login, payment records, your chats, the images you generate and what you’ve unlocked. Candy says it is GDPR-compliant. Under the GDPR you have the right to see the data a company holds on you and to ask for it to be deleted.
We haven’t audited Candy’s systems, so treat its privacy claims as Candy’s own. If you want your account or chats deleted, look in your account settings and Candy’s help center for the current steps, or write to Candy’s support and ask. One more rule worth knowing: Candy’s help center says generated content is for personal use only, so don’t repost it.
Privacy on your own devices
Candy’s billing name takes care of your bank statement. The rest is in your hands. Here’s where Candy could show up, and how to keep it to yourself:
| Where it could show | What to do |
|---|---|
| Browser history | Open Candy in a private or incognito window; you’ll just log in each time |
| Lock screen | If you install the web app, set notification previews to “when unlocked” or off |
| Home screen | Rename the web app icon, or tuck it into a folder |
| Shared laptop or tablet | Log out when you’re done, don’t let the browser save your password, use a separate user profile |
| Speakers | Headphones, or subtitles with the sound off |
| Bank statement | It says “EverAI”, as covered above |
Fake Candy sites, apps and “free Premium” scams
The official addresses are candy.ai and candyshorts.com, and that’s the full list. Whatever link you click, ours included (it passes through Candy’s affiliate redirect), you should land on one of those two before you log in or pay. Our Candy AI login page shows how to reach the real site every time.
Scam pages tend to give themselves away. They sit on lookalike domains that bolt extra words onto the name, or use an odd ending. They sell things Candy doesn’t, like lifetime plans, unlimited tokens or promo codes from strangers. And they ask for unusual payments: gift cards, PayPal, or card details on a so-called “age verification” page.
“Leaked” episodes on video sites are the same story. They’re usually re-uploads of free episodes, clickbait or phishing, and our uncensored guide explains why. Want an app icon without any of the risk? Our Candy AI app guide shows how to install the official web app in a few taps.
Episode 1 of every public series plays free, before you even sign up. No card, no download.
Cancelling and refunds
- Auto-renewal: every plan renews automatically until you cancel.
- Cancelling: Profile → Settings → Unsubscribe, any time. You keep your tokens and the episodes you’ve unlocked.
- Refunds: per Candy’s help center, within 24 hours of payment, card payments only, and only if you’ve used 20 tokens or fewer.
That last rule bites fast. A single standard episode is 12 tokens, so unlocking a second one, or one 30-token creator episode, puts you past the limit. If you’re on the fence, finish the free episodes first and wait a day before unlocking anything.
Is Candy AI trustworthy? The honest catches
Safe and legit doesn’t mean flawless. These are the things that catch people out, and none of them is a scam, just fine print worth reading:
- The paywall arrives early. Episodes 1–2 are free; episode 3 already costs tokens. The free part is a taste, not the whole meal.
- Long series add up. A five-episode series takes 36 tokens to finish, but My Bestie Betrayed Me takes 384. That’s four months of Premium tokens.
- Plans renew on their own. If you only want one month, cancel before the renewal date.
- Refunds are tight. Twenty tokens and 24 hours, and only on cards.
- Tokens are shared. Images, voice messages and calls draw from the same balance as your episodes.
Know those going in and there are no nasty surprises. Our full Candy Shorts review weighs them against the fun parts.
18+ only
Candy AI and Candy Shorts are for adults. All characters are fictional adults, AI-generated, and creator series use licensed likenesses of adult performers. If other people use your devices, set up a separate profile or your phone’s content restrictions, and keep your Candy login to yourself.
Your Candy AI safety checklist
Before you sign up
- Check the address bar: candy.ai or candyshorts.com, nothing else.
- Close anything that wants you to download a file.
Before you pay
- Watch the free episodes so you know what you’re buying.
- Pick a card if you want the refund option.
- Expect “EverAI”, not “Candy”, on the statement.
After you pay
- Note your renewal date somewhere you’ll see it.
- Use a unique password and log out on shared devices.
- Ignore DMs and posts offering leaks, mods or free Premium.
Tick those boxes and Candy is about as risky as any other subscription. The only cliffhangers left are in the episodes, so press play on episode 1.