Google revised the privacy policy that governs its AI search tools and apps, and the new wording that took effect on Oct. 16, 2026 allows a specific consent path for personal data in Gmail, Google Photos and Drive to be read by Search and Gemini Apps and used to personalize content, including advertising.
What changed and when
The company’s updated policy says data that users permit Search or Gemini Apps to access from Gmail, Google Photos and Drive may be used to personalize content, including ads. The change became effective on Oct. 16, 2026, according to coverage by The Hacker News and related reporting.
The passage introduces a conditional route: personalization and ad targeting are tied to data a user explicitly allows those AI features to read. Google frames that permission as a user choice, not a default setting.
Why users and regulators will watch this closely
- Consent matters: Google says the pathway opens only when a user chooses to permit access, shifting the issue to how consent is requested and recorded.
- Scope of data: The change covers content stored in Gmail, Google Photos and Drive — services where users commonly keep sensitive personal material.
- Advertising implications: Because the policy explicitly mentions ads, advertisers could gain a richer signal for targeting if users opt in.
Privacy advocates and some reporters have flagged the wording because it softens earlier language that had suggested content in Gmail and Photos would not be used to personalize ads. The new formulation makes that prior promise conditional on user permission tied to Google’s Personal Intelligence and AI search features.
Google’s safeguards and the remaining questions
Google lists several safeguards around Personal Intelligence and AI-driven personalization. Public summaries of the policy and company statements say the system includes controls and limits. But analysts and reporters note that the wording leaves open important operational details, such as:
- How Google will present the opt-in flow and the exact wording users see before granting access.
- Whether advertisers receive any raw user content or only derived signals, and how sensitive categories (health, religion, sexual orientation) are handled.
- How Workspace (paid business) accounts will be treated compared with consumer accounts.
The tech reporting describes four safeguards Google cites, and then contrasts what the company has explicitly confirmed with broader headlines that may overstate the immediate effect. The key distinction emphasized by Google is that ad personalization using Gmail or Photos information requires an affirmative user action to permit the connection.
“allow”
That quoted word appears in reporting about Google’s policy and underlines the company’s framing: permission from the user is the precondition for the new data flow. Yet how that permission is requested and whether it will be granular enough to satisfy regulators and privacy-conscious users remains a core question.
What consumers should check
Google’s policy change underscores the need for users to review the privacy and personalization settings for Search, Gemini Apps, Gmail, Google Photos and Drive. The reporting recommends auditing connected services, ad personalization settings and any AI features that request access to stored content.
| Item | Why it matters |
|---|---|
| Search / Gemini Apps permissions | Granting access enables AI features to read user content and could allow personalization, including ads |
| Ad personalization | Explicitly mentioned in the policy as a possible use of permitted data |
| Workspace accounts | May be subject to different terms and controls than consumer accounts |
Google’s change took effect in mid-October 2026 and will be monitored by privacy advocates, news outlets and regulators for how it is implemented in practice. The update ties potential ad personalization to a user choice, but the precise mechanics of consent, transparency and data handling will determine whether the change represents a material shift in how personal content can be used across Google’s services.
