Candy.ai
Candy.ai · Chat assistant · FR · candy.ai
Last verified 2026-09-16
Entry
services/candy-ai.yamlTraining on your data (default tier)
Interactions used to train AI models, including human review of de-identified conversations
Retention
Retained while the account exists and for a period after termination; log files deleted after 30 days
Data residency
Sharing may involve transfers outside the EU, including the United States; EU payment providers for European users
Vendor data-handling terms
Training on your data (default tier)
Interactions used to train AI models, including human review of de-identified conversations
“Improvement and Development of our Services and Technology; Research train and develop our AI models and moderation technologies; / prepare datasets for further training, which preparation may include human review of de-identified and/or anonymized interactions with AI Companions; and”
Retention
Retained while the account exists and for a period after termination; log files deleted after 30 days
“We retain your Personal Data for as long as your account is in existence or necessary to fulfill the purposes for which we collect it or as needed to provide you with the Services, except if required otherwise by law. / Log files are automatically deleted after 30 days”
Data residency
Sharing may involve transfers outside the EU, including the United States; EU payment providers for European users
“(Unless otherwise noted, sharing your information may entail transferring your data outside the European Union, including but not limited to the United States.)”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| candy.ai | app | observed |
Assessment
All accounts: high
Reasoning: A companion chat service where conversations are used for training and human review by design. It has no work purpose; its presence on a corporate network is a policy and HR matter before it is a data matter, and any conversation content is personal data of the employee retained beyond account closure.
Flags: No business use case · Human review of conversations · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and transfer terms verified against the Candy.ai privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.