Google has quietly redrawn one of the firmest privacy lines it ever drew for itself. An update to the company’s privacy policy, which took effect on October 16, now permits data from Gmail, Google Drive, and Google Photos to inform personalized ads — but only if you connect those services to Google’s AI-powered features.
The change was spotted this week by Android Authority and reported by The Verge, and it replaces wording Google had kept nearly identical for more than five years. The policy previously stated that personalized ads were not “based on your content from Drive, Gmail, or Photos.” That sentence now carries a new clause: “unless you choose to make data from these services available to other Google services that support personalized ads.”
What actually changed
The new exception is tied to Personal Intelligence, the opt-in feature that began rolling out in beta earlier this year. It lets Gemini share data across Gmail, Photos, Search, Drive, and other apps so the assistant can answer questions with context about your life. According to 9to5Google, the policy language now reads:
“You may choose to allow certain Google services, including services like Search or Gemini Apps, to access data from other Google services you use, such as Google Photos and Workspace apps like Gmail and Drive, in order to provide you with a more personalized experience, subject to the policies and settings of the accessing service. For example, Search may process some of the data that you allow Search to access to personalize content, including ads.”
That is the key shift. The flat promise became a conditional one: a user who has never linked those accounts to AI Mode or other Search tools is in exactly the same position as before. The promise only narrows at the point of connection.
There is an important nuance here that several outlets flagged. The wording is permissive, not descriptive — it changes what Google may do with mailbox, document, and photo data once a user opts into personalized AI. It is not a stated plan to start serving ads based on your inbox. Google’s own example is deliberately modest: search for “mountain bikes,” and you may see ads for sports equipment on YouTube.
What stays the same
Several guardrails survived the rewrite untouched. Google still says advertisers never receive your Drive, Gmail, or Photos content directly, and it does not share information that personally identifies you — like your name or email address — with advertisers. The company also continues to bar personalized ads built around sensitive categories such as race, religion, sexual orientation, or health.
And the targeting, where it happens, works through an extra layer. According to Techlicious, Google says ads would not be based “directly” on your inbox or photo library. Instead, Search may reference summaries, excerpts, and inferences drawn from connected content. Once you connect a content app, that access extends across Google’s Search services — Search, Discover, Maps, Shopping, Flights, Hotels, Translate, and News — which can draw on information from Gmail, Google Calendar, and Google Photos.
Why it matters now
PPC Land, which compared the new wording against 54 earlier archived versions of the policy, notes the old pledge had stood in identical wording since July 2021. Five years of “never” became “unless” in a single sentence.
For users, the practical question is a trade-off. Personal Intelligence exists so Google’s AI can give better, more personal answers — pulling flight itineraries from email or restaurant picks from photos. That same access is now permitted to inform the ads you see. You can keep the smarter assistant and accept the ad trade-off, or you can disconnect the apps and give up the context-aware answers. There is no setting that grants the context without the ad exception.
How to check your settings
Personal Intelligence remains opt-in, but it is worth verifying where your account stands. Open your Google Account and go to Data & privacy, then Personalization & activity, then Personalization settings. Select Manage Personalized Recommendations in Search services, look under Additional Personal Intelligence, and open Connected Content apps — that is where you can disconnect Google Photos and Google Workspace.
Two caveats are worth knowing. First, disconnecting an app does not erase what Search has already collected: data retained in Search Services History stays until you delete the corresponding activity separately. Second, turning off personalized advertising through My Ad Center does not necessarily stop connected-app information from being processed for AI personalization and model improvement.
The bottom line is narrower than the headlines suggest, but it still matters: a promise that used to cover everyone now covers only those who have not opted into Google’s AI features. If you enabled Personal Intelligence, the inbox-to-ads bridge is officially open — permitted on paper, even if Google has not said it is using it yet.
