From cloud-first to device-first: a new default for age checks
On-device age verification is a method of confirming a user’s age in which facial analysis, liveness checks, and related processing happen entirely on the user’s own device, so biometric data such as face images never leave that device and only the verification result is shared onward. That shift matters more than it sounds. It turns age checks from a quiet data collection pipeline into a local calculation that treats your face as something that should never become someone else’s dataset. Incode has now launched On-Device Age Estimation that performs age estimation and liveness detection directly on the user’s device, without transmitting facial data off the device. In plain terms: the user proves their age, and the face stays on the device. That is not a minor feature; it is a direct challenge to the industry’s habit of normalizing cloud storage of sensitive biometric data.
Local facial recognition, deepfake detection apps, and the shrinking data trail
Until now, the standard promise around biometric data privacy in facial age estimation has been a policy: your data will be "handled with care" and deleted after the check. That still assumes your face goes to the cloud first. Incode’s approach is sharper: because the face is analysed on the user’s own device, there is no technical way for the provider or any client platform to access a biometric or face image. The company’s age estimation models are now available to run entirely on-device, combining local facial recognition with deepfake and spoofing detection in a single flow. When a user needs to verify their age online, the camera opens and the models analyse the face directly on the phone, tablet, or laptop; the face is not transmitted or stored, and only an age estimate and tampering metadata travel onward. This is privacy-focused verification by design, not by promise.
Why the timing matters: law, child safety, and platform responsibility
This move to on-device age verification is not happening in a vacuum. More than 30 age assurance laws are now in force worldwide, and age checks are becoming a legal requirement rather than a product choice. In the UK, the Online Safety Act’s “highly effective” age check requirement is already being enforced, with under-16 access to social media set for new restrictions in spring 2027. At the same time, platforms are under pressure over deepfake detection apps and nudification tools that target teenagers and children. Apple says nudification apps are against its guidelines and that it has rejected and removed many when people flag them through reporting tools. Later this year, its child accounts and Communication Safety features will expand in iOS 27, iPadOS 27, and macOS 27, including automatic detection and blurring of nudity, gore, and violent content for users under 18. The message is clear: regulators and platforms both expect reliable age assurance and safety controls, but users now expect those to respect privacy.
Practical impact: age-gated content without turning faces into permanent records
What changes for ordinary people is straightforward and important. When a user needs to verify their age online, the check happens where they already are: the camera opens and facial analysis runs on the local device. There is no government ID, no database lookup, and no remote storage of facial images, which makes facial age estimation a practical option for a wide range of users, including those without documents to show. Apps can offer age-gated content and identity verification without collecting or storing faces remotely, relying on an on-device estimation result plus metadata that can flag tampering attempts like fake camera feeds or replayed videos. On the safety side, parents using platform tools can choose which apps kids access, limit adult sites, and enforce age-based restrictions, with options like Ask to Browse and Time Allowances giving clearer control over which content reaches younger users.
Conclusion: privacy-focused verification should become non-negotiable
The age assurance industry has treated biometric data privacy as a matter of trust and deletion promises. That era should end. Incode is working to close the gap between compliance and user trust with an age assurance method that is seamless, inclusive, and built for a stronger standard of privacy. On-device age estimation is designed to give users a more privacy-preserving option at the moment they face an age verification requirement. Meanwhile, major platforms are reworking child accounts, contact approval, and content filtering, and they are adding user reporting tools for harmful material in selected regions, with more regions to follow. The direction is clear: privacy-focused verification, local facial recognition, and on-device tools for handling harmful content are becoming the new baseline. Any app that still ships biometric data to the cloud for routine age checks will soon feel out-of-date—and out-of-step with what users now expect.
