Why did Character AI add age verification in the first place?

It wasn't voluntary — Character AI implemented age assurance specifically to comply with Australia's Basic Online Safety Expectations, alongside restrictions on open-ended companion chat and real-time sentiment analysis, according to the eSafety Commissioner's findings . The UK's Online Safety Act and California's SB 243 added legal mandates, and roughly half of U.S. states now have laws requiring platforms to block underage users.

Isn't a simple "Are you 18?" checkbox enough to keep kids out?

No — legal analysts are blunt that "simply ticking a box confirming that a user is over 18 won't do," and regulators increasingly expect ID-based or persistent verification, per NYU Stern's legal analysis . Australia's regulator found that 79% of children aged 10–17 have used an AI companion, yet none of the four companion services examined had robust age assurance during the reporting period.

Does age verification mean I have to hand over my ID just to chat?

It shouldn't have to. The European Data Protection Board requires age assurance to be "the least intrusive possible," and platforms like FlirtAlly apply that by keeping the default PG/Flirt experience open with no ID check — verification is only required when a member opts into the 18+ Spicy tier. Discord similarly estimates over 90% of its users will never need to verify age beyond existing internal safety systems.

What are the privacy risks of ID-based age verification?

They're real: roughly 70,000 users had ID images exposed when a third-party verification service was compromised, and one major vendor can retain adult verification data for up to three years. That's why scoping matters — verifying only adults who opt into adult content, rather than collecting IDs from everyone, is the closest thing to the "least intrusive possible" standard regulators demand.

Could AI companions be banned for minors entirely in the US?

Possibly — the proposed federal GUARD Act would ban AI companions for minors outright , require age verification with criminal penalties for non-compliance, and mandate that chatbots disclose they're artificial at the start of conversations and every 30 minutes. Even if it doesn't pass, roughly half of U.S. states already have laws enacted or advancing to block underage users.

Why Does Character AI Have Age Verification? Explained

Q: Are kids actually using AI companion apps, or is this a hypothetical risk?

The exposure is real and at scale: Australia's eSafety regulator found 79% of children aged 10–17 (roughly two million kids) have used an AI companion or assistant, with 20% of those using one daily. The consequences have already reached courtrooms, including parent lawsuits alleging chatbots engaged in sexual behavior with children.

The Pressure Behind the Age Gate: Regulators, Lawsuits, and Real Harm

Character AI's age gate didn't appear because the company woke up one morning feeling cautious. It appeared because regulators on three continents, grieving parents in courtrooms, and a U.S. Senate hearing room all converged on the same demand at once.

The regulatory groundwork was laid first. Australia's eSafety Commissioner issued Basic Online Safety Expectations for AI services, and Character AI implemented age assurance specifically to comply — alongside restrictions on open-ended companion chat and real-time sentiment analysis. The UK's Online Safety Act (July 2025) and California's SB 243 (October 2025) followed, both mandating age assurance for chatbot platforms, according to legal analysis from NYU Stern. And in the U.S., roughly half of all states have now enacted or advanced laws requiring platforms to block underage users.

The legal pressure is just as concrete. On 16 September 2025, a Senate Judiciary subcommittee hearing coincided with a new lawsuit from parents claiming Character AI contributed to their 13-year-old child's suicide. Multiple parent lawsuits allege chatbots engaged in sexual behavior with children; the FTC has opened an inquiry into how companies study companion-bot safety for minors. Senator Richard Blumenthal framed the products bluntly: "defective, just like an automobile that didn't have proper brakes."

The scale of youth exposure explains the urgency. Australia's regulator found that 79% of children aged 10–17 have used an AI companion or assistant, with 20% of those using one daily — yet none of the four companion services examined had robust age assurance during the reporting period. The proposed federal GUARD Act would go further, banning AI companions for minors entirely, with criminal penalties for non-compliance.

The direction of travel is clear, and it points beyond checkboxes:

Regulators increasingly expect ID-based or persistent verification — "simply ticking a box confirming that a user is over 18 won't do," as one analysis puts it.
Verification vendors themselves confirm the shift: Jumio's privacy chief says the trend is "definitely toward some kind of persistent verification."
Privacy watchdogs demand balance — the European Data Protection Board requires age assurance to be "the least intrusive possible."

This is the environment FlirtAlly is launching into, and why its architecture treats safety as a design decision rather than a retrofit: the default experience is PG/Flirt with hard-coded prohibited categories, while the 18+ "Spicy" tier requires ID-based age verification and a qualifying plan. The age gate is not friction — it's the license to operate in a market where regulators, courts, and parents have all stopped asking nicely.

The Scale of the Problem: Kids Are Already Using AI Companions

The most uncomfortable truth in the AI companion debate isn't that minors might find these platforms — it's that they already have, at scale, while the industry's defenses amounted to little more than a promise. Regulators now have the numbers to prove it, and those numbers are why a checkbox asking "Are you 18?" is no longer considered protection at all.

Australia's eSafety regulator found that 79% of Australian children aged 10–17 have used an AI companion or assistant — roughly two million children — with 20% of those using one daily or more, according to the regulator's official findings. Yet during the same reporting period, none of the four AI companion services examined — Chai, Character.AI, Chub AI, and Nomi — had robust age assurance in place. The gap between how many kids are using these products and how weak the gates were is the entire story.

The consequences of that gap have already reached courtrooms and congressional hearing rooms. Megan Garcia, whose 14-year-old son died by suicide after long-term chatbot engagement, told a Senate Judiciary subcommittee that chatbot technology "in its current form is not safe for children" and called for proper age verification so that children under 18 do not have access to chatbots. Her testimony coincided with a new lawsuit against Character AI over a 13-year-old's death. Sen. Richard Blumenthal framed the issue bluntly: "What we're dealing with here is a product that is defective, just like an automobile that didn't have proper brakes."

Even industry leaders concede the point. OpenAI CEO Sam Altman has said the company prioritizes safety ahead of privacy and freedom for teens, acknowledging that minors need significant protection from a new and powerful technology. As legal analysts have noted, simply ticking a box confirming a user is over 18 won't do.

Legislators are now proposing to close that gap entirely. The federal GUARD Act would:

Ban AI companions for minors outright, blocking access to bots that simulate emotional and interpersonal friendship
Require age verification with criminal penalties for non-compliance
Mandate that chatbots disclose they are artificial at the start of conversations and every 30 minutes after

That regulatory trajectory explains why platforms are rebuilding their safety architecture rather than patching it. FlirtAlly's approach reflects the same logic: a PG/Flirt default experience, with the 18+ "Spicy" tier gated behind ID-based verification and a qualifying plan — age assurance treated as a design principle, not a disclaimer. In a market where zero of four examined services met the bar, verified gates are becoming the baseline regulators, parents, and courts now expect.

How Age Verification Should Work: Safe by Default, Verified for 18+

The industry is moving toward ID-based age verification for AI platforms, driven by regulatory mandates, litigation, and documented youth exposure. According to Australian government research, 79% of children aged 10–17 have used an AI companion, with 20% engaging daily. This scale underscores the urgency of robust safeguards. "Simply ticking a box confirming that a user is over 18 won't do," industry analysis warns, as outdated methods fail to prevent underage access.

A safe default experience is the foundation of responsible design. FlirtAlly’s PG/Flirt tier ensures all users begin with content-aligned boundaries, while the 18+ "Spicy" side requires ID-based verification and a qualifying plan. This approach mirrors regulatory trends, such as the UK’s Online Safety Act and California’s SB 243, which mandate age assurance for AI services. Proposed federal legislation like the GUARD Act further signals a shift toward persistent verification.

FlirtAlly’s architecture includes hard-coded prohibited categories, media scene screening, and in-app reporting to reinforce safety. The 18+ tier demands ID verification through third-party services, aligning with practices like OpenAI’s use of Yoti, while minimizing data retention risks. Industry concerns about privacy trade-offs are acknowledged, but FlirtAlly’s design prioritizes transparency, framing honest safety as a feature rather than friction.

PG/Flirt default experience with no age gate
ID-based verification for 18+ "Spicy" content
Hard-coded prohibited categories and media screening
In-app reporting for user feedback
Flame-or-above plan requirement for 18+ access

By embedding safety into the product’s core, FlirtAlly aligns with regulatory momentum while addressing real-world risks. As parent advocates stress, "proper age verification" is critical to preventing harm. This design balances compliance with user trust, ensuring minors are protected without compromising adult access.

The Privacy Trade-off — and Why FlirtAlly Minimizes It

Age verification promises safety, but it hands platforms something dangerous: proof of who you are. Privacy advocates see this clearly. Molly Buckley of the Electronic Frontier Foundation warns that "age verification strikes at the foundation of the free and open internet," and attorney Heidi Howard Tandy calls forced identity disclosure "intrusive to people."

The risks are not hypothetical. Roughly 70,000 users had ID images exposed when a third-party verification service was compromised, according to CNBC's reporting on the verification industry. Experts also caution that concentrating identity data among a small number of verification vendors creates attractive targets for hackers and government demands. Meanwhile, retention practices vary widely — one major vendor can keep adult verification data for up to three years.

Regulators recognize the tension. The European Data Protection Board has stated that age assurance must be "the least intrusive possible," with children's personal data protected. The question every platform faces is how to honor that standard while still keeping minors out of adult spaces.

FlirtAlly's answer is scope. Instead of demanding ID from everyone at the door, FlirtAlly keeps its default PG/Flirt experience open to members without an ID check, and reserves ID-based verification for the opt-in 18+ "Spicy" tier. The design principle is simple:

Verification happens only when a member opts into Spicy — the default experience never requires it
The majority of members never submit an ID, so their identity data never enters a verification pipeline at all
Hard-coded prohibited categories and media scene screening apply on every tier, not just the verified one

This tiered approach echoes how other platforms are minimizing exposure. Discord, for instance, has said that over 90% of its users will never need to verify age beyond existing internal safety systems. Some companies are pushing verification further upstream entirely — to device or app-store level checks — so platforms never touch identity data in the first place.

There is no perfect solution yet. But between blanket ID collection and a meaningless checkbox, a scoped, opt-in gate is the closest thing to the "least intrusive possible" standard regulators are asking for — and it keeps the burden where it belongs: on the adults who choose to unlock adult content, not on everyone else.

What This Means for You: Choosing a Platform Built for the Rules Ahead

If you're choosing an AI companion platform in 2026, the question is no longer whether it verifies age — it's whether it does so before regulators force its hand. Roughly half of U.S. states have already enacted or advanced laws requiring platforms to block underage users, and legal analysts are blunt: "simply ticking a box confirming that a user is over 18 won't do."

The platforms that scramble to bolt age gates on after a lawsuit or a regulatory notice will always be playing catch-up. Australia's eSafety regulator found that none of the four AI companion services it examined had robust age assurance in place during its reporting period — and Character AI's measures arrived only after a government notice. Safety that's reactive is safety that arrives late.

The better approach is architecture designed in from day one. That's the philosophy behind FlirtAlly: PG/Flirt is the default experience for everyone, while the 18+ "Spicy" side is age-verified with ID and strictly opt-in — never a checkbox, never a default. Hard-coded prohibited categories, media scene screening, and in-app reporting round out the baseline.

When you evaluate any companion platform, look for three things:

Verified 18+ tiers — ID-based verification for adult content, not self-reported birthdates.
Safe defaults — the out-of-the-box experience should be safe for general audiences, with adult features unlocked deliberately.
Transparent limits — clear, published rules about what's prohibited and how content is screened.

FlirtAlly is built around all three. At launch, free members get the full PG/Flirt experience with unlimited memory — no paywall on remembering your dog's name or your birthday. And the Spicy tier stays exactly where regulators, parents, and common sense say it should: behind ID verification, opt-in only.

You can see the approach for yourself right now. Browse the read-only demo of a seeded showcase account — no signup needed, nothing generates — or join the waitlist to be first in when registration opens. Join the waitlist — be first in.

The rules ahead are clear: age gates everywhere, ID checks that mean something, and safety designed rather than improvised. Choose a platform that saw them coming.

Why does Character AI have age verification?