Google expands privacy age assurance for Android

Play Age Signals API goes global

Google rolled out the Play Age Signals API to every Android developer on the Play Store.¹²³⁴⁵ The API lets apps request a user’s age range without collecting raw birth data.¹²³⁴⁵⁶ Google positioned the rollout as a privacy‑preserving alternative to ad‑hoc age checks that developers have been stitching together for years.⁶

The TechCrunch brief notes that the API is now available worldwide, not just in pilot markets.⁵⁷⁸ Developers can integrate the signal with a single SDK call and receive a coarse bucket—under 13, 13‑17, or 18+.²³⁶ Google promises that the signal never reveals exact dates, and it is derived from signals already present in the Play ecosystem.²³⁴⁵⁶ The move forces developers to choose between building their own fragile age heuristics and using a Google‑backed, auditable channel.

U.S. pilot adds automatic safeguards

In February, Google announced a limited roll‑out of age assurance to a small set of U.S. users. The rollout targets accounts that Google can confidently flag as under 18. For those accounts, Google automatically flips on enhanced protections across its suite: YouTube Kids, Family Link, and default content filters.

The HN post explains that users identified as under 18 receive an email explaining the changed settings and a prompt for adults to verify the age if they wish to adjust them. The system blends age estimation with optional verification, so a user can prove they are over 18 without handing over a birth certificate. Google says the approach “does not involve collecting additional data or sharing granular user information with all apps and websites,” underscoring the privacy‑first angle.

Open‑source zero‑knowledge proofs power EU compliance

Google also open‑sourced its Zero‑Knowledge Proof (ZKP) libraries under the name longfellow‑zk on GitHub. The release fulfills a promise made in partnership with Sparkasse, a German bank that helped shape the tooling for European age assurance.

According to the HN announcement, ZKP lets a user prove a statement—such as “I am over 18”—without revealing any other data. The codebase is intended for both private and public sector developers building digital ID solutions. Google frames the move as a response to the EU’s eIDAS Regulation, which takes effect in 2026 and encourages Member States to embed privacy‑enhancing technologies like ZKP into the forthcoming European Digital Identity Wallet (EUDI Wallet). By making the libraries public, Google hopes to accelerate that integration.

Why the push matters now

The three strands—global API, U.S. pilot, and open‑source ZKP—signal a coordinated shift toward systemic age protection rather than isolated feature flags. Developers who previously relied on third‑party age checks now face a choice: adopt Google’s signal or risk non‑compliance with emerging regulations.⁶ The U.S. pilot shows Google is willing to test enforcement at scale before a broader rollout, which could set a de‑facto standard for how platforms treat under‑18 users.

Critics have warned that a single company controlling age signals could create a new data monopoly. Google counters that the signal is derived from existing data and never exposes raw birth dates.²³⁴⁵⁶ The open‑source ZKP libraries, however, give rivals a tool to build independent age‑verification flows, potentially diluting Google’s grip. The real test will be whether regulators accept the signal as sufficient proof of compliance or demand more transparent audits.

What to watch

Watch for the next wave of Play Age Signals adoption reports from major app publishers. Google has said it will monitor the U.S. pilot closely before expanding, so any public metrics on false positives or user pushback will be telling. In Europe, the 2026 eIDAS deadline will drive Member States to embed ZKP into national digital wallets; the speed of those integrations will indicate how influential Google’s open‑source contribution becomes. Finally, keep an eye on antitrust filings that may question whether a single age‑verification pipeline gives Google undue market power.

Updates

• 2026-07-29 — Google Play is expanding age confirmation tools for app developers (source)