Privacy policy

Version in force since 15 October 2026.

The short version: this is a static reference site with no accounts, no comment threads and no advertising network. There is nothing here to log into, so there is very little about you for us to hold. The sections below set out exactly what does exist.

1. What we do not collect

To be unambiguous about the things visitors to this kind of site usually worry about, Candy AAI Hub does not:

create user accounts or ask you to register;
run advertising tags, retargeting pixels or social media trackers;
build an advertising or interest profile about you;
sell, rent or trade visitor data to anyone, for any price;
set cookies for analytics or marketing purposes;
ask for your date of birth, your address or any payment details.

2. Server logs

The hosting platform that serves these pages keeps standard request logs, as practically every web server does. A log line can contain your IP address, the time of the request, the page or file requested, the referring page if your browser sent one, and your browser's user-agent string. These records exist so the host can serve traffic, detect abuse and keep the site available. We read them only in aggregate, and we do not try to resolve a log line to a named individual. Retention is set by the host's own schedule, which is a matter of weeks rather than years.

3. Cookies and local storage

This site sets no cookies of its own. The tab layout and the collapsible navigation on these pages run in your browser without storing anything, so no consent banner is needed and clearing your browser data costs you nothing here. If a future version introduces anything that does store data on your device, this section will say so before it ships.

4. Email you send us

If you write to one of the addresses on the contact page, we hold your message, your address and anything you chose to include, for as long as it takes to deal with the matter and to keep a record of corrections we have made. The lawful basis is our legitimate interest in answering correspondence. We do not add correspondents to a mailing list, because we do not operate one. Unsolicited attachments are deleted without being opened.

Published reader reviews show a first name and an initial together with a billing term. If you ask us to remove or anonymise a review you submitted, we do it; email addresses are never published.

5. Outbound clicks

The buttons on this site open the Candy AI platform in a new tab. When that happens, the destination receives the technical information any website receives from a visiting browser, and it may record that the visit originated from a partner link so that a commission can be attributed. That record identifies the referring site, not you by name. From the moment the new tab loads, the destination's own privacy policy and cookie practices govern what happens, and we have no visibility into your activity there, your account or your payments. Our links are opened with noopener and noreferrer, so the new tab cannot reach back into this page.

6. Hosting and transfers

The site is served as static files from a content delivery network, which means copies of these pages sit on servers in several countries and you are served from a nearby one. Processing of the request logs described above may therefore take place outside your own country, including outside the European Economic Area, under the host's contractual safeguards. No third party receives visitor data from us for its own purposes.

7. Security

Pages are delivered over HTTPS and the site sends a strict set of security headers, including a content security policy and a referrer policy. Nothing is collected through a form on this site, so there is no submitted-data store to breach. Email, by its nature, is not a confidential channel: please do not send account numbers, passwords or payment details to us, and do not share them inside conversations on the platform either.

8. Children

This site concerns an adults-only service and is intended for readers aged 18 or over, or the legal adult age in their jurisdiction. It is not directed at children and we do not knowingly hold information about anyone under that age. If you believe a child has sent us an email, tell us and we will delete it.

9. Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or erased, to object to or restrict our processing, to receive a copy of it, and to complain to your national data protection authority. Because we hold almost nothing beyond correspondence, most requests resolve in a single reply. Write to hello@candy-aai.com and we will respond within one month. We do not charge for a first request, and we may ask a question to confirm you are the person whose correspondence is concerned.

10. Changes to this policy

If our practices change, this page changes with them and the date at the top is updated. Material changes will be summarised in the first paragraph rather than buried in a clause. The terms covering your use of the site itself, including our commercial disclosure, are set out in the legal notice.