Candy AI 2026 review: companion chat, Creator Lab and paid-path checks

Author: NeonCritic Editorial · Desk check 11 September 2026.

Candy AI in 2026 is still a multimodal companion product — text chat, images, video and a public character-creation lab — but a first paid session is decided by the legal hub, the payment clauses and the cancellation path, not by a character card. This review is the companion to NeonCritic’s policy-first Candy service review: it stays on the documented chat, Create Character and paid-path checks a new adult account actually faces.

What first-party pages say the product is

Candy.ai, operated by EverAI Limited (Malta company C107181, Santa Venera), describes itself as an online chat application that generates fictional AI characters a user can message, plus other media such as AI-generated images, videos and voice notes. The public homepage and the Terms of Service (date of revision 17 August 2026 on the copy retrieved for this snapshot) both state that a user may start from pre-made characters or generate a character by choosing attributes. Navigation on the legal hub and site chrome includes Chat, Collection, Generate Image, Create Character, My AI and Private Content. That Create Character / “Create My AI Girlfriend” builder is the creation lab this review means: a first-party customization surface, not a separate undocumented studio.

The same TOS is explicit that the service is entertainment only, that exchanges with AI characters are fictional, and that generated output can be inaccurate. Community Guidelines (revised 6 March 2026 on the retrieved copy) and the Underage Policy (revised 10 October 2025 on the retrieved copy) restrict the service to users who are at least 18 or the legal age where they are located. This review is for adult readers only. It does not treat marketing language about privacy, “uncensored” output or emotional support as a documented guarantee; the TOS tells readers the opposite on support and on fictional exchanges. Homepage marketing that claims end-to-end encryption or that data is never shared or sold is not the legal-hub record: the Privacy Notice documents sharing with third-party LLM providers.

For the account-and-policy layer in more detail, use the existing desk review at Candy AI review: account boundaries, policy checks and first-session fit. This page does not repeat that article. It asks what a first paid path looks like once the legal index is already in view.

Companion chat and the creation lab

A first session typically presents two doors: talk to a listed character, or open Create Character and set appearance, personality and related attributes. First-party copy says more detailed companions consume more tokens. That is a spend warning, not a quality score. The TOS also says EverAI may de-list characters and modify or delete features at any time, and that users are not refunded for those changes. A creation-lab session is therefore a poor place to assume a character, a look or a voice will remain available for the life of a plan.

Chat is not a sealed private room. The TOS and Community Guidelines state that conversations are generally treated as private, while moderation controls may flag, review and act on content, including account termination and reporting to authorities. The Privacy Notice (revised 30 July 2026 on the retrieved copy) lists prompts and outputs among content data, describes human review of flagged material, and states that information associated with interactions may be aggregated, anonymized or de-identified to train and develop AI models and moderation tools. Third-party LLM providers may receive message content. Anyone who needs a workspace that the operator cannot review should pause here. That claim is not in the first-party record.

Image, video and voice features sit on the same paid-path problem as chat. The TOS lists them as part of the service and ties extended features such as image generation or voice notes to tokens. The public homepage describes multimodal replies. None of that is a promise that a given prompt will produce a given still or clip. Section 11 of the TOS disclaims accuracy, originality and a perfect match to preferences, and says moderation may alter a request before output is generated.

Paid-path checks: what the TOS actually documents

This desk does not invent a current price, a regional trial, or a token balance. Candy’s own Terms, in the Payments and Autorenewal and Fulfillment sections, document the shape of the paid path a reader should verify live:

Paid access may be a subscription, token purchases, or other paid-for access offered from time to time. The TOS describes a limited free-user message allowance, then paid use. Subscriptions may be billed monthly, quarterly or annually. As part of a paid subscription, the TOS describes access to messaging plus a monthly token allotment disclosed at checkout, used for extended features. Tokens are not transferable, not cash, and, on the TOS wording retrieved here, remaining tokens expire when a subscription billing period ends after cancellation. Autorenewal is the default; cancellation is described under Settings / Unsubscribe, with access continuing to the end of the current period. Plan changes take effect at the next cycle. Chargebacks and refunds are treated as immediate cancellation of premium access.

Refund language is jurisdiction-specific. Outside the EU/UK clauses, the retrieved TOS describes a short post-payment window and usage caps that can block a refund; card purchases are the refundable channel named there. EU and UK consumers have a documented 14-day withdrawal on the initial purchase, with a prorated deduction for consumed service, and that withdrawal is stated not to apply to renewal periods. Users will not be refunded for moderation removals or for feature deletions. Read the live TOS and the checkout screen together. If they disagree, the screen in front of the reader is the one that will be charged.

Payment processors named in the Privacy Notice include card and bank paths and an additional processor named in that table. Discreet billing is marketing language on the homepage. The privacy table is the source for what payment data is processed. Do not assume a bank statement label from an older blog post.

Legal hub, cookies and operator contact

Candy publishes a single legal index at candy.ai/legal-information. The retrieved page links Terms of Service, Privacy Notice, Cookies Notice, Underage Policy, Content Removal, Blocked Content, DMCA, Complaint, 18 U.S.C. 2257 exemption, Community Guidelines and Affiliate Terms. That is the right starting URL. Cookies Notice (revised 2 February 2026 on the retrieved copy) describes essential, analytics and targeting cookies, a consent banner, and third-party tools including Google Analytics and Meta-related targeting. A first session should set cookie preferences before creating an account on a shared device.

Support is documented as in-product report controls, a Contact Us area, and [email protected]. A Data Protection Officer is listed at [email protected], with a UK representative named in the Privacy Notice. Australian readers are pointed to eSafety in the TOS. Candy also states that users may not access the service from China or Singapore. Geographic blocks are a first-session check, not a trivia line.

Who it fits, and who should wait

Candy is a reasonable shortlist for an adult reader who wants a companion-chat product with a documented character-creation lab and a published subscription-or-token paid path, and who is willing to accept autorenewal, token expiry on cancel, and operator-side moderation plus model-training language. It is a poor fit for anyone who needs a frozen price, a no-moderation private log, a guaranteed image or video result, or a substitute for clinical or legal advice.

If the live question is OurDream’s generate-and-coins model versus Candy’s companion-and-token model, use the comparison linked below. Do not mix the two legal hubs.

Reader checklist before an account or payment decision

• Open the legal-information hub and read current Terms, Privacy Notice, Cookies Notice, Community Guidelines and Underage Policy.
• Confirm the 18+ (or local age of majority) rule and that the service is available in the reader’s country.
• On Create Character or any listed companion, note that characters and features can be removed without refund under the TOS.
• At checkout, record billing interval, autorenewal, token allotment shown on that screen, and the Settings / Unsubscribe path.
• Read refund and withdrawal clauses for the reader’s jurisdiction before paying, including token-expiry-on-cancel language.
• Locate [email protected], in-product report buttons and cookie controls; keep prompts free of addresses, payment data and identity documents.

Primary sources and checked date

All policy and service-surface statements were checked on 4 September 2026. TOS date of revision remains 17 August 2026; Privacy Notice 30 July 2026; Community Guidelines 6 March 2026. A later first-party record supersedes this snapshot.

• — Candy AI / EverAI Limited
• Legal information hub — Candy AI
• Terms of Service — Candy AI (retrieved date of revision 17 August 2026)
• Privacy Notice — Candy AI (retrieved date of revision 30 July 2026)
• Cookies Notice — Candy AI (retrieved date of revision 2 February 2026)
• Community Guidelines — Candy AI (retrieved date of revision 6 March 2026)
• Underage Policy — Candy AI (retrieved date of revision 10 October 2025)

Cons / limitations

• On the retrieved Terms, remaining tokens expire when a canceled subscription billing period ends, so unused image or voice spend can disappear even when Settings / Unsubscribe works.
• EverAI may de-list characters and modify or delete features at any time without refund, which makes a Create Character session a poor place to assume a look or a voice will last for the life of a plan.
• Chat is not a sealed private room: the Privacy Notice lists prompts and outputs among content data, describes human review of flagged material, and states that third-party LLM providers may receive message content.

Desk metrics (11 September 2026)

Legal index opened: candy.ai/legal-information. Snapshot policies: Terms of Service (revision 17 August 2026 on the retrieved copy), Privacy Notice (30 July 2026), Cookies Notice (2 February 2026), Community Guidelines (6 March 2026), Underage Policy (10 October 2025). Original check 4 September 2026; desk re-check 11 September 2026. Operator named: EverAI Limited, Malta C107181. Account was not paid. No USD price recorded. Time-to-first useful loop is the time needed to open that legal index, then Create Character or a listed companion, then checkout for interval, autorenewal, and token allotment. Cancel versus delete: unsubscribe is described under Settings / Unsubscribe with access to period end; deletion and retention still need a live settings walk. Geographic block named in TOS for China and Singapore is a first-session check.

• Time to locate Terms, storefront, or legal hub from the public entry: 6 min.
• Time-to-first useful loop (cancel control or checkout labels in view): 10 min.

FAQ

Is Candy a token product or a subscription?

The retrieved Terms describe both: paid access may be a subscription, token purchases, or other paid-for access. Read the screen in front of you.

Does homepage encryption copy override the Privacy Notice?

No. The Privacy Notice is the document this desk uses for sharing with third-party LLM providers.

What does the Hub link do?

It is the site-owned Candy AI hop. It does not freeze a price and it does not waive autorenewal or token expiry language.

Try Candy AI via NeonCritic