Start with the exact document or control that applies to the account today. Record the operator, date, data category, stated purpose, recipient, retention boundary and available control. If the source does not answer one of those fields, write unknown. The purpose of this page is not to turn a policy into a trust badge. It is to make the next decision smaller, dated and reversible.
If a service requires information that the intended use does not need, stop before creating the account and compare another option.
What to inspect before deciding
01use a separate email□
02read required fields□
03find the deletion route□
04check media permissions□
05set a sharing boundary□
06save the policy date□
Unknown stays unknown. Recheck before sharing.The six fields below are deliberately narrow. Check them against the current notice, account screen or regulator guidance rather than relying on a search snippet. Save the checked date and the URL because wording, ownership and controls can change.
use a separate email
Find the specific wording for use a separate email. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
read required fields
Find the specific wording for read required fields. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
find the deletion route
Find the specific wording for find the deletion route. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
check media permissions
Find the specific wording for check media permissions. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
set a sharing boundary
Find the specific wording for set a sharing boundary. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
save the policy date
Find the specific wording for save the policy date. Separate a vendor statement from an independently verified fact, note any regional condition, and avoid extending the claim beyond the product and date named by the source.
How to interpret a complete or incomplete card
A complete field means the source gives a usable answer; it does not mean the answer is favorable. A missing field is a decision constraint. Reduce the data you share, keep a permission off, delay payment, choose a different service or contact the operator through the official route. Do not fill a gap with marketing language from another page.
Compare like with like. A privacy notice, terms page, app permission and deletion control answer different questions. A strong account control cannot repair a vague collection purpose, and an encryption claim cannot explain retention. Keep each piece of evidence in its own column before reaching a conclusion.
Use low-risk fictional examples if a feature needs a prompt. Never upload a real person’s private image, reveal credentials or provoke harmful content merely to see what happens. This guide relies on public evidence and does not claim hands-on access to private account behavior.
What this page cannot promise
- It cannot certify that a provider, conversation or account is private or safe.
- It cannot prove unseen technical behavior from policy wording alone.
- It cannot replace legal advice, regulator guidance or emergency support.
- It does not convert a sponsored link into an endorsement or a product test.
Stop when the operator is unclear, the data requested exceeds the feature’s need, another person’s consent is missing, an adult boundary is ambiguous, or the exit route cannot be found. Preserve only the evidence you need and avoid creating additional sensitive copies.
A practical decision record
- Capture
Save the exact page, checked date and wording that supports the field.
- Classify
Label it vendor statement, account control, regulator guidance or independent standard.
- Constrain
Turn each unknown into a smaller permission, smaller disclosure or delayed purchase.
- Recheck
Review the evidence before sharing more data, renewing or changing the account.
Public evidence used for this question
- U.S. FTC consumer privacy guidance
Consumer steps for limiting exposure, protecting accounts and responding to privacy concerns.
government · checked September 23, 2026 - OWASP sensitive-information guidance
Security guidance for reducing sensitive-information disclosure and avoiding unnecessary secrets in prompts.
independent standard · checked September 23, 2026 - Evia AI companion privacy explainer
A plain-language explanation of storage, memory and deletion questions for companion users.
independent editorial · checked September 23, 2026
Inspect the current documents before you continue
Candy AI is a sponsored destination and a labeled vendor case study. Verify the live terms, privacy notice and controls for your own account and region.
Visit Candy AI — sponsored