NotMyPii has introduced an age assurance system that uses electrocardiogram (ECG) data from an Apple Watch to confirm adult status. This API-based system aims to provide age verification without requiring ID uploads or storing personal data.

ECG-Based Verification and Data Privacy

The NotMyPii age assurance system operates by using a brief heart rhythm reading from an Apple Watch to confirm adult status. A company representative stated that the system does not involve ID uploads, face scans, or the storage of personal data. Once a user is verified, a token is issued that remains valid for 30 days, allowing for seamless return visits to platforms.

The representative explained that this approach offers a solution for platforms seeking age assurance without the need to store or protect databases of government IDs or biometric scans. The system provides a single signed token confirming adult status and nothing further. NotMyPii is API-based and is currently live. The company indicates that the system is designed for platforms that require immediate age assurance but may not be prepared for a large enterprise contract.

Research published in Nature Communications, titled "Using beat-to-beat heart signals for age-independent biometric verification," explores the use of non-stationary physiological signals for biometric verification. This work introduces a method called "CompaRR" which utilizes beat-to-beat information from heartbeats. The study involved longitudinal recordings from 30 mice, ranging from 6 to 24 months of age, which is equivalent to approximately 20-75 human years. Fifty heartbeats, comparable to a minute of resting human heartbeats, were found sufficient for the verification task, achieving an equal error rate of 0.21. The study also noted that when trained on 6-month-old mice and tested on unseen mice up to 18 months of age (equivalent to approximately 50 human years), there was no significant change in verification performance. Verification remained possible even when the model was trained on data from drug-treated mice.

Addressing Compliance and Cost Concerns

Age verification is legally required in six U.S. states, the EU, the UK, and Australia. The NotMyPii website highlights that age verification costs operators approximately 65 cents per verification, citing Mike Stabile, Director of Public Affairs for the Free Speech Coalition, via New America. NotMyPii claims to deliver the same compliance signal at more than 50% lower cost while storing no identity records.

The problem of incorrect age verification can lead to significant financial penalties. Epic Games faced a $275 million FTC settlement for COPPA violations, and YouTube/Google received a $170 million FTC fine for collecting children's data. The UK Online Safety Act has a maximum penalty of £18 million per violation, and Australia's eSafety can levy AUD 50 million per day, per violation. The NotMyPii website also notes that Pornhub lost Visa and Mastercard processing entirely, which it describes as a "death sentence."

Beyond fines, ID upload processes can reduce sign-ups by 30-50%. Furthermore, platforms that store government ID databases inherit breach liability. An example cited is a 2025 incident where attackers accessed 70,000 users' IDs and selfies from Discord through a third-party age verification vendor. The EU's own age verification app was also compromised shortly after its release.

NotMyPii states that verification time for users with a recent ECG on their wearable is less than 5 seconds. The company also notes that over 40% of 18-34 year olds own a smartwatch, indicating that a significant portion of their target user base is already equipped with compatible devices.

Pilot Program and Industry Context

NotMyPii is offering a free 30-day pilot program for adult platforms interested in trying the system, with no long-term commitment required. Platforms interested in the pilot can contact NotMyPii.com founder Kyle Huscher at [email protected].

Age verification solutions are used to control access to restricted goods, services, or content, both online and in-person, often utilizing biometrics or facial analysis. The digital landscape in 2026 shows that ensuring users meet legal age requirements is a necessity for businesses in sectors such as iGaming, e-commerce, social media, and fintech. Regulations are becoming stricter, and failure to implement proper age verification can result in penalties, reputational damage, and loss of customer trust. Examples include laws in U.S. states like Louisiana and Utah requiring age verification for adult websites, Germany's Jugendschutzgesetz enforcing controls on online content for minors, and the UK's Online Safety Act making robust age checks mandatory. Apple has also tightened App Store rules for gambling and adult content apps.

Other age verification providers in the market include Acupixel, AgeChecked, BlueCheck, Bynn Intelligence, Inc., CLEAR, Concordium, COPID Verify, deepidv, and Digital Bazaar.

Key Facts

  • NotMyPii's age assurance system uses ECG data from an Apple Watch.
  • The system does not require ID uploads, face scans, or store personal data.
  • A verified token is valid for 30 days, allowing for frictionless return visits.
  • NotMyPii claims to offer age verification at more than 50% lower cost than the industry average.
  • Age verification is legally mandated in 6 US states, the EU, UK, and Australia.
  • A free 30-day pilot program is available for adult platforms.