Google Says Humans May Review Gmail Data You Connect to AI

In September 2023, Google told people who connected Gmail, Docs and Drive to its AI assistant, then called Bard, that their content “is not seen by human reviewers, used by Bard to show you ads or used to train the Bard model.”[1] That sentence is still on the page. Since 16 October 2026 a note sits right behind it, and the note says that for newer features this is no longer the whole picture.[1]

On 10 November, the tech columnist Jason Aten wrote in Inc. that Google “has quietly changed the rules” and called it a broken promise.[8] That is his reading. The sections below stick to what Google’s own pages say.

A promise with a footnote

The note explains that Google has added features that let you connect Workspace apps, such as Gmail and Drive, to other Google services. When you turn them on, data from those apps is used to personalize other Google experiences. Depending on your settings, the same data can be used to train AI models, and it can be reviewed by people “in limited circumstances.”[1]

The note links to a help page about connecting Gmail, Drive and Photos to AI Mode in Search and to Ask Maps. That page is more specific: a subset of the data is read by human reviewers, including trained staff of Google’s service providers. It names what they can see: summaries, excerpts and inferences from your relevant emails and files. When an email or file is short, or especially relevant to the question, the summary “may just be the email or file.”[2]

Not your whole inbox, and not only Gemini

Nothing in Google’s pages says that people read all of your mail. Here is what the Search help page does say:

• The AI is not trained directly on your whole inbox or Drive, but on summaries and excerpts from it.[2]
• Before reviewers see anything, Google separates the material from your account and reduces personal information, unless the review is about abuse or harm.[2]
• Ads are not based directly on your inbox, but those summaries and excerpts may be used to show you ads.[2]

That page covers Search, not the Gemini app. The Gemini privacy page, updated on 26 October 2026, says human reviewers read some of the data Google collects, that Gemini uses information from Connected Apps under the same notice, and that chats reviewed by people are kept for up to three years even if you delete your activity.[3] It does not name Gmail in that passage. Google’s advice differs by page: the Search page asks you not to connect apps that hold confidential information,[2] and the Gemini page asks you not to enter confidential information you would not want a reviewer to see.[3]

Switching it off has a price

Connecting your apps is your choice, and you can disconnect them at any time in the Connected Apps settings.[3] Not connecting is not a complete shield: Google says that files you upload from Workspace or Photos to AI Mode can still be used to improve its services with the help of human reviewers, depending on your settings.[2] Two more limits are worth knowing. Disconnecting does not delete what Gemini already saved in your activity.[3] And if you turn Keep Activity off, Workspace apps stop working in Gemini altogether.[3]

Or leave the inbox out of it

Another way out is to keep your mail away from the AI features of the company that also hosts it. That is a bigger step than changing a setting, so here are three services we have reviewed that sell subscriptions rather than ads. They are not equal, and each note below says where it differs.

Proton Mail: zero-access, by its own account

Proton Mail says it uses zero-access encryption, so it cannot read your emails.[4] Proton says subscriptions are its only source of revenue, and its Black Friday page currently offers up to 50% off, with plans renewing at the standard price.[5]

Fastmail: no ads, but readable on its servers

Fastmail can read your mail on its servers, because it holds the encryption keys and has no end-to-end encryption. Its privacy policy says it does not use profiling for personalized content or ads.[6]

StartMail: PGP on the server, closed code

StartMail runs PGP encryption on its own servers and keeps its code closed. Its privacy policy says it is ad-free and shares no data with third parties for advertising.[7]

Where our scores stand

Our Gemini review already counts human review of chats and three-year retention against it, and gives it 5.4 out of 10. This note adds one detail to that: Connected Apps data goes through the same process. Our Gmail review also gives 5.4, and describes Gmail itself, not the AI features around it. Neither score changes. For the AI side of the choice, Gemini vs Proton Lumo sets the two assistants side by side.