Google Privacy Policy Update Opens Gmail Data to Ad Targeting

Google removed a two-year-old explicit promise that Gmail, Drive and Photos content would never feed its advertising business. The change appeared in the company's privacy policy on October 16 and was first spotted by Android Authority. Google has not said why the language changed.

The previous policy was unambiguous. "We don't show you personalized ads based on your content from Drive, Gmail, or Photos," the document stated. Google has now replaced that sentence with softer wording that leaves the door open to using data from those apps in ads when it is shared with other Google services. The old guarantee is gone. What remains is conditional language, not a prohibition.

Why does the timing matter?

The revision lands months after Google launched Personal Intelligence, a system introduced in early 2026 that lets users route data from multiple apps into Google AI products such as Gemini. The stated purpose is better answers through added context. A user's email history, photo library and stored documents give the AI models raw material to draw on.

That same mechanism now intersects with advertising. Under the updated policy, content shared across Google services — which is precisely what Personal Intelligence does — could inform personalized ads. The company built the pipeline and then rewrote the rules governing it.

What changed in the policy text?

The shift is narrow but consequential:

• The explicit exclusion naming Drive, Gmail and Photos has been deleted.
• The replacement text permits use of such data when shared with other Google services.
• Google's core business remains advertising, and the company holds vast stores of personal content across its platforms.

Google has long positioned the sensitive-data firewall as a trust signal for its free consumer products. Ars Technica, which reported the change, characterized using Google services as "fundamentally precarious" for that reason: the world's largest advertising company sits on an enormous pool of personal information, and the boundary between that pool and its ad engine was the policy's only stated guardrail.

How did we get here?

The sequence is short. Google launched Personal Intelligence in early 2026, enabling cross-app data sharing for AI features. By October 16, the privacy policy no longer bars ad personalization based on Drive, Gmail or Photos content shared through such mechanisms. Ars Technica's January 2026 coverage of the launch noted that Gemini could scan photos, email and more to improve answers — and flagged the arrangement as a privacy minefield even then.

Google's original promise dated from an era of regulatory scrutiny over how its ad business uses sensitive user content. Deleting the sentence does not confirm that Gmail content already informs ads today. It confirms that Google no longer rules it out, and that the policy now accommodates the data flows Personal Intelligence creates.

What happens next?

Users who do not share app data through Personal Intelligence retain the practical, if unstated, separation. Users who enable it face a different bargain: richer AI answers in exchange for content that may now shape the ads they see. Regulators in the European Union and United States have previously examined Google's data combination practices, and a policy revision this explicit is likely to draw fresh attention. Google has not announced any new ad products tied to the change, and the competitive question — whether AI-assisted personalization built on email and photo content becomes a standard feature of its advertising stack — remains open.