Google updates privacy rules: Your photos and emails may now drive your ads

The number of Google users potentially affected by a significant shift in data privacy practices is effectively all of them who have opted into personalized AI tools. Starting this month, a subtle but consequential update to Google’s privacy policy has created a new pathway for advertisers to leverage private information. The core of the change, identified by tech news outlet Android Authority, introduces an exception to a long-standing promise. Previously, the tech giant explicitly stated it would not use data from Drive, Gmail, or Google Photos for personalized advertising. That blanket protection has now been modified to include a critical caveat: the promise no longer holds if a user actively chooses to make data from these services available to other Google platforms that support personalized ads.

The specific language added to the terms as of October 16th reads: “unless you choose to make data from these services available to other Google services that support personalized ads.” This phrasing transforms a passive privacy default into an active choice. According to the new terms, enabling the feature that shares data for better AI recommendations simultaneously opens that data up for more personalized advertising. The connection is direct: the same mechanism that allows Search and other tools to understand you better for AI responses also allows that understanding to inform the ads you see.

This policy shift impacts anyone who has connected their Drive, Gmail, or Google Photos to AI Mode and other Search tools through Google’s Personal Intelligence feature. This feature was designed to allow those tools to provide better responses or recommendations by knowing more about the user’s digital life. By granting Search access to these personal repositories, users may now find that their ad feed reflects the content of their emails or the subjects of their photo albums. The policy explicitly states that “Search may process some of the data that you allow Search to access to personalize content, including ads.”

The scope of this data usage is detailed in the updated policy documents. It explains that users may choose to allow certain Google services, including Search or Gemini Apps, to access data from other Google services they use, such as Google Photos and Workspace apps like Gmail and Drive. The stated purpose is to provide a more personalized experience, subject to the policies and settings of the accessing service. The document provides a specific example of how this works in practice: if a user searches for “mountain bikes” in Search, they may subsequently see ads for sports equipment on YouTube, based on that interest profile.

Despite the broadened access, Google maintains that the change does not mean advertisers get direct access to the raw contents of a user’s Drive, Gmail, or Photos. Advertisers do not receive personally identifying details such as a user’s name or email address. Furthermore, the company asserts that it will not show users ads based on sensitive categories, including race, sexual orientation, religion, or health. This distinction is crucial for understanding the balance Google is striking between personalization and privacy protection in the new framework.

The update highlights the increasing interconnection between Google’s various services. The Personal Intelligence feature, which allows AI tools to draw on private data for improved performance, is now explicitly linked to the advertising ecosystem. This means that the act of connecting your personal files to your search engine is no longer just a step toward better AI answers; it is also a step toward a more targeted ad experience. The policy clarifies that depending on user settings, personalized ads may be shown based on interests, activity, or personalized content from these Google services.

For users who prefer to keep their personal data separate from their advertising profile, the policy provides a clear path to opt out. Individuals can choose which specific apps they want to disconnect from Search’s Personal Intelligence features. Alternatively, users can disable Personalized Recommendations entirely through the Search Services Personalization settings page. This allows for granular control over which data streams are used for personalization versus which remain siloed.

The stakes for consumers lie in the trade-off between enhanced AI utility and data exposure. By enabling these features, users gain access to more context-aware AI interactions but accept that this context may influence their ad experience. The policy change does not force this sharing; it remains an opt-in process. However, the updated language makes the connection between data sharing and ad targeting explicit in a way that was not previously as clear in the primary policy statements.

This development is part of a broader trend where technology companies refine their data usage policies to support new AI capabilities. The update, spotted by Android Authority, underscores the importance of reviewing privacy settings, especially for those who use multiple Google services in conjunction with AI tools. As AI features become more integrated into daily digital workflows, the boundaries between personal data, search functionality, and advertising are becoming increasingly porous, requiring users to stay informed about how their choices affect their digital footprint.