UK Age Check Index

Yoti

Yoti Ltd, headquartered in GB. Website: yoti.com. Methods offered: facial age estimation (face scan), photo id, digital id wallet, reusable digital id.

verified 18 October 2026

Retention, as published by Yoti

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”

Quoted from yoti.com, dated 23 February 2026; checked 18 October 2026. Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner.

Accuracy claims, as published

Retention statements by service

Statements may cover different services, data types, dates or exceptions. Different periods are not necessarily contradictory. A statement for one service is not a default for another.

DeploymentMethodWhat the deployment statesProvider statement and scope
Facebook Facial age estimation (face scan)
Primary source
“Once your age has been estimated and shared with us, we will delete the image within 30 days. We don't share any other information about you with the vendor.”

Quoted from facebook.com; checked 18 October 2026. Held by the service. Period as stated: Image deleted within 30 days (Facebook UK Help Centre).

Notes: Facebook’s video-selfie page names “vendors” rather than Yoti: “If you choose to take a video selfie, we partner with vendors who use technology to estimate your age. After you've taken a video selfie, we'll share an image from that selfie with the vendor. Our vendors' technology only estimates age. It can't identify specific people.” Its “Confirming your age on Facebook” page names Yoti: “With Yoti, you can verify your age on Facebook by taking a video selfie or uploading your ID.” Meta’s 5 December 2022 post on Facebook Dating (US): “After you take a video selfie, we share a still image from the video with Yoti and nothing else. Yoti’s technology estimates your age based on your facial features, shares that estimate with us and the image is then deleted immediately.” Facebook’s page: “It can take up to 20 minutes to verify your age.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Facebook Photo ID
Primary source
“We'll delete your ID within 30 days.”

Quoted from facebook.com; checked 18 October 2026. Held by the service. Period as stated: ID deleted within 30 days (Facebook UK Help Centre).

Notes: Facebook’s page: “Yoti, a third-party age verification service uses a variety of options for people to verify their age on Facebook”, listing “Upload an ID” and “Take a video selfie”; “The ID that you choose must include a photo of your face and your date of birth.” with passport and driving licence as the types. Its “Types of IDs that Facebook accepts” page: “Facebook contracts with Yoti, a third-party age verification service, to ensure an age-appropriate experience for our users.” A separate page on identity confirmation says Facebook “may use an encrypted copy of the ID for up to one year” to improve fake-ID detection, with an opt-out under which it “will be deleted within 30 days”; the age-verification page carries the 30-day line without that qualification. “Depending on the laws in your region, you may also be required to get parental approval if we determine that you're under a certain age.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Feeld Mobile operator check
Primary source
“Records used to verify your age are immediately deleted by our partner when the verification process is finished.”

Quoted from support.feeld.co, dated 2 December 2025; checked 18 October 2026. Held by the vendor. Period as stated: Immediately after verification (Feeld help article).

Notes: Feeld’s article: “With this option, our verification partner will request some information from your mobile provider to confirm your age. If you don’t have a phone number on your Feeld account, we’ll ask you to provide this.” and “This must be done with a phone on a mobile network. VoIP numbers (e.g., Google Voice) can’t be used for age verification.” Feeld’s Terms of Use (18 December 2025) name the provider: “utilization of third-party age verification and Mobile Network Operator checks provided by Yoti”. Feeld’s FAQ: “We do not store any personal data submitted during the verification process, except where the data already exists on your account (e.g. previously submitted for login or 2FA).”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Feeld Facial age estimation (face scan)
Primary source
“Records used to verify your age are immediately deleted by our partner when the verification process is finished.”

Quoted from support.feeld.co, dated 2 December 2025; checked 18 October 2026. Held by the vendor. Period as stated: Immediately after verification (Feeld help article).

Notes: Feeld’s article: “With this option, you’ll take a live selfie with your device. The selfie is then analyzed in real time by our age verification partner using a facial analysis algorithm to determine your approximate age.” Feeld’s privacy policy: “Feeld will collect and process your facial biometric data and cellular mobile network operator data through a trusted third party (Yoti)”. Feeld’s terms describe Yoti as providing “age estimation facial recognition technology”; Yoti’s own notice says its estimation does not identify people (see the Yoti page).

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Feeld Photo ID
Primary source
“If a Member elects to provide government ID data, said data will only be processed for the limited purpose of verifying the Member’s age and shall be purged from storage immediately after verification is complete.”

Quoted from feeld.co; checked 18 October 2026. Held by the vendor. Period as stated: Purged immediately after verification (Feeld privacy policy; the terms say “from Yoti storage”).

Notes: Feeld’s article “If you fail age verification (or decide not to verify)” (updated 26 August 2025): after failing one method “You can retry that method one time” or “immediately try the other verification method”; “If you fail both methods: You’ll be prompted with a third method, allowing you to verify using an ID.” Feeld’s terms: “In limited circumstances, Members may elect to use Yoti for age verification by using a valid government identification card.” and “Any government identification data that members elect to provide shall be immediately purged from Yoti storage after verification.” The privacy policy also mentions an ID on support-ticket escalations.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Instagram Facial age estimation (face scan)
Primary source
“Once your age has been estimated and shared with us, we will delete the image within 30 days. We don’t share any other information about you with the vendor.”

Quoted from help.instagram.com; checked 18 October 2026. Held by the service. Period as stated: Image deleted within 30 days (Instagram help page).

Notes: Instagram’s video-selfie page names “vendors” rather than Yoti: “If you choose to take a video selfie, we partner with vendors who use technology to estimate your age. After you’ve taken a video selfie, we’ll share an image from that selfie with the vendor. Our vendors’ technology only estimates age. It can’t identify specific people.” Its “Confirming your age” page names Yoti: “We partner with Yoti, a third party age verification service, to confirm people’s ages on Instagram.” Meta’s 5 May 2026 newsroom post names “Yoti’s facial age estimation tools”. Meta’s 23 June 2022 post: “After you take a video selfie, we share the image with Yoti, and nothing else. Yoti’s technology estimates your age based on your facial features and shares that estimate with us. Meta and Yoti then delete the image.” Yoti’s own notice says it deletes the selfie as soon as an estimate is given (see the Yoti page). Instagram’s page: “It can take up to 20 minutes to verify your age.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Instagram Photo ID
Primary source
“We’ll delete your ID within 30 days”

Quoted from help.instagram.com; checked 18 October 2026. Held by the service. Period as stated: ID deleted within 30 days (Instagram help page).

Notes: Instagram’s page: “Yoti, a third party age verification service uses a variety of options for people to verify their age on Instagram”, listing “Upload an ID” and “Take a video selfie”. “The ID you choose must include a photo of your face and your birth date.” Passport and driver’s licence are the types listed. Meta’s 23 June 2022 post: “Your ID will be stored securely on our servers and is deleted within 30 days.” Meta’s general page on IDs says storage “depends on what you’re using it for”, with up to 180 days for advertiser or Meta Verified checks and up to one year where fraud or abuse is suspected; the age-verification page carries the 30-day line. “Depending on the laws in your region, you may also be required to get parental approval if we determine you’re under a certain age.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Minecraft Facial age estimation (face scan)
Primary source
“It is securely processed by our trusted age assurance partner and deleted after the process is complete.”

Quoted from support.microsoft.com, dated 24 August 2026; checked 18 October 2026. Held by the vendor. Period as stated: Deleted after the process is complete (Microsoft FAQ).

Notes: Microsoft’s FAQ (dated 24 August 2026): “Multiple age assurance options are available, provided by our partners Yoti and VerifyMe and include facial age estimation, and uploading a document.” Which partner handles which method is not stated. “Once completed, age verification applies to both your Microsoft account and XBOX account.” Minecraft’s own page names no vendor; it links to Microsoft’s UK age verification page. The Xbox record on this site covers the same account-level check.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Minecraft Photo ID
Primary source
“It is securely processed by our trusted age assurance partner and deleted after the process is complete.”

Quoted from support.microsoft.com, dated 24 August 2026; checked 18 October 2026. Held by the vendor. Period as stated: Deleted after the process is complete (Microsoft FAQ).

Notes: Listed as “Uploading a document” on Microsoft’s FAQ and its “How to verify your age for a Microsoft account” page (both dated 24 August 2026). Microsoft: “If one verification method doesn’t work, you can try another.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
OnlyFans adult Facial age estimation (face scan)
Primary source

No published retention period found (checked 18 October 2026).

Notes: Ofcom’s decision page: “The technology works by requiring a prospective user to upload a live selfie, which it then uses to estimate their age. If the tool estimates the prospective user’s age as being above the challenge age, they can continue to create an account on the OnlyFans platform. Any user not estimated to be above the challenge age is required to verify that they are over 18 via a secondary method.” Ofcom does not name the provider. Yoti’s own case-study page names OnlyFans with “Solution: Facial Age Estimation”. No retention wording from OnlyFans’ own pages.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
PlayStation Mobile operator check
Primary source

No published retention period found (checked 18 October 2026).

Notes: Mobile contract check. PlayStation’s FAQ: “Pay As You Go or prepay numbers are not supported for this method.” The FAQ’s only data sentence for this route is “Information you provide for age verification is processed by Yoti, our third-party provider.”, which is not a retention period.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
PlayStation Facial age estimation (face scan)
Primary source
“Yoti deletes your facial geometry data as soon as your verification is complete. PlayStation never collects, stores, or otherwise processes your facial geometry data.”

Quoted from playstation.com, dated 1 June 2026; checked 18 October 2026. Held by the vendor. Period as stated: immediately.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
PlayStation Photo ID
Primary source

No published retention period found (checked 18 October 2026).

Notes: The FAQ gives no retention sentence for the ID route beyond “Information you provide for age verification is processed by Yoti, our third-party provider.”

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Spotify Facial age estimation (face scan)
Primary source
“After the age assurance process is complete, Yoti will delete all the user’s data.”

Quoted from spotify.com; checked 18 October 2026. Held by the vendor. Period as stated: after check.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Spotify Photo ID
Primary source
“After the age assurance process is complete, Yoti will delete all the user’s data.”

Quoted from spotify.com; checked 18 October 2026. Held by the vendor. Period as stated: after check.

Notes: Spotify’s sentence covers the age assurance process as a whole (facial age estimation or ID document verification through Yoti).

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Threads Facial age estimation (face scan)
Primary source
“Once your age has been estimated and shared with us, we will delete the image within 30 days. We don’t share any other information about you with the vendor.”

Quoted from help.instagram.com; checked 18 October 2026. Held by the service. Period as stated: Image deleted within 30 days (Threads help page).

Notes: Threads’ “Confirming your age” page: “We partner with Yoti, a third party age verification service, to confirm people’s ages on Threads.” and “With Yoti, you can verify your age on Threads by taking a video selfie or uploading your ID.” Its video-selfie page names “vendors”: “If you choose to take a video selfie, we partner with vendors who use technology to estimate your age. After you’ve taken a video selfie, we’ll share an image from that selfie with the vendor. Our vendors’ technology only estimates age. It can’t identify specific people.” “It can take up to 20 minutes to verify your age.” That page says the check applies “If you are under 16 and trying to change your age on Threads to over 16”.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Threads Photo ID
Primary source

No published retention period found (checked 18 October 2026).

Notes: Threads’ page: “The ID you choose must include a photo of your face and your birth date.” Passport and driver’s licence are listed. “Depending on the laws in your region, you may also be required to get parental approval if we determine you’re under a certain age.” The Threads ID page states no retention period; Instagram’s equivalent page says “We’ll delete your ID within 30 days” (see the Instagram record).

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Xbox Photo ID
Primary source
“It is securely processed by our trusted age assurance partner and deleted after the process is complete.”

Quoted from support.microsoft.com, dated 24 August 2026; checked 18 October 2026. Held by the vendor. Period as stated: Deleted after the process is complete (Microsoft FAQ, 24 August 2026).

Notes: Microsoft’s current account FAQ (24 August 2026): “Multiple age assurance options are available, provided by our partners Yoti and VerifyMe and include facial age estimation, and uploading a document.” The July 2025 Xbox Wire announcement said information “is protected with industry-standard encryption and is not stored or used for any other purpose.” Microsoft does not say which partner handles which method or region.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Xbox Facial age estimation (face scan)
Primary source
“It is securely processed by our trusted age assurance partner and deleted after the process is complete.”

Quoted from support.microsoft.com, dated 24 August 2026; checked 18 October 2026. Held by the vendor. Period as stated: Deleted after the process is complete (Microsoft FAQ, 24 August 2026).

Notes: Listed as “facial age estimation” on Microsoft’s current FAQ, which names Yoti and Verifymy as partners without saying which handles which method or region.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Xbox Mobile operator check
Primary source

No published retention period found (checked 18 October 2026).

Notes: Listed in the July 2025 Xbox Wire announcement (“mobile provider check, and credit card check”). Microsoft’s age-assurance FAQ dated 24 August 2026 (read 18 October 2026) lists only facial age estimation, document upload and a government-system login for Singapore; it does not list this method. The Xbox Wire page names no vendor.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026
Xbox Credit card
Primary source

No published retention period found (checked 18 October 2026).

Notes: Listed in the July 2025 Xbox Wire announcement (“mobile provider check, and credit card check”). Microsoft’s age-assurance FAQ dated 24 August 2026 (read 18 October 2026) lists only facial age estimation, document upload and a government-system login for Singapore; it does not list this method. The Xbox Wire page names no vendor.

Scope not independently classified; check the source before applying this statement to a service.

“Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party.”
Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner
checked 18 October 2026

Reported customers

Certifications

The UK Age Check Certification Scheme (ACCS) registry lists certificates with their expiry dates; a certificate that has lapsed is recorded as such once the registry shows it.

Regulator actions and published incidents

Regulators

Questions people ask about Yoti

What does Yoti say it keeps?

Scope not independently classified; check the source before applying this statement to a service. "Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or any other third party." (yoti.com, dated 23 February 2026; checked 18 October 2026). Period as stated: Selfie deleted as soon as an age estimate is given; ID document images, data and selfie deleted as soon as an age is given, or kept 28 days where the client configures manual review; check results stored for the client for 6 months unless deleted sooner. See each service’s own statement; scope, data type and exceptions may differ.

Is Yoti certified?

Recorded certifications: ISO 27001, ISO 27701, SOC 2 Type II, PAS 1296:2018; ACCS 1:2020 Level 2 (Age Estimation), Facial Age Estimation model Aug24, valid to 21 Oct 2026; ACCS 1:2025 / ISO/IEC 27566-1:2025 (Age Assurance), Age Verification Service 2026-2.1, valid to 6 Sep 2029. Each links to its source on the page; expiry dates are as stated there.

Has Yoti been fined or had a data incident?

ICO, May 2022: Regulatory Sandbox exit report AEPD (Spain), 10 March 2026: Resolution PS/00164/2025 (file EXP202317887) fines Yoti Ltd €950,000: €500,000 under GDPR article 9, €200,000 under article 7 and €250,000 under article 5.1(e), with corrective measures due within six months of the decision becoming final. Yoti’s response, published 10 March 2026, says the findings relate to its Digital ID app only and that it has begun an appeal to the Spanish High Court.

Which UK services use Yoti?

Recorded deployments: Facebook, Feeld, Instagram, Minecraft, OnlyFans, PlayStation, Spotify, Threads and Xbox.

Sources for this profile

Changes to this profile

All changes · RSS

Correct this entry

Vendors are welcome to correct their profile. Point us at the policy page and the wording is replaced with the quotation, dated. Send a correction. Nothing you send is published.