How we handle personal data at Candy AI

Consider the information in prompts, replies and calls

Look beyond your nickname and profile picture when deciding what to submit. Account details, character preferences, prompts, generated replies and calls can all contain personal data that the service processes.

Give a fictional role an invented background instead of real login credentials or financial information. Do not add identifiable details about another person when the exchange does not need them.

Allow for provider processing, review and training uses

We permit service-provider processing, review of flagged content and quality sampling under our privacy notice. De-identified interactions may also be used for research or training. Private chat is not a guarantee of end-to-end encryption that excludes provider access.

Replace an unnecessary sensitive detail with an ordinary invented one before sending your message. Do not use a character conversation to store secrets simply because the exchange appears private.

Separate account deletion from mandatory record retention

Request deletion for account data, bearing in mind the legal retention exceptions. We generally retain financial and transaction records for ten years. A thread becoming unavailable to you does not establish immediate erasure of all related records.

Before deleting the account, retain the receipts and transaction references needed for a possible billing question. Avoid keeping someone else's private material when you have no reason to retain it.

Tell us which personal data your request concerns

Contact us with the account or content reference and say what information you want located, corrected or removed. Keep the request specific, without including sensitive details unrelated to the personal data involved.

Check locally saved browser choices as well when using a shared device. Signing out changes account access; it is not the same as clearing that browser's stored site data.

Questions and answers

Is my conversation the same thing as a public profile?

No, the chat and the public character profile are distinct. Your conversation can still be processed and reviewed as described in our privacy notice.

Will deleting my account immediately remove transaction records?

Not necessarily. Legal obligations and transaction-retention requirements can continue after deletion. Retain any receipt you may need before removing the account.

Which sensitive details do not belong in roleplay?

Leave out passwords, recovery codes, complete payment details and other people's private information. Use invented details to support your fictional role instead.