Independent · Source-cited · No sponsored rankingsSources linked in every article
AIToolRanked
AI News · 5 min read

Gemini Connected Apps: humans may review your Gmail and Drive

Google's help pages say human reviewers, including contractors, can see excerpts of Gmail and Drive data you connect to Gemini. What changed, who's affected and how to opt out.

RA
· Founder, AIToolRanked
Frame from Google's Personal Intelligence launch video: a portrait surrounded by Gmail, Google Search, Google Photos and YouTube icons
On this page

What changed

Back in September 2023, when Google first let its chatbot read your inbox, it promised ↗ that "your content from Gmail, Docs and Drive is not seen by human reviewers, used by Bard to show you ads or used to train the Bard model."

That sentence is still on Google's blog. A note dated October 16, 2026 now sits under it. It says that when you turn on newer features that connect Workspace apps to other Google services, "that same subset of data can be used to train generative AI models. It can also be subject to human review in limited circumstances."

The note drew attention this week. A Hacker News thread ↗ reached 686 points, and MACCUS ↗ and Techpresso ↗ traced the change back to Google's own pages. One point matters for context: MACCUS found the same human-review wording on Gemini's help page in an Internet Archive copy from January 14, 2026, the day Personal Intelligence launched. So the October note brings the old blog post in line with a rule that has applied since January. It isn't a brand-new policy.

What Google's help page says reviewers can see

The rules are on Gemini's Connected Apps help page ↗. It says "a subset of Connected Apps data processed by Gemini is reviewed by human reviewers (including trained service providers) to debug our services, help keep them safe, and improve them." "Trained service providers" means outside contractors.

According to the same page, that subset includes:

  • "Interactions, summaries, excerpts and inferences from your relevant emails and files." Google adds: "where the email or file is brief or particularly relevant to respond to the prompt, the summary may just be the email or file." So a reviewer can see a short email in full.

  • Summaries and inferences from Google Photos. Google says humans don't view the photos themselves "except for cases of abuse and harm or when you submit feedback."

  • Excerpts and inferences from Google Wallet and payments data.

  • Your prompts and Gemini's responses.

Before review, Google says it disconnects interactions from your account and reduces personal information, "unless it's to address abuse or harm." If you send feedback, "human reviewers may also review some of your Gmail inbox or Photos library media." The page also carries a plain warning: "Please don't connect your apps to Gemini Apps if they contain confidential information that you wouldn't want a reviewer to see."

On training, Google says it doesn't train "directly" on your inbox or Drive. It does train on the summaries, excerpts and inferences drawn from them. The Gemini Apps Privacy Hub ↗ adds that chats reviewed by humans "are not deleted when you delete your activity" and are kept for up to three years.

Who this applies to

AccountCovered by this?
Personal Google account with Personal Intelligence and Connected Apps onYes
Personal account that never connected appsNo connected-app data. Your normal chats can still be reviewed while Keep Activity is on
Work or school (Google Workspace) accountNo. Google's Workspace privacy hub ↗ says content "is not human reviewed or otherwise used for Generative AI model training outside your domain without permission"

Personal Intelligence requires you to be 18 or over, use a personal account and have Keep Activity turned on, according to Google's setup page ↗. MACCUS reports that it isn't offered in the EEA, Switzerland or the UK.

What people are saying

  • "Note that this is specifically Consumer Gemini with Connected Apps; Workspace Gemini ... still claims not to be subject to human review," wrote bri3d ↗ at the top of the HN thread.

  • Several people said the setup prompts are hard to avoid. "Any time I've opened Gemini it's given me a full screen 'do you want to allow connected apps' popup and I click no every single time," wrote snailmailman ↗.

  • One user went back and switched it off. They found they "had to disconnect connected apps from both the Gemini App and Google search separately," posted prtmnth ↗.

  • On X, saeidzeb ↗ quoted Google's "may just be the email or file" line and added: "I'd keep work accounts disconnected."

  • Some claims went beyond Google's documents. A GitHub write-up linked from HN says Gemini pulls in mail even when you don't tag an app. We couldn't verify that, and Google hasn't said how often it happens.

We couldn't reach Reddit for this story, so these reactions come from HN and X.

How to turn it off

  1. In the Gemini app or at gemini.google.com, open Settings > Personal Intelligence and turn off the apps you don't want connected under Connected Apps. Google says you can change this "at any time."

  2. If you also connected apps to AI Mode in Search, check that setting too. HN users say it's a separate switch.

  3. Turn off Keep Activity if you don't want future chats used to improve Google's AI. Google says it still keeps those chats for 72 hours so it can respond and protect its users. Turning it off also disables Personal Intelligence.

  4. Don't press thumbs up or down on answers that came from private mail. Feedback can bring parts of your inbox into review.

Our take

This is a disclosure story, not a leak. Google's documents are fairly clear about what happens. The problem is that the clear version was on a help page while the 2023 promise stayed on the blog without a caveat for nine months. If you use Gemini on a personal account and keep client contracts, medical mail or financial statements in that Gmail, follow Google's own advice and don't connect it.

Workspace users can relax a little. Business and education accounts are under different contract terms, and Google says that data isn't human-reviewed. If you run a one-person business from personal Gmail, moving it to a Workspace account gets you those terms.

Alternatives: If an assistant that reads your mail is the point, compare privacy terms before you pick one. Our ChatGPT vs Claude vs Gemini comparison and ChatGPT alternatives guide cover the main options. For data that never leaves your machine, see our local LLM comparison. Google is also adding visible controls elsewhere: our Gemini Memory summary story shows how to see and delete what Gemini remembers about you.

More from the news desk · About Rai Ansar