Trust & safety
Your personal information and Candy AI
EverAI Limited is the controller responsible for our personal-data processing. Choose what you supply for the account or feature you use, and avoid sensitive details that are not needed for an invented role or conversation.
On this page
Think about personal data beyond your profile
Your visible name and picture are only part of the information that may be processed. Account details, companion preferences, prompts, outputs and calls can also contain personal data, depending on what they include.
Use an invented background for a fictional character role. Keep financial information and real login details out of the scene, and avoid identifying another person when their details are unnecessary for the exchange.
Understand the processing and review that private chat can involve
Our privacy notice allows processing by service providers, review of flagged material and sampling for quality checks. Interactions that have been de-identified may support research or training. A private chat is not a promise of end-to-end encryption excluding provider access.
Before including something sensitive, ask whether an ordinary fictional detail would do the same job. An exchange that looks private is still not an appropriate place to keep passwords or other secrets.
Account deletion does not override legal retention
Deletion requests concern account data, subject to legal exceptions for records we must retain. Financial and transaction records are generally kept for ten years. Losing access to a thread does not show that every connected record was erased at once.
Save the payment receipts and references you may need before removing the account. At the same time, do not keep unnecessary copies of private material belonging to someone else simply because you have access to it.
Identify the account or material in your privacy request
Tell us what personal information you want found, corrected or removed, together with the relevant account or content reference. Make the request precise without adding unrelated sensitive details to explain it.
On a device shared with others, check what the browser has saved locally as well. Signing out ends that account session; it does not perform the separate task of clearing site data.
Your questions
Does a private conversation become a public character profile?
A chat and a public profile are different things. That distinction does not exclude the provider processing or review permitted under our privacy notice.
Are all payment records erased as soon as an account is removed?
No immediate erasure of every record follows from deletion. Legal and transaction-retention duties may remain, so keep any receipts you need before removing account access.
Which information should I avoid putting into a fictional scene?
Use invented background details instead of passwords, recovery codes, full payment information or another person's private records. None of those secrets is needed to establish your fictional role.