Skip to main content
aiage verificationprivacy

Why Is C.AI Asking My Age?

Character.AI (C.AI) asks for your birthday because it requires users to be over a minimum age and, in its own words, to "help meet our legal obligations". Since late 2025 your age also decides which experience you get. Character.AI removed open-ended chat for users under 18, so an account the platform treats as under 18 can no longer chat freely with Characters, while adults keep full chat access.

Character.AI is not the only AI platform that asks for age. Regulators in the US, the UK and the EU have stepped up their scrutiny of how chatbots treat minors, and several new rules took effect in 2025 and 2026.

TL;DR

Character.AI asks your age to enforce its minimum age (13, or 16 in Europe) and to meet legal obligations such as COPPA (US), which governs personal information collected from children under 13, and the GDPR (EU), which sets 16 as the default age of digital consent. Age also decides your experience: since November 2025, users under 18 cannot use open-ended chat. Because a typed birthday is easy to fake, Character.AI now also runs age assurance on every account, and users it places in the under-18 experience by mistake can verify with a selfie through Persona.

The Short Answer

Character.AI's help center says it asks for your birthday "because we require users to be over a minimum age to engage with Characters, and help meet our legal obligations" (Character.AI support). Its Safety Center sets that minimum at 13, or 16 in Europe. The same help article says the company may also use your birthday for purposes listed in its privacy policy, including personalizing your experience and keeping the service safe.

Several laws sit behind that gate. The US Children's Online Privacy Protection Act (COPPA) restricts collecting personal information from children under 13 without verifiable parental consent. The EU's General Data Protection Regulation (GDPR) and Digital Services Act add rules for online services that minors use. Asking for a birthday is the simplest way to apply those rules, but it is a gate the user controls, which is why Character.AI added age assurance on top of it in late 2025.

Several overlapping rules drive age checks on AI platforms. Which ones apply depends on where a service operates and who uses it.

COPPA (United States). The FTC's COPPA Rule applies to services directed to children under 13 and to operators that know they are collecting personal information from a child under 13. Those operators must get verifiable parental consent first, and parents can review the information and have it deleted. The FTC can seek civil penalties for each violation. In September 2025 the FTC also ordered seven companies, Character Technologies among them, to report how they test and monitor AI chatbots that act as companions, how they limit use by children and teens, and how they comply with the COPPA Rule.

GDPR (European Union). Article 8 sets 16 as the age from which a child can consent alone when an online service processes their data on the basis of consent. Member states may lower that age, but not below 13. Below it, a parent must give or authorize consent. The GDPR also requires data minimization: a service may collect only the data it needs for its purpose.

Digital Services Act (EU). Article 28 requires online platforms accessible to minors to put appropriate and proportionate measures in place for a high level of privacy, safety and security of minors, and bans advertising based on profiling when a platform knows with reasonable certainty that the user is a minor. The DSA has applied to all online platforms since February 17, 2024, and on July 14, 2025 the European Commission published guidelines on how platforms should meet Article 28, including when to use age verification or age estimation.

Online Safety Act (United Kingdom). Since July 25, 2025, Ofcom's Protection of Children Codes have applied to services likely to be accessed by children. Services that allow the most harmful content, such as pornography or content that encourages suicide or self-harm, must use highly effective age assurance to keep children from it, and Ofcom has said that ticking a box to say you are over 18 is no longer enough.

SB 243 (California). California's companion chatbot law, SB 243, was signed on October 13, 2025 and took effect on January 1, 2026. For users an operator knows are minors, it requires a disclosure that they are talking to AI, a reminder at least every three hours to take a break, and reasonable measures to keep the chatbot from producing sexually explicit images or telling the minor to engage in sexually explicit conduct.

AGE VERIFICATION FLOWUser SignupAge QuestionUnder 13Not permittedMinimum age is 13(16 in Europe)13 to 17Under-18 experienceNo open-ended chatSince November 202518+Full chat accessAge assurance appliesStandard terms
Click to enlarge

How Age Affects Content Safety

Age is not just a legal checkbox. It directly controls what you can do on the platform, and the rules changed sharply in 2025.

Users under 18 lost open-ended chat. Character.AI announced on October 29, 2025 that it would remove open-ended chat for under-18 users no later than November 25, and it began doing so in the US on November 24, 2025, with other markets following. Its help center now describes the under-18 experience as reading mode: users can browse Characters, view content, and create Characters, scenes and videos, but chat is not available. On October 12, 2026, Character.AI announced a court-supervised sale under Chapter 11; it said the platform remains up and running.

Before that change, under-18 accounts already had a separate experience. Character.AI's Safety Center describes a version of its model for users under 18 with additional, more conservative classifiers, and a narrower set of searchable Characters filtered to remove sensitive or mature topics. In October 2024 the company also added a pop-up that directs users to the National Suicide Prevention Lifeline (now the 988 Suicide and Crisis Lifeline) when certain self-harm or suicide phrases appear.

Session time notifications date from the same period. Character.AI said in December 2024 that users get a notification after an hour-long session, and that users under 18 have more limits on their ability to change that setting.

What Happens to Your Age Data

Your birthday is stored with your account, and Character.AI says it will not display your age or birthday publicly. Here is what the company says about how age data is used.

It is used for: enforcing the minimum age, meeting legal obligations, and, according to the help center, the purposes in Character.AI's privacy policy, including personalizing your experience, helping keep the service safe, learning how the service is used, and improving it.

Age verification data is handled separately. If you take a selfie or upload an ID to prove you are 18 or older, the submission goes to Persona, a third-party provider. Character.AI says it does not collect or store that data, and that Persona deletes any biometric data or ID within 7 days.

For children under 13, COPPA gives parents the right to review the personal information a covered service collected from their child and to have it deleted. Character.AI's own minimum age is 13, so accounts below that age are not permitted at all.

Age Verification Limitations

Self-reported age is easily bypassed. A 12-year-old can enter a birthdate that makes them 18, and a birthday field alone gives the platform no way to check the claim. This is the basic limitation of every age gate that relies on self-declaration, not just Character.AI's.

More robust methods exist, such as ID checks, credit card checks and facial age estimation, but each has trade-offs. ID checks add friction and require handling sensitive documents. Credit card checks exclude people without a card, including many teens. Facial age estimation avoids documents, but its accuracy varies: NIST's 2024 evaluation found that accuracy depends on the algorithm, image quality, sex, region of birth and the person's actual age.

Character.AI's approach since late 2025 combines these. Its Age Assurance FAQ says it runs age assurance on accounts using signals such as login information, activity on the platform and some third-party signals. If that process indicates a user is under 18, the user can accept the under-18 experience or verify with a selfie through Persona, and only if Persona is not sure the user is 18 or older does it ask for a government ID. Regulators are moving in the same direction: in the UK, Ofcom has said self-declaration is no longer enough where its codes require age checks.

Age Verification Across AI Platforms

Character.AI is not the only AI chat service with an age gate, and the pressure on the whole category is rising.

ChatGPT: OpenAI's terms of use require users to be at least 13 and to have a parent or guardian's permission if they are under 18.

The FTC inquiry that began in September 2025 covers seven companies, Alphabet, Character Technologies, Instagram, Meta, OpenAI, Snap and xAI, and asks each how it limits use of its companion chatbots by children and teens.

The EU AI Act adds a transparency duty. Under Article 50, providers must design AI systems that interact directly with people so that those people are informed they are interacting with an AI system, unless that is obvious from the context. The obligation has applied since August 2, 2026; the 2026 AI Omnibus (Regulation (EU) 2026/1744) did not postpone it. The Act does not classify chatbots that talk to children as high-risk systems as such; its high-risk categories are the use cases listed in its annexes.

The Data Governance Perspective

Age verification is one facet of a broader challenge: governing how systems collect, classify and protect personal data. The principles behind COPPA and the GDPR, data minimization, purpose limitation and access control, apply to enterprise data governance at every scale.

Organizations managing customer data face the same structural problem: different data subjects have different rights, so the organization has to know which data belongs to whom and which rules apply to it. A healthcare company processing patient data, a bank managing financial records, and an AI platform serving minors all start from the same step: classifying data so that access and retention rules can be applied to the right records.

Dawiso is a data catalog, not an age verification or content moderation tool, and it covers the documentation side of that step. Teams catalog the systems that hold personal data, data stewards classify the columns that contain PII, a business glossary defines terms such as "minor" or "consent" once, and data lineage shows where those fields flow. A consumer AI platform needs to know which accounts belong to minors; an enterprise needs to know which columns hold PII. In both cases the catalog records the rule, and encryption, access control and retention are enforced in the platforms that store the data.

Conclusion

Character.AI asks your age to enforce its minimum age and to meet legal obligations such as COPPA and the GDPR, and since November 2025 age also decides whether you can use open-ended chat at all. Because a typed birthday is easy to fake, the company added age assurance on every account, with a selfie check through Persona for users placed in the under-18 experience by mistake. Regulators in the US, the UK and the EU are pushing the whole category in the same direction. The broader lesson is that governing user data starts with knowing which data you hold and which rules apply to it, whether the context is a consumer AI chatbot or an enterprise data warehouse.

Sources

See it in action

AI-Powered Features

AI-assisted documentation, intelligent search, and automated categorization help you work smarter.

A cookie a day keeps bad UX away.

We use cookies to personalize content, ads and to analyze our traffic. We also share information about your use of our site with our advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services. By clicking "Accept All", you allow us to use cookies for analytics and ads via Google Tag Manager. You can also customize cookies.

Customize Consent Preferences

We use cookies to personalize content, ads and to analyze our traffic. We also share information about your use of our site with our advertising and analytics partners. Privacy Policy

Necessary cookies allow core website functionality such as user login and account management. The website cannot be used properly without strictly necessary cookies.

Functionality cookies are used to remember visitor information on the website, eg. language, timezone, enhanced content.

Analytics cookies are used to see how visitors use the website, eg. analytics cookies. Those cookies cannot be used to directly identify a certain visitor.

We use Microsoft Clarity to see how you use our website (including heatmaps and session replays) so we can improve it. By using our site, you agree that we and Microsoft can collect and use this data. See our Privacy Policy for details.

Advertisement cookies are used to identify visitors between different websites, eg. content partners, banner networks. Those cookies may be used by companies to build a profile of visitor interests or show relevant ads on other websites.