Google's privacy policy change, explained

Google has updated its privacy policy in a way that could allow personal data from Gmail, Google Drive, and Google Photos to shape the ads users see, but only under specific conditions. The change adds an exception to a previous promise that content from those services would not be used for personalized advertising. The new language says Google will not use Drive, Gmail, or Photos for personalized ads 'unless you choose to make data from these services available to other Google services that support personalized ads.' The revision took effect on October 16 and was reported this week.

The key phrase is 'choose to make data available.' Google is not saying that every Gmail inbox, Drive file, or photo library will suddenly become an advertising database. The policy creates a conditional path: if a user connects those services to other Google products that support personalized ads, the data may be processed as part of a personalized experience that includes advertising. That distinction matters because Google has been encouraging users to connect Gmail, Drive, and Photos to AI Mode, Gemini Apps, and other Search tools through its Personal Intelligence feature.

What the policy now says

The updated policy allows certain Google services, including Search or Gemini Apps, to access data from other Google services such as Google Photos and Workspace apps like Gmail and Drive. Google says this is meant to provide a more personalized experience, subject to the policies and settings of the service receiving the data. In practice, a user who connects these services to AI Mode or other Search tools through Personal Intelligence is giving those tools more context about their life. That context can make an AI assistant more useful, but the policy now says it can also inform ads.

The policy states that Search may process some of the data a user allows Search to access to personalize content, 'including ads.' It also explains that depending on settings, Google may show personalized ads based on interests, activity, or personalized content from Google services. The policy gives the example of searching for mountain bikes in Search and then seeing ads for sports equipment on YouTube. That example is not specifically about Gmail or Photos, but it illustrates how Google's ad personalization can blend activity across its products.

This is not a blanket change for every Gmail account. The exception depends on a user connecting services or enabling features that support personalized ads. The policy also does not mean advertisers can read emails or view photos. Google says advertisers do not get access to Drive, Gmail, and Photos information or personally identifying details such as names or email addresses. Google also says it will not show ads based on sensitive categories such as race, sexual orientation, religion, or health.

Why the update matters

For years, Google treated Gmail, Drive, and Photos as sensitive stores of personal information and drew a line between that content and advertising. The company stopped scanning consumer Gmail messages for ad personalization in 2017 after privacy criticism. The previous policy language promised that Google would not use Drive, Gmail, or Photos for personalized ads. The new exception changes that promise from an absolute rule into a conditional one.

The update does not say advertisers can target individuals by reading their messages or inspecting their photo libraries. It says Google's own systems may process connected data to personalize content and ads. That is a narrower claim, but it is still significant. It means the boundary between product personalization and advertising personalization is no longer as clear as it once was. The same opt-in that makes an AI assistant more helpful can also make Google's advertising more effective.

That is likely to draw attention from privacy advocates and regulators. Consent is central to the policy. Google frames the change as a user choice, and users can disconnect services or turn off personalized recommendations. The question is whether users understand that an AI personalization setting may also affect advertising. In many product flows, users enable features because they want better answers or recommendations, not because they want ads tailored to their inbox or photo library.

How AI features create a new pipeline

Google has spent the past several years building AI tools that rely on context. Personal Intelligence is designed to make Search and Gemini more useful by letting them draw on information from Gmail, Drive, and Photos. A user might ask an AI tool to help plan a trip, summarize a project, or find a document. If the tool can see relevant emails, files, or photos, it can give a more specific response. That is the promise of personalized AI.

The updated policy makes clear that the same connection can serve two purposes: improving AI recommendations and personalizing ads. That does not mean an advertiser sees a user's itinerary or family photos. It means Google's ad system could use signals derived from that content to decide which ads are more relevant. The policy language is broad enough to cover that kind of processing because it refers to personalized content and ads.

Consider a user who connects Gmail and Photos to AI Mode. The user asks for help planning a weekend trip. The assistant may use an email confirmation and a few photos to suggest activities. Under the updated policy, the data the user allowed the assistant to access may also be processed to personalize content, including ads. The advertiser still does not see the email or the photos. But the ad system may benefit from the context that those services provide.

Key facts at a glance

• Google updated its privacy policy with an exception to its promise not to use Drive, Gmail, or Photos for personalized ads.
• The exception applies when users choose to make data from those services available to other Google services that support personalized ads.
• Users who connect Gmail, Drive, or Photos to AI Mode and other Search tools through Personal Intelligence may see ads informed by that content.
• Advertisers do not receive access to the content or personally identifying details such as names or email addresses.
• Google says it will not show ads based on sensitive categories including race, sexual orientation, religion, or health.
• Users can disconnect apps from Search's Personal Intelligence features or disable Personalized Recommendations in the Search Services Personalization settings page.
• The change took effect on October 16.

The consent question

The policy frames the change as user choice, and Google provides controls for users who want to limit the connection. Users can choose which apps to disconnect from Search's Personal Intelligence features. They can also disable Personalized Recommendations entirely through the Search Services Personalization settings page. Those controls are meaningful, but they place the burden on users to understand a complex chain of settings.

Privacy experts often warn that consent can be thin when it is bundled into a feature setup. A user may enable Personal Intelligence because they want better AI answers, not because they want ads tailored to their inbox. The updated policy makes the connection explicit in legal language, but the average user may not encounter it as a clear ad-related choice. That gap between legal disclosure and practical understanding is likely to be the central debate.

Google can argue that users are in control and that advertisers never see the underlying data. Critics can argue that the line between product personalization and ad personalization has blurred. Both claims can be true at the same time. The policy gives users a way to opt out, but it also expands what happens when they opt in.

What Google's ad system can and cannot do

It is important to separate several claims. The update does not mean Google will sell Gmail content to advertisers. It does not mean advertisers can target individuals by reading their messages. It does not mean every photo in Google Photos will be used to build an ad profile. The policy is narrower and more conditional than that. It creates a permission path: if a user connects certain services to Google services that support personalized ads, data from those connected services can be processed as part of the personalized experience, and that experience can include ads.

At the same time, the wording is broad enough to matter. 'Personalized content, including ads' is a wide category. It does not describe a single ad format or a single surface. It could apply across Google products where personalized content is shown. That breadth is why the change is more than a technical update. It gives Google room to use connected data in ad personalization without handing the raw data to advertisers.

The limits Google has stated are also important. Advertisers do not get access to the content or personally identifying details. Google says it will not show ads based on sensitive categories. Those commitments may reduce some risks, but they do not answer every question about inference. A system can infer interests without revealing the underlying email or photo. The policy is about that kind of processing.

Why Google is making this change now

Google's core advertising business depends on effective personalization. AI assistants also depend on personal context. The company is trying to make its AI products more useful without abandoning ad personalization. The updated policy aligns the two. As AI Mode and Gemini Apps become more central to Search, the data that makes those tools helpful becomes more valuable. The policy update gives Google a clearer legal basis for using that data in personalized content and ads.

The change also arrives as regulators and users pay closer attention to how AI systems use personal data. Privacy laws in various jurisdictions require transparency and lawful bases for processing. The policy update is a transparency move, but it also expands potential uses. That combination is common in the AI era: companies update terms to explain new data flows, and users are left to decide whether the benefits are worth the trade-offs.

What users can do

Users who want to keep Gmail, Drive, and Photos data out of ad personalization should review their Search Services Personalization settings. Google says users can choose which apps to disconnect from Search's Personal Intelligence features or disable Personalized Recommendations entirely. Users should look for connections between Search, AI Mode, Gemini Apps, and Workspace or Photos. Disconnecting a service may reduce the helpfulness of AI responses, but it also limits the data available for personalization.

It is also worth checking whether personalized recommendations are enabled and whether any connected apps have access to sensitive information. The controls are not a single switch for every Google ad, but they are the relevant settings for this policy exception. Users who want a stricter separation between productivity data and advertising should review those settings before enabling new AI features that ask for access to Gmail, Drive, or Photos.

The bigger picture

The update illustrates a broader tension in the AI era: the same data that makes an assistant feel intelligent can also make advertising more effective. Companies are increasingly asking users to trade context for convenience. Google's policy change does not resolve that tension. It formalizes it. The company is saying, in effect, that connected data can improve both the answers users see and the ads they see.

For now, the practical effect depends on how many users connect these services and how clearly Google explains the ad implications. The policy language is explicit enough that the link can no longer be called hidden. Whether users understand it at the moment they enable an AI feature is a different question. The answer will shape the next round of privacy debates around AI and advertising.

Source: The Verge News