Is Candy Shorts safe and legit? What we checked

Who is behind Candy AI

Candy AI is operated by EverAI Limited, a company based in Malta. That name is what you will see on your card statement after buying Premium or tokens, which is useful to know if you share a bank account or review your statements carefully.

What is legit and what is not

The shorts themselves are licensed content on Candy AI, including the star twins, which are AI likenesses that the performers agreed to lend. What is not legit is the cloud of pages around them: "leaked" full episodes, "free unlock" generators, APK apps and Telegram channels selling access. They are not run by Candy AI, and they are where most problems start. Our leaks page covers them in detail.

Simple ways to stay safe

• Only type your Candy AI password on candy.ai.
• Use a password you do not use anywhere else.
• Ignore sites that ask for your card to unlock "free" episodes.
• Do not install apps that claim to be Candy Shorts; the shorts play in the browser.
• Remember that the service is for adults only.

What we could not verify

We do not have access to Candy AI's internal security practices, and we cannot audit how the company stores data. We describe what any user can check: the company name, the billing name, the cancellation option and the prices. For anything else, Candy AI's own terms and privacy policy are the reference.

About this guide

This site is independent. We link to Candy AI with affiliate links, which may earn us a commission if you subscribe, at no extra cost to you. We do not collect payments, logins or personal data beyond what our privacy page describes.

Signs that a page is not Candy AI

Fake pages copy the Candy AI colours and name, so the address bar is the quickest check. The real service lives at candy.ai. Pages on other domains that show a Candy AI login box, ask for a card before showing you anything or promise "every episode unlocked" are not part of the service, however polished they look.

• A login form on a domain other than candy.ai.
• A countdown pushing you to pay within minutes.
• An app or file you must install before a video plays.
• A price that is much lower than the plans on our price page, or a payment by gift card or crypto.

Discretion on shared devices

Because the shorts play in the browser, a private or incognito window keeps them out of your history on a shared computer, and signing out at the end keeps your account closed. On a phone, a home-screen shortcut is visible to anyone who unlocks the device, so think about where you place it. Captions let you watch with the sound off.

On your bank statement, purchases appear as EverAI rather than Candy AI, which some users prefer and others find confusing when they review their spending later; it is worth remembering the name.

If something goes wrong

1. If you typed your Candy AI password on another site, change it on candy.ai straight away.
2. If an unknown site charged your card, contact your bank; Candy AI cannot refund payments it did not take.
3. If you want to stop Premium, cancel it in the Candy AI account settings; it can be done at any time.
4. If you installed an app that claimed to be Candy Shorts, uninstall it and check which permissions it was given.

Age and consent

Candy AI is for adults, and the account asks you to confirm your age before the Spicy shelf appears. The characters are presented as adults, and the star twins are licensed likenesses of performers who agreed to them. Keep the service away from shared family devices.