Can Google use Gmail data for ads if you use Gemini?

What did Google change in its privacy policy in October 2026?

Google added an exception to its old promise about Gmail and ads. The privacy policy dated October 16, 2026, now says Google won't show you personalized ads based on your Drive, Gmail or Google Photos content "unless you choose to make data from these services available to other Google services that support personalized ads." In practice, that means connecting those apps to Search or Gemini through Personal Intelligence. Tech reporters spotted the new wording about a week after it took effect, and the headlines wrote themselves. The old promise had sat in the policy, word for word, since July 2021: your private content stayed out of ad targeting, full stop. There's now a door in that wall. You have to open it yourself, but lots of people tap "Connect" on a helpful-looking prompt without reading a word.

There was a second, quieter edit too. Where the policy used to talk about personalizing ads based on your "interests and activity" across Google services, it now says "interests, activity, or personalized content." A new passage also explains that you can let Search or the Gemini apps access data from Gmail, Drive and Photos, and that Search may process some of that data to personalize content, "including ads." Google's own example is harmless enough: search for mountain bikes and you might see sports gear ads on YouTube, depending on your settings. What matters is the direction of travel. For five years your inbox was walled off from advertising. Now the default is the same, but the exception is written into the rules and tied to the AI features Google is pushing hardest.

Google has put some limits in writing. It says advertisers never get access to your Drive, Gmail or Photos data, or to identifying details like your name or email address. It won't target ads using sensitive categories such as race, religion, sexual orientation or health. Its help pages also say ads won't be based "directly" on your Gmail inbox or your Photos library. A company spokesperson said that connecting your apps is entirely opt-in. Here's my take: "directly" is doing a lot of work in that sentence. Summaries, signals and inferences drawn from your content can still feed ads. The opt-in itself is fair. The problem is the bundle. One switch gets you smarter answers and more personal ad targeting at the same time, and most people only notice the first half.

Does Gemini Personal Intelligence mean your inbox shapes your ads?

Only if you've connected your apps and left personalized ads on. Personal Intelligence, which Google rolled out for Gemini in January 2026, lets Gemini and Google Search pull from connected apps like Gmail and Google Photos so you get answers about your life instead of generic ones. Ask "When does my flight to Lisbon leave?" and it can find the confirmation email. Ask about last summer's beach trip and it can dig through your photos. That's useful, and it's why so many people switch it on. The updated policy makes the cost clear, though. Once those apps are connected to a service that supports personalized ads, signals from that content can feed the ads you see on Search, YouTube and Google's other properties. The feature and the ad targeting now share one switch.

So what could your photos or email actually reveal? Google hasn't listed exactly which signals it pulls. It says ads won't come straight from your inbox or your Photos library, and it rules out sensitive categories. Everything else is fair game, and the everyday possibilities aren't hard to picture. A pile of hotel confirmations suggests a trip. Receipts from a garden center suggest a new hobby. A run of photos of a half-renovated kitchen says plenty on its own. None of that shows up in an advertiser's dashboard as your name and email. But that's the whole point of ad personalization: inferences about you are what get sold, not your raw files. If that makes you uneasy, it's a sensible reaction, not paranoia.

For small business owners, the stakes are a bit different. Plenty of solopreneurs run their whole business out of a personal Google account. Client threads, supplier invoices, quotes and contracts all sit in the same Gmail as the dentist reminders. Connect that account to Personal Intelligence and your business email lands in the pool of content Google can learn from. If you use a company-managed Google Workspace account, don't guess. Ask whoever runs it, or check your admin settings, because the rules on business accounts may differ from what you see on a personal one. The simplest fix is old-fashioned separation. Keep business mail in one account, personal life in another, and decide on purpose which one, if either, gets connected to an AI feature.

How do you turn off Gemini personalization and ad targeting?

You have two ways out: disconnect your apps from Personal Intelligence, or turn off personalized ads altogether in My Ad Center. Doing both is the belt-and-braces option. For Search, open your Google Account, go to Data & privacy, find Personalization & activity and open Personalization settings. From there, choose Manage Personalized Recommendations in Search Services. Under Additional Personal Intelligence, open Connected Content apps and disconnect Google Workspace and Google Photos. Watch out for one trap: those steps only cover Search. If you ever connected Gmail or Photos to the Gemini app, you'll need to open Gemini's own Personal Intelligence settings and disconnect them there as well. Two places, two switches. It's annoying, but it takes about five minutes.

Turning off personalized ads in My Ad Center is the blunt option. You'll still see ads, but they'll be based on general context like what you're searching for right now, not on a profile Google has built about you. It doesn't break Gemini or Search, and you can keep Personal Intelligence connected for the useful answers if you want. Honestly, that combination is probably the best deal for most people: keep the smart answers and drop the profiling. One more catch: disconnecting doesn't wipe the past. Data that was saved while your apps were connected may stay in your Search Services History, so open that history, look at what's there and delete whatever you don't want kept. Then set a reminder to check again in a few months, because settings pages have a habit of changing.

While you're in your Google Account, take a minute for a wider review. Look at which third-party apps have access to your account, what each one can see, and when you last used it. Most people find at least one forgotten quiz app or calendar tool with far more access than it needs. Remove those first. If you use AI tools on your laptop as well, the same logic applies to desktop assistants that ask to read your files: what can it see, what can it do, and can you take that access back easily? Privacy settings aren't a one-time chore. They drift as companies add features, and this October's policy change is a good reminder that a promise from 2021 isn't guaranteed to hold in 2026.

What Google account permissions should an AI assistant ask for?

An AI assistant should ask only for the Google permissions it needs for the job you're giving it, and nothing more. If you want it to manage your calendar, it needs calendar access. It doesn't need your inbox, your Drive or your photo library. When you connect any outside app, Google shows a consent screen listing exactly what it's requesting, in wording like "see, edit, create and delete your Google Calendar events." Read that screen. It's the most honest document in the whole sign-up process. If an app that promises to "help with scheduling" also wants to read, send and delete all your email, that's a mismatch, and mismatches are where trouble starts. Too-broad access isn't a theoretical risk, either.

Take a simple request: "Add the dentist to my calendar Thursday at 4." To do that, an assistant needs permission to create events on your Google Calendar. That's it. It doesn't need to scan your email to find the dentist's confirmation, and it doesn't need your contacts or your photos. The same goes for a message like "Add $42 for printer ink to my expenses sheet." That's a Google Sheets job and nothing else. Treat each request as a test. Ask yourself which of your Google apps the task actually touches, then check whether the app's permissions match. Recent incidents where over-permissioned accounts let rogue AI agents into company systems show why narrow access is the cheapest security you'll ever buy.

Permissions are half the story. The other half is what the company does with the data it can see. Google's developer rules already restrict how outside apps may use sensitive Google data, including for advertising, but rules only help if the company actually follows them, so look at the assistant's own privacy policy. You're after plain answers to three questions. Does it use your data to target ads? Does it use your content to train AI models, and can you opt out? Does it share data with anyone else, and why? If the answers are vague, evasive or buried under ten pages of legalese, take that as your answer. A trustworthy assistant can explain its data use in a few sentences. If it can't, it either doesn't know or doesn't want you to know.

Is it safe to connect an AI assistant to Google Calendar?

Yes, it's safe to connect an AI assistant to Google Calendar if the access is limited to your calendar, the company doesn't use your data for ads, and you can revoke access whenever you like. Run through a short checklist before you click "Allow." First, scope: does it ask only for the apps the job needs? Second, ads: does its privacy policy rule out using your data for advertising? Third, training: will your content be used to train AI models, and can you opt out? Fourth, actions: what can it send, book or change without asking you first? Fifth, the exit: can you cut it off in one step? For a longer version, our plain-English checklist for trusting an AI assistant to act for you goes through each point.

Revoking access is the part people forget, and it's the most reassuring. Open your Google Account, go to Security, and find your connections to third-party apps and services. Every app you've granted access to is listed there with what it can see. Click one and remove access, and it's cut off from that point on. Make this a habit. Every few months, go down the list and remove anything you no longer use. If you run a team, think bigger than your own account, because each assistant or bot someone connects is another door into shared calendars and files. It's worth knowing why some experts now treat AI agents like a potential insider and what that means for a small team's settings.

We get judged on the same questions, so here's how it looks in Agent Sonic. Sonic lives in WhatsApp, and its Google connection covers Calendar, Sheets and Docs, not your Gmail inbox or your photo library. You text it the way you'd text a colleague: "Add the dentist to my calendar Thursday at 4," or "Log today's mileage in my trips sheet." It does the job and confirms in the chat. You can see how that works for running Google Calendar and Sheets from WhatsApp, and you should hold us to every point on the checklist above, just as you would Google. If it fits how you work, get access to Sonic here. Leave your details and you'll get the number and a quick onboarding.

Frequently asked questions