Where Is Candy AI Based? A Comprehensive Guide
Most people meet Candy AI through a chat window. You pick a companion, you start talking, and the location of the company never crosses your mind. Then one day you wonder who is actually on the other side of that server, which country holds your data, and which court would hear a complaint if something went wrong.
That curiosity is healthy. An AI companion platform collects your email, your payment details, and some very personal conversations. Knowing where the business sits tells you which privacy law protects you and how seriously the company must treat your rights.
The good news is that Candy AI does not hide this information. The company publishes a street address, a company registration number, and a named legal entity across its terms and privacy pages. That is more transparency than many competitors in this space offer.
In a Nutshell
- Candy AI is based in Malta. The platform is owned and operated by EverAI Limited, a company incorporated in the Republic of Malta. The registered address listed in the official documents is 56 Central Business Centre, Triq Is Soll, Santa Venera SVR 1833, Malta.
- The company registration number is C107181. EverAI Limited appears in the Malta Business Registry under that number. A public registration number is a strong sign of a real, traceable business rather than an anonymous website.
- The team works remotely across the globe. Malta is the legal and administrative home. The staff describe themselves as a fully remote group, so engineers, moderators, and support agents live in many countries.
- Maltese law governs the terms. Disputes go to the courts of the Republic of Malta. Because Malta is an EU member state, the GDPR applies to the platform and gives users real privacy rights.
- EU and UK users get extra protection. Residents of those regions receive a fourteen day withdrawal right on a first purchase, which is far more generous than the standard twenty four hour refund window.
- Candy AI blocks some regions. The terms state that users may not access the service from China or Singapore, and technical measures enforce that rule.
Where Is Candy AI Based? The Direct Answer
Candy AI is based in Malta, a small island nation in the Mediterranean Sea that belongs to the European Union. The platform is owned and operated by EverAI Limited, which is incorporated in the Republic of Malta.
The address published in the official legal documents is 56 Central Business Centre, Triq Is Soll, Santa Venera SVR 1833, Malta. Santa Venera is a town in the central district of the island, close to the capital city of Valletta.
That address appears in three separate places. It shows up in the terms of service, in the privacy notice, and in the cookies notice. The same address also appears on the model withdrawal form that EU customers use to cancel a first purchase.
Consistency across documents matters. When a company publishes the same registered address in every legal file, it usually means the entity is real and properly filed with a national registry.
The company registration number is C107181 in the Malta Business Registry. Anyone can look that number up through official channels, which gives the business a verifiable paper trail.
So the simple answer is Malta. The longer answer involves a remote workforce, international payment partners, and hosting providers spread across several continents, which the next sections explain in plain language.
EverAI Limited: The Parent Company Behind Candy AI
EverAI Limited is the legal owner of Candy AI. The name appears at the top of the terms of service, where the company states that the services are owned and operated by EverAI Limited.
EverAI describes itself as a builder of AI companionship products. Candy AI is the flagship product, and the company positions it as the largest platform of its kind by user base.
The company also promotes an internal content moderation system of its own design. That tool scans conversations and generated media for banned content, and human reviewers step in when something is flagged.
EverAI has grown quickly since launch. Public company profiles place the headcount in the fifty to two hundred range, which is large for a business of this age but small compared to mainstream tech firms.
The structure is simple. One Maltese company holds the intellectual property, the contracts, and the user relationships, while the staff work from home offices around the world.
This matters for you as a user. Your agreement is with EverAI Limited, not with an app store, a reseller, or a local branch office in your own country.
If you ever need to send a formal letter, the Malta address is the correct destination. For everyday questions, email support is faster and the company answers from the same legal entity.
Why Malta? The Reasons Behind the Location Choice
Malta attracts digital companies for several practical reasons. The island has built a reputation as a base for gaming, fintech, blockchain, and online entertainment businesses over the last two decades.
The first reason is EU membership. A Maltese company can serve customers across the European single market without setting up separate entities in each country.
The second reason is language. English is an official language of Malta, so contracts, court filings, and business paperwork all work in English without translation costs.
The third reason is corporate tax structure. Malta operates a refund system for shareholders that lowers the effective rate for many international groups, which makes it attractive for digital businesses with global revenue.
The fourth reason is regulatory familiarity with adult and gaming sectors. Maltese authorities and service providers already understand compliance for age restricted products, so banking and legal support are easier to find.
None of this is unusual or secretive. Thousands of legitimate companies use Malta for the same reasons, including many household names in online gaming.
For users, the practical effect is positive. An EU base means strict privacy law, a named data protection officer, and a real regulator you can complain to if your rights are ignored.
The Santa Venera Office Address Explained
The published address sits in a business centre in Santa Venera, a town in the middle of Malta. Business centres like this host registered offices for many companies at once.
That arrangement is common and completely normal for digital first businesses. The registered office is the official point of contact for legal notices, tax filings, and regulatory mail.
It does not mean hundreds of staff walk through that door each morning. EverAI runs on a remote model, so the physical office handles administration rather than daily product work.
Think of it as the company letterbox and legal anchor. Court papers, government notices, and formal consumer requests all go to that single verified location.
Santa Venera itself is a short drive from Valletta and close to the main commercial corridor of the island. The location gives easy access to banks, law firms, and accountants.
Users sometimes expect a glossy headquarters photo when they look up a tech company. Modern remote businesses rarely have one, and the lack of a large campus says nothing about product quality or financial health.
What matters is that the address is real, published, and matched to a registration number. You can write to it, and the company has committed in writing to accept correspondence there.
Who Founded Candy AI and Who Leads It Now
The leadership story adds useful context to the location question. Press coverage has identified Alexis Soulopoulos as chief executive and a co founder of EverAI, the company behind Candy AI.
Soulopoulos is an Australian technology entrepreneur. He is widely known for leading Mad Paws, a pet services marketplace listed on the Australian Securities Exchange.
That background surprised many readers when reports connected a mainstream listed company executive to an AI companion platform. The coverage treated it as a notable career crossover rather than a scandal.
Early company records were vague. Some startup databases still show placeholder founder names, which created confusion about who actually built the business.
Today the picture is clearer. EverAI promotes an executive team with experience scaling consumer products to millions of users, and it recruits openly on professional networks.
This combination explains the structure well. An Australian led team can build a product from anywhere, incorporate in Malta for EU market access, and hire talent across time zones.
For you as a customer, leadership visibility is a trust signal. A platform with named executives and public hiring pages behaves differently from an anonymous site with no accountable people behind it.
Which Laws Govern Candy AI Users
The terms of service answer this plainly. The agreement is governed by the laws of the Republic of Malta, without regard to conflict of law rules, and regardless of where you live.
Disputes go to the courts of the Republic of Malta. That clause applies to questions about the existence, validity, or termination of the agreement.
This is standard for international digital services. Companies choose one legal home so they do not have to defend claims in dozens of different court systems.
Your local consumer law still has force in many cases. Mandatory consumer protection rules in the EU and UK cannot be removed by a choice of law clause, and the terms acknowledge special treatment for those users.
The English version of the terms controls. Translated versions exist for convenience, but any conflict is resolved using the English text.
The platform is strictly for adults. The terms require users to be at least eighteen or the local age of majority, whichever is higher, and the company runs age checks in certain regions.
Commercial use is banned. The licence covers personal entertainment only, and reselling access, scraping outputs, or training other models on the content all breach the agreement.
How the Malta Base Shapes Your Privacy Rights
Because EverAI sits inside the EU, the General Data Protection Regulation applies directly. The privacy notice names EverAI Limited as the data controller for the service.
The company has appointed a Data Protection Officer, which the GDPR requires for organisations handling large volumes of sensitive processing. A dedicated email address reaches that officer.
EverAI also appointed a UK representative, a legal requirement for companies serving British users after Brexit. A London based privacy services firm fills that role.
Your listed rights are the full GDPR set. They include access, correction, deletion, restriction, portability, objection, and withdrawal of consent at any time.
Retention periods are spelled out rather than left vague. Account data is generally kept for up to three years after your last activity, financial records for ten years under tax law, and technical log files are deleted after thirty days.
The notice is honest about one point many users miss. Content you type can be used to train and improve models, and human reviewers may see de identified material during quality checks.
You can lodge a complaint with your own national data protection authority. That option exists in every EU country and in the UK, and it costs nothing to use.
Data Storage, Transfers, and the Global Side of the Business
A Malta registration does not mean every byte of data stays on the island. The privacy notice states clearly that sharing information may involve transfers outside the European Union, including to the United States.
Hosting providers, moderation tool vendors, email marketing platforms, and third party language model providers all appear in the list of recipient categories. Some of those partners operate from North America.
One line deserves special attention. The notice warns that third party model providers may receive the content of your chat messages, which is important if you share anything personal.
The company says it uses legal safeguards for those transfers. You have the right to request a copy of the transfer mechanism, redacted of unrelated commercial terms.
Payment data is treated separately. The notice says payment service providers for European users are based in the EU, which keeps card details closer to home for that group.
This layered setup is normal for a modern AI product. No company of this size builds its own global data centres, so partners fill the gaps.
The practical advice stays simple. Treat any AI chat as a service that stores text, avoid sharing identity documents or financial details inside conversations, and use the deletion right when you no longer want the history.
Payments, Billing, and the Companies That Process Your Money
The privacy notice lists the payment partners by name, which is rare and useful. Card payments run through processors including Emerchantpay, TrustPay, and UpGate, while bank transfers use Volt and crypto payments use Coingate.
Each partner receives a defined data set. Card processors see your name, email, card brand, last four digits, amount, currency, and IP address.
Subscriptions renew automatically at the end of each billing period. The charge lands on the first day of the renewed term unless you cancel beforehand.
The backup payment rule catches people out. If your default card fails, you authorise the company to charge a saved backup method for the same amount.
Cancellation happens inside your account settings. Access continues until the end of the paid period, and the service then drops back to the free version.
Unused tokens expire when a subscription ends. They do not roll over into a new subscription, so spending them before cancelling is sensible.
Pricing has hovered around fourteen dollars per month for the base plan, often with a discounted first month, plus separate token packs for images and voice features. Heavy users of media generation usually spend more than the headline figure, so budget for the extras.
Refunds and Consumer Rights by Region
Here the Malta base genuinely helps some users. The standard refund policy is tight, but EU and UK residents receive a stronger statutory right.
Under the general rule, you have twenty four hours after payment to request a refund. The request is denied if you have already used more than twenty tokens.
Token purchases follow the same twenty four hour clock. Once the tokens are spent, the refund door closes.
The EU and UK rule is different. Residents of those regions have fourteen days from the initial purchase to withdraw from the contract without giving any reason.
The refund covers amounts paid, less a prorated deduction for services already consumed. The company must process it within fourteen days of being told.
Renewals are excluded. The withdrawal right applies to the first purchase only, so later billing cycles fall under the shorter policy.
Moderation actions carry no refund. If content is removed or an account is restricted for breaking the rules, the money is not returned.
Chargebacks trigger immediate cancellation. Filing one wipes access to premium features and any remaining tokens at once, so contacting support first is the better route.
Who Can and Cannot Use Candy AI
Availability is global with a few firm exceptions. The terms state that you may not access or attempt to access the services from China or Singapore.
The company says it uses technical measures to enforce that restriction. Trying to evade those measures is itself a policy violation.
Age rules are strict everywhere. Nobody under eighteen may use the platform, and the company will delete data and block accounts if it learns an underage person signed up.
Age verification is expanding. The privacy notice mentions third party age estimation and identity verification providers, applied depending on your location and local law.
Several countries now require verification for adult content, and the platform adapts to those rules rather than withdrawing from the markets.
Australian users receive specific guidance. The terms point them to the national online safety regulator and explain how to report harmful content.
Commercial resale is banned worldwide. Accounts are personal, non transferable, and may not be shared or sold.
One more rule surprises creators. Using outputs to train, fine tune, or distil other AI models is explicitly prohibited, which protects the company and limits how you may reuse generated media.
Pros and Cons of Candy AI Being Based in Malta
Every location brings trade offs. Here is a balanced view of what the Maltese base means for you.
Pros
- Full GDPR coverage applies because Malta is an EU member state, giving you access, deletion, and portability rights that are legally enforceable rather than optional promises.
- A verifiable company identity exists, with a named entity, a street address, and a public registry number that anyone can check independently.
- A fourteen day withdrawal right protects EU and UK customers on a first purchase, which is far better than the standard twenty four hour refund window.
- A Data Protection Officer and a UK representative are appointed, so there are named contacts for privacy issues instead of a generic inbox.
- English language documents are the controlling versions, which removes translation ambiguity from the contract.
- Named payment processors are published in the privacy notice, so you know exactly which companies touch your card details.
Cons
- Legal disputes go to Maltese courts, which is impractical and expensive for a user living in another continent.
- Data leaves the EU for hosting, moderation, and model providers, including transfers to the United States.
- Chat content may reach third party model providers, which reduces the privacy of personal conversations.
- The content licence is very broad, covering perpetual, sub licensable, commercial use of your inputs and outputs.
- No physical support office exists to visit, since the team is fully remote and the address is an administrative base.
- Access is blocked in some countries, so travellers to those regions lose service without warning.
How to Contact the Company
Support runs through email and in product tools. The published support address is a dedicated mail domain used for refunds, complaints, and general questions.
Reports about content can be filed inside the product. Report buttons sit next to images and text, which is the fastest route for moderation issues.
Privacy requests have their own path. You can email the privacy team or write to the Malta address, and the company commits to respond within one month.
Complex requests may take longer. The notice allows extra time for unusual cases, but it promises to tell you if that happens.
The Data Protection Officer has a separate email address. Use that one for formal GDPR matters rather than billing questions.
UK users can go through the appointed representative in London. That option exists specifically for British residents who prefer a domestic contact point.
Formal legal notices belong at the Santa Venera address. The model withdrawal form in the terms uses that address for cancellations made on paper.
For most people, the in app help area solves the problem quickly. Escalate to the written channels only when the first response does not resolve your issue.
Final Thoughts on Candy AI and Its Maltese Home
Candy AI is based in Malta, operated by EverAI Limited from a registered office in Santa Venera, with a public registration number anyone can verify. That is a clear and checkable answer.
The location brings real advantages. EU membership means GDPR rights, a named data protection officer, a withdrawal period for European and British buyers, and a regulator that takes complaints seriously.
It also brings limits. Court disputes point to Malta, data travels outside the EU for hosting and model work, and the content licence is wide enough to cover training and commercial use.
Transparency is the strongest point here. Many AI companion sites hide behind blank contact pages, while this one names its entity, its address, its payment partners, and its retention periods.
Treat the platform as entertainment, which is exactly how the terms describe it. The conversations are fictional, the characters are software, and the company says plainly that it is not a substitute for professional support.
Use the practical protections available to you. Cancel through settings rather than chargebacks, spend tokens before a subscription lapses, keep personal identifiers out of chats, and use the deletion right when you are done.
With those habits in place, knowing the company sits in Malta turns from trivia into something genuinely useful.
Frequently Asked Questions
Where exactly is Candy AI located?
Candy AI is located in Malta. The operating company, EverAI Limited, lists its address as 56 Central Business Centre, Triq Is Soll, Santa Venera SVR 1833, Malta, and it is registered with the Malta Business Registry under number C107181.
Who owns Candy AI?
EverAI Limited owns and operates the platform. The company is incorporated in the Republic of Malta and builds AI companionship products, with Candy AI as its flagship service.
Is Candy AI an American company?
No. The legal entity is Maltese, not American. Some service providers and partners are based in the United States, and data may be transferred there, but the owning company sits in the European Union.
Who is the CEO of Candy AI?
Press reports have named Alexis Soulopoulos as chief executive and co founder of EverAI, the parent company. He is an Australian entrepreneur previously known for leading a listed pet services marketplace.
Does Candy AI follow GDPR?
Yes. As an EU based controller, EverAI applies the GDPR, lists lawful bases for each processing purpose, appoints a data protection officer, and offers access, deletion, portability, and objection rights.
Which law applies if I have a dispute?
Maltese law governs the terms of service, and disputes are referred to the courts of the Republic of Malta. Mandatory consumer protections in your own country may still apply alongside that clause.
Can I use Candy AI from any country?
Almost anywhere, with exceptions. The terms prohibit access from China and Singapore, and technical measures enforce that restriction. You must also be at least eighteen or the local age of majority.
Does Candy AI have a physical office I can visit?
The Santa Venera address is a registered office used for legal and administrative purposes. The team works remotely, so there is no public walk in support location, and email is the correct channel for help.
How do I get a refund from Candy AI?
Standard requests must be made within twenty four hours of payment, and they are refused once tokens are used. EU and UK residents have fourteen days to withdraw from a first purchase, with a prorated deduction for services already used.
Is my chat data stored in Malta?
Not necessarily. The company is based in Malta, but hosting, moderation, and model providers may process data elsewhere, including the United States. Safeguards apply to those transfers, and you can request a copy of them.
Hello everyone my name is Alenya and i am a gadget discovering Enthusiast 🐻🐻
