Companion CompassAge verification in AI girlfriend apps in Canada
Understand age declarations, selfie checks, identity data and Canadian bill status before sharing information with a companion app.
In this article
18+ only. This guide addresses adult accounts and fictional adult characters in non-explicit companion conversations.
Age verification in AI girlfriend apps can mean a declaration, an age estimate or a check by a separate identity company. Those methods collect different information and answer different questions. Character.AI names Persona and describes deletion of biometric verification data within 7 days. GirlfriendGPT publishes an adult self-declaration gate. A common age label does not make those processes equivalent.
For a Canadian reader, the immediate decision is whether the account requirement and the proposed collection of information are acceptable. Read the explanation before starting a check, identify the company processing it and keep identity documents out of the conversation itself. A chatbot reply asking for proof is not a substitute for an official account-verification screen.
Canada's Bill S-209 remains at second reading in the House of Commons in the parliamentary record checked on 29 October 2026. It should not be described as an already operating nationwide requirement for every companion account. An individual service can still set an adult-only rule or require a particular check. The Canadian account and billing guide gives the wider local context.
Five distinctions that matter before sharing identity information
First, separate eligibility from proof. An adult-only term states who may use the service. A declaration asks the person to affirm that condition. A third-party check introduces another organisation and a verification process. Candy.ai describes an 18+ affirmation and possible additional checks; OurDream also allows additional checks under its policy. Neither general description specifies the screen every Canadian account will encounter.
An app-store age classification serves a different purpose again. Janitor: Interactive Stories has an 18+ listing and identifies an Age Assurance feature. That combination helps describe the app, but it does not explain the identity provider, the documents requested or a Canadian verification procedure. Read the account notice for those details before consenting to a check. A number beside a store listing cannot answer questions about document retention.
Second, separate the companion company from the verification company. Character.AI describes age estimation and, where required, a Persona selfie check with an identity-document fallback. It says it does not receive the identity images. Its published deletion period concerns biometric data at Persona. Keep that category separate from account information, conversation records and payment records, which are covered by other notices and controls.
Consider what you need to know from the verification notice: the controller, the processor, the type of information requested, the result returned to the app and the retention rule. Read any document requirement before submitting it. If the notice describes a result such as adult eligibility, ask whether additional identity information is also returned. Avoid inferring the full data flow from a badge saying that the procedure is private or secure.
SpicyChat describes a video selfie with a possible document fallback; some regions use an identity document plus face matching. It says the companion service receives an age result without the images or documents used in the check. Its published mandatory-region list names the UK, France, Italy, Australia and selected US states. That list describes its documented regional approach, rather than granting a permanent exemption to every country omitted from it.
Third, keep the purpose narrow. An age decision does not require you to disclose your personal history in an ordinary chat. Use the designated verification process for its stated purpose, and keep work details, family information and account passwords out of fictional character biographies. Canadian privacy authorities caution that even information already visible online remains protected personal information. Public availability is not a reason to paste someone else's identity details into a companion account.
The same principle applies after successful verification. A fictional adult character can discuss an invented daily routine without needing your real address, employer or relatives' names. Decide which personal preferences you actually want saved. Replika allows individual Memory facts to be removed, whereas removing its complete conversation history requires account deletion. Understanding those controls before a long conversation is more useful than relying on the word private in an advertisement.
Fourth, distinguish a verification record from a subscription. Character.AI says a paid plan does not bypass its age checks. Payment and eligibility therefore remain separate decisions. Do not treat a subscription receipt as proof that identity requirements are finished, or accept an outside seller's promise that paying them will remove a check. If the service cannot resolve an account problem through its normal support process, pause rather than sending additional documents to a stranger.
The exit process also matters before purchase. Replika says account deletion does not cancel a subscription; the original billing channel needs separate attention. OurDream documents a different rule: its account deletion automatically cancels an active subscription and is processed in 24 to 48 hours. This difference is relevant if you decide to stop using a service after reading its identity requirements. Follow the rule for the actual account instead of assuming that uninstalling an app ends the contract.
Fifth, separate a successful check from the product's wider privacy practices. GirlfriendGPT normally retains personal data for 6 years after closure under its policy, subject to legal and business requirements. That retention statement is not shortened merely because an age gate asks for a declaration. Character.AI's stated biometric-deletion interval, meanwhile, does not establish a matching interval for its conversations. Read each promise against the type of data it names.
When comparing services, start with the check you would be asked to complete and the information you would be comfortable sharing. Then examine memory controls, retention and billing separately. A service may be convenient in one category and unsuitable for you in another. The companion-app comparison describes documented features without turning an identity check into a quality score.
A short record to make before a check
Keep a small account note rather than a folder of identity copies. Character.AI's published 7 day biometric-deletion period is a useful example of the precision to look for: the organisation, the data category and the period all belong together.
Identify the request. Record which service and account requested the check. Reach account settings through the app or a saved official address, rather than following an unexpected message. A support contact should be able to explain the requirement without asking for your password or complete conversation history.
Read the collection notice. Look for the identity company, what information it requests and what result goes back to the companion provider. If a camera or document step is involved, read the notice shown for that step. Do not move the process into a character conversation or an informal direct message.
Check the retention category. Write down whether the period covers a selfie, biometric information, a document image or an account record. Keep a link or the title of the notice and the date. A short verification-data period does not describe every record maintained by the companion company.
Keep an exit route. Find the account-deletion control and the original subscription channel before buying. Replika separates cancellation from deletion; OurDream links active-subscription cancellation to its deletion process. Save confirmations of the action you actually take, without storing unnecessary copies of sensitive identity material.
Canadian references and the limits of an age label
LEGISinfo is the parliamentary reference for Bill S-209, identified by its current Parliament and session. The record checked on 29 October 2026 places it at second reading in the House of Commons and records debate on 24 September 2026. Earlier coverage of S-210 concerns a previous Parliament. A headline about a bill's introduction or passage through the Senate does not establish Royal Assent.
The Department of Justice's charter statement for Bill C-34, tabled on 19 October 2026, describes proposed Digital Safety Act duties. Its proposed 24 hour preliminary-removal regime should be read as a proposal, rather than a current universal complaint deadline. For privacy, the federal and provincial commissioners' generative-AI principles discuss limited collection, appropriate purposes and sensitive personal information.
These references concern different subjects. A parliamentary proposal, an app's age condition and a privacy policy cannot replace one another. For an account complaint, describe the disputed collection or decision to the service's designated support or privacy contact. Include the notice title and relevant date, while keeping unrelated conversation content out of the request.
The Canadian legal-context section places these account questions alongside the country's wider consumer context.
Frequently asked questions
Does every Canadian companion app legally require identity documents?
The S-209 parliamentary record cited here is still at second reading, so it does not establish an operating universal document requirement. Service policies differ: GirlfriendGPT describes an adult declaration, while Character.AI names Persona for parts of its age-assurance process. Read the requirement shown for your own account, and distinguish it from claims about Canadian law.
Does an 18+ store label explain how the app verifies age?
It gives an age classification, not a complete description of data collection. Janitor's listing separately mentions Age Assurance, but that wording alone does not identify the processing company or procedure. A useful verification notice explains what is collected, who handles it and what happens afterward. Review that notice independently of the store rating.
Will a paid membership remove an age check?
Character.AI expressly says paying does not bypass age checks. Treat eligibility and billing as separate conditions. If you already subscribed and cannot use the account as expected, use the service's account and billing support. Do not pay an intermediary offering to remove verification or share credentials with someone claiming to complete it for you.
Does deleting a verification selfie delete my conversations?
Those are separate records. Character.AI's Persona statement describes biometric data being deleted within 7 days; it is not a conversation-deletion promise. Replika has different controls for individual Memory facts and complete account history. Ask for the category you want removed and retain the confirmation, rather than treating a single deletion notice as covering everything.
Can I decline a check I am uncomfortable with?
You can stop before submitting information and review the service's stated consequences or contact its support. That decision may limit account features. Review billing separately if you already pay: deleting Replika does not cancel renewal, whereas OurDream says its account-deletion process cancels an active subscription. Avoid replacing a disputed check with an unofficial verification service.
Does verified adulthood make a companion app confidential?
An eligibility result describes age, not the handling of every message. GirlfriendGPT's normal 6 year post-closure retention period and Replika's separate memory controls illustrate why the privacy policy still matters. Keep characters fictional and adult, share only the personal details needed for the conversation, and decide whether the documented retention terms suit you.