User confidentiality in Candy AI