8 Total
1 High severity
5 Medium severity
2 Low severity
Summary

This is the Gemini Apps Privacy Notice, covering what data Google collects when users interact with Gemini products, how that data is used, and what controls are available. The notice states that conversations with Gemini, including text and audio inputs, may be reviewed by human annotators for up to three years to improve AI models, and that this retention can persist even after a user deletes their Gemini Apps Activity. Additionally, the notice discloses that Gemini outputs may be inaccurate or inappropriate and should not be treated as professional advice, and that users who are not signed in to a Google Account have more limited data controls available to them.

Technical / Legal Breakdown

This document is the Gemini Apps Privacy Notice (last updated May 5, 2026), governing data collection, use, retention, and sharing practices for Google's Gemini applications, including the Gemini web app, mobile app, and Gemini extensions. The notice states that Google collects conversations with Gemini, location information, feedback, usage information, and device information; the terms authorize use of this data to provide, improve, and develop Google products and services, including use of conversations to train AI models by human reviewers unless users turn off Gemini Apps Activity or use certain enterprise accounts. A materially distinct provision is that human reviewers may read, annotate, and process conversations for up to three years even after a user deletes their Gemini Apps Activity, and that audio inputs may be transcribed and retained separately from activity controls; the notice further states that Gemini may generate inaccurate information about people and that users should not rely on outputs as professional advice. The notice engages GDPR (for EEA users), UK data protection law, CCPA and California privacy law, COPPA (the notice restricts use to users of required age and addresses minors), and general FTC Act jurisdiction over unfair or deceptive practices; compliance teams should note that the three-year reviewer retention period and the persistence of audio transcriptions outside activity deletion controls may require evaluation under data minimization and purpose limitation principles under GDPR and similar frameworks. Jurisdiction-specific rights including data access, deletion, portability, and objection are disclosed for EEA, UK, Switzerland, and US state residents, with exercise routed through Google's privacy tools.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

19 important changes detected

19 versions captured · Last updated: May 2026

What changed Google Gemini updated its privacy notice on May 24, 2026 with two minor language corrections. The first change fixed the phrase 'Where Gemini Apps get location data & how its used' to read 'Where Gemini Apps get location data & how it's used' (correcting the possessive to a contraction). The second change corrected 'You can also delete remote browser data in your Gemini Spark setting' to 'You can also delete remote browser data in your Gemini Spark settings' (pluralizing 'setting' to 'settings'). These are grammatical and stylistic corrections with no change to the operational substance of the privacy policy.
Why this matters The updated privacy notice corrects grammatical errors in language describing where Gemini Apps collect location data and how users can delete remote browser data. The operational substance of the privacy policy remains unchanged; these are stylistic corrections only. No new rights, obligations, or data practices are introduced by these changes.
View full change record →

May 21, 2026

medium
What changed Google Gemini updated its privacy notice on May 19, 2026 to add new disclosure sections, clarify how data collection works with new features like Gemini Spark and Avatars, and refine language around data use and retention. The notice now explicitly describes how the platform collects information about AI reasoning steps, distinguishes between different Connected Apps scenarios, and adds a section on avatar creation data. The operational difference is that users now have more detailed disclosure of what data types are collected and how specific features process information.
Why this matters The updated notice adds new disclosure sections explaining how data flows when using Gemini Spark (remote browser and computer access), how avatar creation collects and processes information, and clarifies that Google collects information about AI reasoning steps during task execution. The notice also refines language around subscription information to specify 'Google AI plan' rather than just generic 'paid subscription.' These changes do not establish new obligations but rather expand the transparency disclosures provided to users about existing and new features.
View full change record →

May 13, 2026 low

Google Gemini updated its privacy notice on May 13, 2026 to expand the stated purpose of personalizing user experience. The previous language stated that Gemini personalizes your experience by referencing …

View change record →
May 6, 2026 low

Google Gemini added a new section to its privacy notice describing data handling for a new Notebooks feature. The updated terms state that chats with Notebooks are saved according to …

View change record →
May 5, 2026 low

Google Gemini's privacy notice was updated on May 5, 2026 to remove references to 'Google Built-in' from two locations. The first change removed 'Google Built-in Gemini' from a sentence describing …

View change record →
May 5, 2026 low

Google Gemini's privacy notice was updated on May 5, 2026 to add references to 'Google Built-in' as a new Gemini deployment option alongside existing platforms like Android Auto, Maps, and …

View change record →
April 30, 2026 medium

Google Gemini updated its privacy notice on April 30, 2026 to clarify its Memory feature and expand the scope of personalization practices. The updated language now lists Memory alongside Voice …

View change record →
April 29, 2026 low

Google updated its Gemini Apps Privacy Notice on April 29, 2026 to clarify how it describes audio and video data collection from Gemini Live interactions. Previously, the policy referred to …

View change record →
April 22, 2026 low

Google Gemini updated navigation language in its Apps Privacy Notice on April 22, 2026, changing "Manage & delete your Gemini Apps activity" to "Manage & delete your activity in Gemini …

View change record →
April 19, 2026 low

Google Gemini updated its privacy notice on April 19, 2026 to add disclosure about imported data from other AI platforms and clarify how imported chats are treated within its data …

View change record →
April 17, 2026 low

Google Gemini added one line to its Gemini Apps Privacy Notice on April 17, 2026: 'Manage or delete the Gemini app on your Android device'. This appears in the Related …

View change record →
April 11, 2026 low

The document's last-updated date was changed from March 27, 2026 to April 8, 2026. This is a timestamp revision with no changes to the substantive privacy policy content, terms, or …

View change record →
April 9, 2026 low

Google Gemini's privacy notice was updated on April 9, 2026 to add disclosure language about how personalization with Connected Apps works. The updated policy now explicitly states that eligible users …

View change record →
March 30, 2026 low

Google Gemini removed five sentences describing how users could allow personalization using data from Connected Apps. The removed text explained eligibility requirements for Connected Apps personalization and where users could …

View change record →
March 28, 2026 low

Google Gemini updated its Privacy Notice on March 28, 2026 to add 'imported chats' as a data type the platform collects from users, and clarified that the Gemini Apps Activity …

View change record →
March 27, 2026 medium

Google Gemini updated its privacy notice on March 27, 2026 to describe how data from connected Google apps and imported data from other AI platforms is used to personalize your …

View change record →
March 23, 2026 medium

Google Gemini removed language describing how users could personalize their Gemini experience using data from connected Google apps. The updated notice no longer explains the Connected Apps personalization feature, eligibility …

View change record →
March 21, 2026 low

Google updated its Gemini Apps Privacy Notice on March 21, 2026, making four specific language changes. The policy now refers to 'Memory' as the explicit name of the feature that …

View change record →
March 19, 2026 low

Google Gemini updated its privacy notice on March 19, 2026 with three language clarifications: the 'Last updated' date was corrected from March 20 to March 10, 2026; phrasing about turning …

View change record →

Recent Provision Changes May 24, 2026

8 provisions unchanged.

View full change record →
High — 1 provision
Medium — 5 provisions
Low — 2 provisions

Monitoring

Google Gemini has updated this document before.

Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →

Compliance Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Compliance free trial

Cross-platform context

See how other platforms handle 18-Month Default Conversation Data Retention and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 24, 2026 00:38 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000326
Version ID CA-V-002943
SHA-256 fdd8084d709eff38c6028e96277bbc414af4e3ad857b86613b5be2ddff2cbffe
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans