This analysis describes what Google Gemini's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision defines the operational data lifecycle for Gemini Apps interactions and establishes differentiated retention policies based on account type. The authorization for post-deletion retention for safety and quality purposes creates a secondary retention mechanism distinct from the primary 18-month period.
The updated privacy notice establishes that Google collects data from third-party services you connect to Gemini, including Model Context Protocol server tools, and that such connections are not monitored or secured by Google. The notice explicitly states that choosing to connect third-party apps may expose your data, passwords, devices, and accounts to unauthorized access. The revised terms also clarify that you can use temporary chats, which are not retained for AI improvement purposes with human reviewer assistance. You can manage connected app permissions through Gemini Spark settings.
View change record →The updated notice adds new disclosure sections explaining how data flows when using Gemini Spark (remote browser and computer access), how avatar creation collects and processes information, and clarifies that Google collects information about AI reasoning steps during task execution. The notice also refines language around subscription information to specify 'Google AI plan' rather than just generic 'paid subscription.' These changes do not establish new obligations but rather expand the transparency disclosures provided to users about existing and new features.
View change record →The updated notice now explicitly identifies Memory as a feature that operates on the basis of user consent, alongside Voice Match. The revised language removes prior geographic restrictions on personalization, meaning Gemini can now reference chat history to generate personalized insights for all users globally, not just those outside the EEA, Switzerland, and the UK. The removal of the statement 'Keep Activity must be on to use this feature' simplifies the operational requirement but does not establish a new obligation. You can learn how to turn the Memory feature on or off through the updated privacy notice.
View change record →Users operating standard Google Accounts or school accounts have conversation data retained for 18 months by default without configuration options, while Workspace account administrators retain discretion over retention duration. The terms authorize conversation data to persist beyond user-initiated deletion during a safety and quality review period.
How other platforms handle this
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"Gemini Apps Activity is saved to your Google Account for 18 months by default. If you use Gemini Apps through your school account, your Gemini Apps Activity is saved for 18 months. For Workspace accounts, admins can configure retention settings. Even after deletion, conversation data may be retained for a safety and quality review period.Excerpt from Google Gemini's Gemini Apps Privacy Notice
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision defines the operational data lifecycle for Gemini Apps interactions and establishes differentiated retention policies based on account type. The authorization for post-deletion retention for safety and quality purposes creates a secondary retention mechanism distinct from the primary 18-month period.
Users operating standard Google Accounts or school accounts have conversation data retained for 18 months by default without configuration options, while Workspace account administrators retain discretion over retention duration. The terms authorize conversation data to persist beyond user-initiated deletion during a safety and quality review period.
ConductAtlas has identified this type of provision across 274 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Gemini.