Google Privacy Policy Review

This review explains Google’s Privacy Policy in plain language, for people who use Search, Gmail, Maps, YouTube, Gemini, or an Android phone, and for parents setting up a child’s account. It was first checked on September 23, 2026, when the policy was effective May 26, 2026. Google has since published a new version, effective October 16, 2026, and this review was rechecked against it on October 31, 2026, along with the Gemini Apps Privacy Hub and the Google Maps Timeline help page. It is not legal advice.

Primary sources: Google Privacy Policy, Gemini Apps Privacy Hub, and Google Maps Timeline help.

Snapshot

• Covers Google services and affiliates, including YouTube and Android, unless a service has its own policy. Gemini has its own supplementary notice.
• Collects what you create, location, and activity, depending on settings.
• Uses that information to run services and to show ads.
• Lets you allow services such as Search or Gemini to use data from Gmail, Drive and Photos to personalize what you see, including ads in Search.
• Uses publicly available information to help train AI models, including Gemini. Your Gemini chats can be reviewed by people and used to improve Google AI unless you turn Keep Activity off.
• Children under 13 are pointed to a Family Link account, not a regular Google Account.

What they collect

Google collects location when you use its services, to offer directions, nearby results, and ads based on location. The type of location and how long it is stored depend on device and account settings. You can turn Android location off in the phone’s settings app.

Google Maps Timeline has changed. Google’s Maps help page says Timeline is off by default and only turns on if you opt in. Its data now comes from each signed-in device and is saved on that device, which is why Timeline is not available in Maps on a computer. If you turn on backup, Google keeps an encrypted copy on its servers so you can move it to a new phone. Timeline is kept according to your auto-delete setting, or until you delete it.

If you are signed in and have Search Services History or Web & App Activity turned on, activity on Google sites and apps can be saved as history in your Google Account, and some of that activity can include the general area you were in. Google’s Maps help notes it is gradually updating these settings for Search services. If what you see does not match, Web & App Activity still controls history for those services. The policy also lists biometric information if you choose to provide it, and precise GPS when a feature such as navigation needs it.

Who gets the data

Google says it does not share personal information outside Google except in listed cases: with your consent, with a domain administrator if a school or employer manages the account, for legal process, and with service providers acting for Google. It says it will ask for explicit consent to share any sensitive personal information. It may share information that does not personally identify you with publishers, advertisers, and developers, and it says advertisers get only aggregated reports that don’t reveal individual people.

Google does use browsing, search activity, location, and ad interactions to provide advertising. The current policy gives an example: search for “mountain bikes” and you may see ads for sports equipment on YouTube. It says it does not show personalized ads based on sensitive categories such as race, religion, sexual orientation, or health. Ad controls are in My Ad Center.

Easy to miss

• Connecting Gmail and Drive to Search or Gemini. The current policy says you may choose to let services like Search or Gemini Apps access data from Google Photos, Gmail and Drive for a more personalized experience, and that Search may use data you allow it to access to personalize content, including ads. This is a choice you make, so read the prompt before you tap Allow.
• The “we don’t sell” line moved. Our September review quoted the main policy saying Google does not sell personal information. In the version effective October 16, 2026, we could not find that sentence or the California section on the main policy page; it may now be on a separate page. Google’s Gemini privacy notice still says “we do not sell your personal information to anyone.” Not selling is still different from not using your activity for ads.
• History settings are easy to leave on. Search Services History and Web & App Activity are the switches the policy names. Turning off location on the phone does not, by itself, delete history already saved to the account.
• If a school or employer manages the account, the administrator can access it, read stored email, change the password, and suspend the account, according to the policy. A school Chromebook account is often managed.
• Public YouTube videos and public comments can be found by search engines.

Gemini: who sees your chats

Gemini has its own privacy notice, and it is more direct than the main policy. Google says:

• People may read some chats. Human reviewers, including trained reviewers from Google’s service providers, review some Gemini data. Google asks you not to enter confidential information you would not want a reviewer to see. Chats are disconnected from your account before they go to service providers.
• Reviewed chats last three years. Chats that reviewers have seen are not deleted when you delete your activity. Google keeps them, with related data such as language, device type and location, for up to three years.
• Default auto-delete is 18 months. You can change it to 3 or 36 months, or keep chats indefinitely, in Gemini Apps Activity.
• Turning Keep Activity off. Google says that if Keep Activity is off and you don’t send feedback, your future chats are not used to improve its AI models. Chats are still kept with your account for 72 hours, and still used to respond to you and for safety, including with human reviewers.
• Temporary chats are not used to train Google’s AI models.
• Voice and video. Your audio and Gemini Live videos and screenshares are not used to improve Google services by default. Google also notes Gemini can activate by accident, and audio recordings may begin a few seconds before activation.

New technology

Google says it uses publicly available information “to help train Google’s AI models and build products and features like Google Translate, Gemini Apps, and Cloud AI capabilities.” That sentence is about public sources. It is separate from your Gemini chats, which the Gemini notice says can be used to improve Google AI while Keep Activity is on. We did not find a clause in the policy pages opened for this review that says the contents of your private Gmail are used to train Gemini. Do not assume either way beyond what the pages say.

Kids and families

The policy points parents to Google Accounts Managed with Family Link for children under 13, or the applicable age in your country, and to a Family Link privacy guide for children and teens. Voice collection from children’s features on the Google Assistant is called out as its own topic, and YouTube Kids has its own notice. A parent should use a Family Link account for a child rather than an adult Gmail the child can change. Our Google Family Link guide covers the settings.

If a teen uses Gemini, talk about the reviewer point plainly: do not type anything into a chatbot that you would not want a stranger to read.

Older adults

Google uses the account email to warn you about sign-in from an unusual location. That warning is useful. It is also a pattern scammers copy. A real Google security alert does not ask you to read a code to a caller or to install remote-access software. Account recovery and deletion live in the Google Account, which the policy points to for access, correction, and deletion rights. Google’s Privacy Checkup, linked at the top of the policy, walks through the main settings in one place.

What you can turn off

1. Run the Privacy Checkup from your Google Account.
2. On an Android phone, location is in the device settings app. Turn it off if you do not want GPS used.
3. In the Google Account, review Search Services History and Web & App Activity. Turn off the ones you do not want saved, then delete existing history if you want it gone.
4. For Timeline, open the Google Maps app. It is off unless you turned it on. You can turn it off or delete it from My Google Activity, or delete parts of it in the Maps app.
5. For Gemini, open Gemini Apps Activity. Turn Keep Activity off if you don’t want chats used to improve Google AI, change the auto-delete period, or use temporary chats.
6. Check which apps Gemini or Search can access, and turn off any connection to Gmail, Drive or Photos you did not mean to allow.
7. Use My Ad Center to control ad personalization.
8. For a child, set up Family Link instead of sharing an adult account.

What this means for you

Google’s policy is readable. The practical risks for a family are the history switches that stay on, the connections between Gmail or Drive and Search or Gemini that you may have allowed with one tap, and Gemini chats that people may review and keep for three years. Ten minutes in the Privacy Checkup and Gemini Apps Activity covers most of it.

Does Google sell my data?

Google’s Gemini privacy notice says “we do not sell your personal information to anyone.” We could not find that sentence on the main policy page effective October 16, 2026, though earlier versions included it. Either way, Google does use activity and location for its own advertising, and shares non-identifying information and aggregated reports with partners.

Does anyone read my Gemini chats?

Some of them, yes. Google says human reviewers, including from service providers, review some chats, disconnected from your account. Reviewed chats are kept for up to three years even if you delete your activity. To stop future chats being reviewed to improve Google services, turn Keep Activity off.

Is Gemini trained on my email?

The policy says publicly available information is used to help train models such as Gemini, and the Gemini notice says your Gemini chats can be used to improve Google AI unless Keep Activity is off. Neither page we checked says private Gmail contents are used for training. If you let Gemini access Gmail, the Gemini notice and that connection’s settings govern how it is used.

Is Google Maps Timeline tracking me?

Only if you turned it on. Google says Timeline is off by default, stored on your device, and backed up to Google, encrypted, only if you choose backup.

This is not legal advice. Checked October 31, 2026, against the policy effective October 16, 2026. Settings screens move.

Related: Apple Passwords vs Google Password Manager and Amazon Privacy Policy Review. Back to Privacy Policies Watch