Privacy Policy
Last Revised: January 15, 2026 • Effective Date: January 1, 2026
1. Introduction & Scope
Welcome to candy ai (accessible at https://eng-candyai.us/). This Privacy Policy explains our practices regarding the collection, storage, processing, and safeguarding of information gathered when you navigate our site, engage in artificial intelligence conversational simulations, customize digital companion personas, and utilize our related services.
By accessing or registering with candy ai, you acknowledge that you have reviewed, understood, and consented to the data practices described herein. If you do not consent to this policy, please discontinue use of the platform immediately.
2. Information We Collect
We believe in minimal data footprint architectures. Data collected includes:
- Pseudonymous Account Identifiers: Randomly generated user session identifiers, chosen usernames, and securely hashed passwords or single sign-on tokens. We do not require national identification numbers or personal phone numbers.
- Interactive Dialogue Logs: Textual prompts, conversational narratives, and companion customization parameters necessary to render real-time responses and persistent character memory states.
- Technical & Telemetry Data: IP address (truncated for geographic validation), browser user agent, device screen resolution, preferred interface language, and anonymized diagnostic performance metrics.
- Financial Transaction Records: Payments are processed via PCI-DSS compliant third-party payment gateways. candy ai does not store raw credit card numbers or banking secrets.
3. How We Use Your Information
Your data is processed strictly for the following purposes:
- Delivering low-latency neural text generation, real-time voice synthesis, and contextual digital character imagery.
- Maintaining episodic continuity across multiple companion interactions.
- Detecting and mitigating abusive behavior, system attacks, and violations of our 18+ Adult Content Guidelines.
- Processing membership tiers, subscription renewals, and virtual token allowances under discreet billing descriptors.
4. Absolute Prohibition of Data Selling
We do not sell, rent, license, or monetize your personal information, private chat transcripts, fantasy narratives, or voice interactions to data brokers, advertising aggregators, or marketing networks under any circumstances.
5. Cryptographic Security Standards
All data transfers between your client browser and the candy ai servers are fortified with industry-standard 256-bit Transport Layer Security (TLS 1.3). Companion memory checkpoints and private media folders are stored behind secure virtual private cloud (VPC) firewalls with strict role-based access control.
6. User Data Rights (GDPR & CCPA Compliance)
Depending on your jurisdiction, you maintain sovereign statutory rights over your personal information:
- Right of Access & Rectification: You may review and update your profile parameters directly in your account console.
- Right to Total Erasure ("Right to be Forgotten"): You may initiate an instantaneous purge of all chat history, episodic companion memories, and associated session records via account settings or by contacting our Data Protection Officer.
- Right to Data Portability: Request an export of your stored persona files in standard JSON format.
- Right to Opt-Out: Restrict non-essential performance cookies and analytics tracking at any time.
7. Strict 18+ Age Restriction
The services provided by candy ai are intended solely for consenting adults aged 18 years and older (or the age of majority in your applicable jurisdiction). We do not knowingly collect, process, or maintain data belonging to minors. Any detected account belonging to an individual under 18 will be terminated immediately.
8. Contact Us
For inquiries regarding this Privacy Policy, data requests, or compliance matters, please reach out to our privacy team at: