Google’s latest privacy policy update has brought a familiar question back into focus: how much of your personal information can influence the advertisements you see online? With Gmail, Google Drive and Google Photos increasingly connected to its AI-powered services, a change in the company’s wording has raised fresh concerns about the boundaries between personal data, artificial intelligence and advertising.

The revised policy, effective October 16, 2026, clarifies a condition that users may want to understand before connecting their Google accounts to new AI features. The change does not mean every Gmail inbox or Photos library is automatically being used to target advertisements, but it does make the implications of certain cross-service connections more explicit.

What Changed in Google’s Privacy Policy on October 16, 2026?

The key development appears in Google’s explanation of how it provides personalised services, including content and advertisements.

In its updated privacy policy, Google explains that users may allow services such as Search or Gemini Apps to access information from other Google services, including Google Photos and Workspace applications such as Gmail and Drive. This access can help provide a more personalised experience.

The policy goes further by explaining that Search may process some of the information it is permitted to access “to personalise content, including ads.”

That wording is central to the controversy surrounding the update. Google also retains a specific restriction on personalised advertising based on content from Gmail, Drive and Google Photos, but now explicitly identifies an exception when users choose to make data from those services available to other Google services that support personalised advertising.

In other words, the distinction is between information remaining within an individual service and information a user deliberately makes available to another service.

The update does not establish that Google has started routinely scanning every user’s inbox, documents or photo library to build advertising profiles. Instead, it describes a conditional pathway through which information shared across connected services can contribute to personalised content, including advertisements.

Protecting Your YouTube Account
Account security matters when managing connected Google services and personal information online. Learn about YouTube’s temporary hacked-channel freeze feature and what it means for creators.

How Google’s Personal Intelligence Feature Fits Into the Change

Google’s Personal Intelligence feature is an important part of the story because it is designed to connect information across the company’s products.

Personal Intelligence allows eligible users to connect services such as Gmail, Google Photos, Search and YouTube to Google’s AI experiences. Gemini can then use information from connected services alongside a user’s prompt, preferences and previous chats to provide more personalised responses.

Google describes the feature as optional, with users deciding which applications to connect. Its current documentation also identifies availability restrictions and an age requirement of 18 or older. The feature is rolling out as a beta to eligible users.

This creates an important distinction: connecting a personal account to an AI service does not automatically mean every other Google product receives unrestricted access to that information.

Instead, the implications depend on which services are connected, what information the receiving service can access, and which policies and settings apply to that service.

The October policy update makes the advertising implications of this connected ecosystem more explicit, particularly when information becomes available to a service that supports personalised advertisements.

Google Had Already Connected Gmail and Photos to AI Mode in Search

The policy clarification did not appear in isolation. Google had already introduced ways for personal information from Gmail and Google Photos to inform its AI-powered Search experience.

On January 22, 2026, Google announced Personal Intelligence for AI Mode in Search. Initially, eligible Google AI Pro and Google AI Ultra subscribers could opt in to connecting their Gmail and Google Photos accounts to the feature.

The aim was to let AI Mode use personal context to produce more tailored responses to Search queries. Google described the connections as strictly opt-in and said users could turn them on or off.

Google also said AI Mode would not train directly on a user’s Gmail inbox or Google Photos library. Instead, it described limited information, such as particular AI Mode prompts and model responses, as being used to improve functionality.

That announcement established the product framework behind the October clarification: Google Search can receive personal information from other Google services when users explicitly enable the relevant connections.

The newer policy language addresses what an advertising-supported service may do with information it is permitted to access.

Does Google Use Gmail Messages for Advertising?

The answer requires an important distinction between Google’s AI products and its advertising-supported services.

Google’s Personal Intelligence documentation describes how Gemini can use connected applications to provide personalised responses. However, that does not mean every interaction with Gemini automatically turns the contents of a connected Gmail account into advertising data.

The advertising issue highlighted by the updated policy is particularly relevant to Google services that support personalised advertising. Google’s policy specifically identifies Search as an example of a service that may process accessible information to personalise content, including ads.

The distinction matters because AI personalisation and advertising personalisation are not necessarily the same activity.

A service might use personal context to provide a more relevant response, while advertising-related processing depends on the receiving service’s capabilities, applicable policies and settings.

Google’s revised wording explicitly recognises that information users choose to make available across services can potentially contribute to personalised advertising. It does not establish that all connected data is automatically used for that purpose in every Google product.

Google Says Advertisers Do Not Receive Users’ Private Messages

Another key question is whether the update gives advertisers direct access to Gmail messages, Drive documents or Google Photos libraries.

Google’s privacy policy says it does not share personally identifying information with advertisers, including a user’s name or email address, unless the user asks Google to do so.

The company also states that it does not use sensitive categories such as race, religion, sexual orientation or health to show personalised advertisements.

This distinction is important: Google using information within its own services to personalise an advertising experience is not the same as handing an advertiser the underlying personal content.

Reporting by Ars Technica also addressed the concern. According to the publication, a Google spokesperson said the clarification did not represent a change in how the company handles users’ data with advertising partners. The spokesperson also said Google was not scanning an entire inbox to improve an advertising profile and was not giving that personal information to third parties.

These statements provide important context for interpreting the policy. The update clarifies a potential use of information within Google’s connected services rather than announcing unrestricted access for advertisers.

Why Google’s AI-Powered Search Makes This Significant

The broader privacy question concerns how much personal context an AI-powered service can use when tailoring a user’s experience.

Personal Intelligence allows AI Mode to draw on information from services such as Gmail and Google Photos when users deliberately connect them. That information can help the service produce responses that reflect a person’s circumstances and preferences.

The updated privacy policy adds another consideration: Search may process some of the data it is allowed to access to personalise content, including advertisements.

Consequently, when a user connects personal information to an advertising-supported Google service, that service may have a broader range of contextual information available when personalising the experience.

However, the policy does not justify the conclusion that Google is now using everyone’s Gmail messages or Photos libraries for ad targeting. The stated exception depends on users choosing to make information available to other Google services that support personalised advertising.

What Google’s Policy Still Says About Gmail, Drive and Photos

Despite the newly explicit exception, Google’s privacy policy continues to address these three services directly.

Policy detail	What Google says
Effective date	October 16, 2026
Services covered by the restriction	Gmail, Google Drive and Google Photos
General advertising restriction	Google says it does not show personalised ads based on content from these services
Exception	Users choose to make data available to other Google services that support personalised advertising
Example of a receiving service	Search may process accessible data to personalise content, including ads
Advertiser access	Google says it does not share personally identifying information with advertisers unless the user asks it to do so

The continued restriction is why describing the update as a complete removal of Google’s previous protection would be misleading.

The central development is the clearly stated exception for cross-service data access. The policy retains the restriction while explaining the circumstances in which information made available to another Google service may be used for personalised advertising.

Does the Policy Allow Advertising Based on Sensitive Personal Information?

Google’s policy continues to state that sensitive categories are not used to show personalised advertisements.

The company specifically identifies race, religion, sexual orientation and health among the categories it says it does not use for personalised advertising. Google also says advertisers using its advertising services must follow the same restriction.

The October 16 update should therefore not be interpreted as unrestricted permission to use sensitive personal information for advertising.

Rather, it concerns the broader possibility that information voluntarily made available across Google’s services can contribute to personalised content, including ads, subject to the receiving service’s applicable policies and settings.

How to Review Google’s Connected Services and Ad Personalisation Settings

Users concerned about their personal information can review the connections they have enabled and the advertising controls available to them.

Google’s Personal Intelligence documentation explains that users can manage which applications are connected. For AI Mode, Google’s announcement directs users to Search personalisation settings and the Connected Content Apps controls.

Where these controls are available, users who do not want Gmail or Photos information accessible through connected AI experiences can review their settings and disconnect applications.

The available options can vary depending on the account, product, subscription, region and feature availability.

Users can also visit My Ad Center to review and manage information used to personalise advertisements.

One distinction is worth remembering: disconnecting an application and deleting previously stored activity are not necessarily the same action. Anyone concerned about information shared previously should review Google’s separate activity and data-management controls rather than assume disconnecting a service automatically removes all historical information.

Exploring Google’s AI Tools
Google is expanding the ways users can create and interact with software through AI-powered tools. See how Google’s AI app creation feature works for more on the company’s AI ecosystem.

Conclusion: What Google’s Privacy Policy Update Really Means

Google’s October 16, 2026, privacy policy update clarifies how information from Gmail, Google Drive and Google Photos may contribute to personalised experiences when users choose to make it available to other Google services.

The existing restriction on personalised advertising based on content from these services remains, but the policy now explicitly describes an exception for cross-service access involving services that support personalised ads.

The timing is significant as Google expands Personal Intelligence across Gemini and Search, including AI Mode’s ability to use connected Gmail and Photos information.

Google says these connections are optional, users control which services they connect, and advertisers do not receive the underlying personal information directly.

The most accurate conclusion is not that Google has begun using every user’s private messages to target advertisements. It is that the company’s current policy explicitly identifies a route through which information users voluntarily share with eligible Google services can inform personalised advertising.

For users, understanding connected-app permissions and reviewing personalisation settings remains an important part of managing how their information is used across Google’s increasingly interconnected services.

Source and Research Disclaimer

This article has been prepared based on research into the sources provided below, including Google’s published privacy policy, official product documentation, company announcements and relevant media reporting. It reflects the information available in those sources as of October 24, 2026, and does not imply independent verification beyond the material reviewed. Google’s policies, product availability and privacy controls may change after publication.

Sources

• Google Privacy Policy — effective October 16, 2026
• Google: Personal Intelligence in AI Mode in Search
• Google Gemini: Personal Intelligence
• Google Gemini Help: Connected Apps and Personalisation
• Ars Technica: Updated Google Privacy Policy Says Your Gmail Might Be Used for Advertising
• Android Authority: Google Makes a Privacy Policy Exception to Use Your Gmail and Photos Data for Ads

Featured Image Credit: Ready Made / Pexels