Safety guide
Candy AI is a legitimate paid service run by EverAI Ltd., a company based in Malta, and Candy Shorts is part of it. Charges show up as “EverAI”, according to Candy’s help center (candy.ai’s FAQ calls it a neutral merchant name), and the official sites run in your browser with nothing to install. The real risks for viewers are lookalike sites, fake apps and “free Premium” downloads.
Affiliate links: we may earn a commission, at no cost to you. Disclosure
Updated
Prices checked on candy.ai on
At a glance
Per Candy help center (July–August 2026).
Candy AI is operated by EverAI Ltd., a company based in Malta, an EU member state. The same company runs candyshorts.com, the dedicated Shorts site, and the Shorts tab on candy.ai; both use one Candy account. Candy says it has 50 million users, its own figure that we can’t verify.
The 7 creator series feature licensed likenesses of adult performers, which Candy says are made in direct partnership with them and with their full consent. Everything else in the catalogue is AI-generated fiction. For our take on the service as a whole, read our review.
According to Candy’s help center, the charge appears as “EverAI”, the operator’s name. The FAQ on candy.ai says billing uses a neutral merchant name. Neither mentions Candy, Shorts or anything adult. Your bank may add a location or a reference code, so the exact line varies. Additional local taxes may apply.
Candy lists credit/debit cards, crypto, Apple Pay, Google Pay and bank transfer, depending on location. Two familiar options are missing from its list, which matters when a third-party site asks for them:
| Method | Listed by Candy | Note |
|---|---|---|
| Credit and debit cards | Yes | The only payments Candy’s refund rule covers |
| Apple Pay | Yes | Depends on your device and region |
| Google Pay | Yes | Depends on your device and region |
| Crypto | Yes | Outside the card-only refund rule |
| Bank transfer (such as Volt or Pix) | Yes | Offered in some countries only |
| PayPal | Not listed | Not on Candy’s list: be wary of “pay with PayPal” offers |
| Gift cards | Not listed | Not on the list either, and a classic scam request |
Using Candy means handing over some data, like any account-based service: your email and login, payment records (card details go into the checkout), your chats and generated images, and what you’ve unlocked. Candy says it is GDPR-compliant. Its operator is based in the EU, where the GDPR gives you the right to see, and to have erased, the personal data a company holds on you.
We haven’t audited Candy’s systems, so treat its privacy claims as Candy’s own. To delete your account and chats, look in your account settings and Candy’s help center for the current steps; if you can’t find an option, write to Candy support and ask for erasure under the GDPR.
Our guide to watching on your phone or TV has the setup steps for each device.
The official addresses are candy.ai and candyshorts.com. Before you log in or pay, check the address bar: whatever link you followed, ours included (it passes through a referral redirect), you should end up on one of those two. Warning signs:
The safe way in is always the website itself or the official web app, added to your home screen from the browser.
Plans renew automatically until you cancel. The path is My Profile → Settings → Unsubscribe (no pause option; tokens and content are kept after cancelling). The refund rule, per Candy’s help center, is strict: refunds can be requested within 24 hours of payment, only if 20 tokens or fewer were used (card payments). Unlocking two standard episodes (24 tokens) already rules a refund out, so don’t unlock anything in the first 24 hours if you might change your mind.
Source: Candy help center (July–August 2026). The numbers behind it are on our page about plans and refunds.
Candy AI and Candy Shorts are for adults only. Keep your account to yourself, and if other people use your devices, set up your phone’s content restrictions or a separate user profile.
All characters are fictional, AI-generated adults (creator series use licensed likenesses of adult performers).
The safest first step costs nothing. Episodes 1 and 2 of every series are free with a free account; these three are a good place to try the official player:
7 episodes · 2 free · 60 tokens to finish
A devout journalist is sent to cover a notorious rock star named Manalo, and the assignment shakes everything Isabella thought she knew about herself.
5 episodes · 2 free · 36 tokens to finish
As the newest player on a pro football team, you're singled out by the ice-cold coach, who happens to be married to the owner.
5 episodes · 2 free · 36 tokens to finish
Taken prisoner by Queen Veyra, Ethan was meant to be broken, but he starts changing the rules of her court instead.
Candy AI is a real, paid service operated by EverAI Ltd., a company based in Malta, and Candy Shorts is part of it. Candy says it has 50 million users, its own figure. The scams around it are third-party: lookalike sites, fake apps, “free Premium” offers and leak pages. Stick to candy.ai and candyshorts.com and you’re dealing with Candy itself.
According to Candy’s help center, charges appear as “EverAI”, the name of the company that runs Candy; the FAQ on candy.ai describes it as a neutral merchant name. The exact line depends on your bank and payment method, and some banks add a location or a reference code, so it won’t always look identical.
PayPal isn’t among the payment methods Candy’s help center lists. The listed options are credit and debit cards, crypto, Apple Pay, Google Pay and bank transfer (such as Volt or Pix), depending on your location. Gift cards aren’t listed either, so treat any site that asks for PayPal or gift-card payment “for Candy” with suspicion.
Candy says it is GDPR-compliant, and its billing uses a neutral merchant name. Like any account-based service it holds your email, payment records, chats and what you unlock, so privacy also depends on you: a strong password, a private window or the web app, and lock-screen previews turned off for its notifications.
You can ask for it. Candy says it complies with the GDPR, which gives users the right to have their personal data erased, and its operator, EverAI Ltd., is based in Malta, inside the EU. Check your account settings and Candy’s help center for the current steps; if you can’t find an option, contact Candy support and request deletion in writing.
candyshorts.com is Candy’s official Shorts site, run by the same company as candy.ai and using the same account and plans, so it’s as safe as candy.ai itself. The risk is lookalike addresses: check the domain before you log in or pay, and never enter your details on a page you reached through a “free episodes” or “leak” link.
The official websites run in your browser and don’t ask you to install anything, so candy.ai and candyshorts.com aren’t a malware risk in themselves. The danger is elsewhere: “Candy AI” APKs, mod apps, desktop downloads and leak pages from third parties. If something asks you to download a file to watch Candy Shorts, it isn’t Candy.
Rarely, by design. Candy’s help center says a refund can be requested within 24 hours of payment, only if you’ve used 20 tokens or fewer, and only for card payments. Unlocking two standard episodes already uses 24 tokens, so if you’re unsure, watch the free episodes first and unlock nothing until you’re certain.
Official site
candy.ai and candyshorts.com are the only official addresses. Episodes 1 and 2 of every series cost nothing with a free account.
Affiliate links: we may earn a commission, at no cost to you. Disclosure
Adults only · 18+
This site is for adults
Candy AI Shorts are adult, AI-generated video series. This independent guide is for viewers who are 18 or older (or the age of majority where they live).
We remember your answer on this device only.