The question usually comes up at checkout. A series has hooked you, episode 3 wants tokens, and a payment form is open. Before typing in card details, it makes sense to know who runs the service and which rules apply.
Who operates Candy.ai
Candy Shorts is not a standalone app. It is the series section of Candy.ai, and the Candy.ai Terms of Service, in their September 22, 2026 revision, identify the operator as EverAI Limited, which is based in Malta. A named business that answers for payments, policies and complaints is the first thing that separates a real service from a throwaway site.
Candy.ai publishes its legal documents together on one page. Grouped by topic, they cover:
- Money and disputes: the Terms of Service, the Complaint Policy and the Affiliate Terms
- Your data: the Privacy Notice and the Cookies Notice
- Content rules: the Community Guidelines, the Blocked Content Policy and the Underage Policy
- Rights and takedowns: the Content Removal Policy, the DMCA Policy and an 18 U.S.C. 2257 exemption notice
The Complaint Policy, dated February 14, 2025, promises a reply confirming receipt inside 24 hours and a resolution inside seven calendar days.
A note on this page: Candy Shorts Episodes is independent and not owned, sponsored or reviewed by Candy.ai or EverAI Limited, but our buttons to Candy.ai are affiliate links. Read the source documents rather than trusting any summary, ours included. And "legit" describes the operator, not the content; for that, see our guide on whether the series are porn.
Billing, canceling and refunds
Expect the name EverAI on your bank statement; neither Candy.ai nor Candy Shorts appears there. Local taxes can apply on top. Every plan renews by itself at its current price and term, and you may cancel at any time in your account settings, so note the renewal date the day you subscribe.
Refunds are narrower. The refund clause, numbered 10.4 in the Terms of Service, covers card payments only. Buyers based outside the EU and UK get a one-day window, which closes early once they spend over 20 tokens. EU and UK buyers can withdraw from their first purchase within 14 days, with a deduction for anything already used. Renewals never qualify. Plan prices are on our pricing page.
Privacy and what happens in the chat
What Candy.ai collects, and why, is set out in its Privacy Notice and Cookies Notice. Read those directly before you start chatting, because any summary can go stale the moment a notice changes.
A few related points sit elsewhere. Candy.ai's Help Center says that watching Shorts leaves your chat history untouched, and the invitation to message a series' main character after an episode is optional. The Community Guidelines mention trust and safety checks and penalties up to and including account closure, so treat a chat as part of a company's product rather than a private journal.
If you request a takedown, the Content Removal Policy promises confidential handling, although Candy.ai may ask you to prove your identity first.
Age limits and banned content
Candy.ai is for adults only. Its Underage Policy, revised October 10, 2025, sets the minimum age at 18, and an age gate asks every visitor to confirm it. That check is self-declared, so think about who else can pick up your phone or tablet. The 2257 exemption notice states that the content is entirely AI-generated and that its production uses no real people.
The Blocked Content Policy, updated July 30, 2026, prohibits illegal material, deepfakes, anything that resembles minors, child exploitation (which Candy.ai says it reports to NCMEC), violence or self-harm, hateful content, deceptive impersonation of real people, intimate images shared without consent, and anything that breaches privacy or copyright. The Community Guidelines also bar dodging moderation and copying site content elsewhere without written consent.
Content that looks like you or another real person can be reported through Contact Us or the support email, and it is removed once verified. The exception is a known person who consented and licensed a digital version of themselves. That arrangement is behind the creator twins: Sophie Dee, for example, licensed her twin for Under Her Watch and did not perform in it.
Where the real risks are
Most problems begin away from the official site. Pages selling "full episodes", demanding a download or steering you to a group chat are unrelated to Candy.ai, and its rules offer no protection there. The official social accounts all use the handle trycandyai. The Candy.ai app is a home-screen shortcut, never an installer, so treat any downloadable "app" as a warning sign. Our leaked episodes guide walks through these traps.
The other risk is what you type. The Terms of Service treat chats as fiction, but your details are real, so keep your full name, address, employer, card numbers and face photos out of every conversation. Settle that rule before your first message; even a free account can send five.
The verdict: Candy Shorts is legit, with a named operator, an 18+ gate and published rules on payments, content and removals. You can test it without paying, since every non-Spicy series opens two episodes on a free account. For a wider look at the platform, read our Candy AI review.