Google Updates Privacy Policy to Allow AI‑Driven Ads Using Gmail and Photos Data

Google has revised its privacy policy to explicitly state that when users engage with its personalized AI tools in Search or the Gemini model, the company may draw on information from other services such as Gmail and Google Photos to deliver more targeted advertising.

The personalized AI features, rolled out earlier this year, provide contextual answers, draft emails, or generate images based on user queries, leveraging the same data that powers the broader Google ecosystem. By linking that activity to ad delivery, Google aims to align ad content with the interests reflected in a user’s personal files and communications.

The change arrives amid ongoing debate over how big‑tech firms monetize user data. Google has previously adjusted its terms after regulatory pressure in Europe and the United States, and the new wording clarifies a practice that critics have long suspected.

For everyday users, the policy means that a photo stored in Google Photos or an email conversation could influence the ads shown after a search query or a Gemini‑generated response. While the company emphasizes that the data is used in aggregate and without exposing raw content, the possibility of cross‑service profiling raises privacy concerns.

Google says participation in the personalized AI experience is optional and that users can disable the feature through their account settings. The policy notes that opting out will limit the ability to receive AI‑enhanced results but will not affect the core functionality of Search.

Privacy advocates have warned that even with an opt‑out option, the default inclusion of personal data in ad targeting could erode expectations of confidentiality. Legal scholars point out that the approach may test the boundaries of existing data‑protection laws, especially in jurisdictions with strict consent requirements.

The update is likely to draw further scrutiny from regulators and consumer‑rights groups. Observers expect that Google may face additional requests for clarification or enforcement actions, while the company may adjust its settings or provide clearer notices in response to public feedback.