🔒 Summary of Discretion & Encryption
We believe personal AI conversations should remain completely confidential. Your private chats, voice calls, and generated images are protected by industry-standard encryption and are never sold to external data brokers or advertisers.
1. Introduction & Overview
Welcome to Candy.ai ("we," "our," or "the Platform"). This Privacy Policy explains how we collect, store, utilize, and protect your personal information when you access or interact with our website (index.html) and our companion applications.
By creating an account, browsing this website, or interacting with our virtual companions, you acknowledge and agree to the practices outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services.
2. Age Requirement & Consent
Candy.ai is exclusively intended for adults who are at least eighteen (18) years of age (or the legal age of majority in your specific jurisdiction). We do not knowingly collect, request, or solicit personal data from minors under 18 years of age. If we become aware that a person under 18 has submitted personal information, we take immediate steps to delete such data and terminate any associated accounts.
For more details on age compliance, please review our comprehensive Disclaimer Page.
3. Information We Collect
To provide personalized AI interactions and ensure smooth account management, we collect the following categories of data:
- Account Credentials: Email address, hashed password, and username created during account registration.
- Companion Customization Data: Physical traits, personality preferences, style settings, and companion names chosen by you.
- Conversational Data: Text prompts, chat messages, voice transcripts, and feedback provided during interaction with virtual companions to facilitate conversational memory and contextual continuity.
- Technical & Usage Telemetry: IP addresses, browser types, operating systems, referring URLs, access timestamps, and session durations collected automatically to maintain system security and uptime.
- Payment Information: Financial transactions are processed via certified, PCI-DSS compliant third-party payment gateways. Candy.ai does not directly store credit card numbers on its servers.
4. How We Use Your Information
Your data is processed strictly for the following operational objectives:
- To generate dynamic, context-aware responses and realistic images tailored to your companion configuration.
- To remember your preferences and conversation history across sessions.
- To verify eligibility (including confirmation of legal adult age).
- To process subscriptions, billing inquiries, and customer care tickets through our Contact Center.
- To monitor and prevent fraud, security breaches, bot abuse, and unauthorized automated activity.
5. Security & Data Protection
We employ robust administrative, technical, and physical safeguards to ensure the confidentiality of your personal information:
- Transport Layer Security (TLS 1.3): All communications between your browser and our servers are encrypted in transit.
- Data Minimization: We only store conversational context necessary to maintain companion memory and conversational coherence.
- Strict Access Controls: Chat logs and account details are isolated and restricted to authorized operational engineers on a strict need-to-know basis.
6. Cookies & Tracking Technologies
We use session cookies and local storage tokens to keep you logged in and remember your aesthetic settings (such as dark mode preferences and age confirmation state). You may adjust your browser settings to disable cookies, although certain personalized features may not function as intended without them.
7. User Rights (GDPR & CCPA Compliance)
Depending on your geographic location, you hold statutory rights regarding your personal information, including:
- Right to Access: Request a copy of the personal data we maintain about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to Be Forgotten"): Request total deletion of your account history, companion memory profiles, and messages.
- Right to Opt-Out: Restrict certain data processing activities.
To exercise any of these rights, please contact our Data Protection Officer directly via our Contact Page or by emailing privacy@candy.ai.
8. Changes to This Policy
We may update this Privacy Policy periodically to reflect technological improvements, new companion features, or regulatory amendments. Any revisions will be published immediately on this page with an updated "Last Updated" timestamp.