Google updates privacy policy to allow personalized ads based on Gmail, Drive and Photos data when users connect them to Personal Intelligence AI features

As of 16 October 2026, Google's privacy policy carries a new exception to its promise not to use Gmail, Drive or Google Photos content for personalised ads. The exception applies if a user chooses to make that data available to other Google services that support personalised ads. In practice, people who connect those apps to Personal Intelligence in AI Mode, Search or Gemini may see ads personalised using that content. Google says advertisers do not receive the data or personal identifiers, and that sensitive categories such as race, sexual orientation, religion and health are excluded. The Verge quotes the policy wording, but the extraction lists no primary link, so the exact policy text and the date are worth checking against Google's own page.

The change affects people who opt in to connecting their private apps to Google's AI features. For them, a feature sold as better recommendations can now also feed ad targeting, which is a real narrowing of an earlier promise. Anyone who has not connected those apps appears unaffected. It also matters for privacy and data protection regulators, because it tests what counts as meaningful consent when one switch serves both AI help and advertising. Professionals advising staff or clients on Workspace-style accounts should check whether this reaches work or education accounts, which the coverage does not make clear.

The headline framing ("Now Google says it might...") leans towards alarm: this is opt-in, uses the word "may", and Google says no advertiser sees your content. It is also not a fresh scoop, since Android Authority spotted the change first. What is missing is any evidence of how the ad targeting actually works, how much of the content is used, or whether any ads have yet been shown on this basis.

1. 01Whether Google's own policy page, help documentation or Personal Intelligence settings confirm the exact wording, and whether the connection toggle and the Personalised Recommendations setting are clearly separate and explained at the point of opt-in.
2. 02Any response from regulators such as the UK ICO, the Irish DPC or the European Commission in the coming weeks, including formal enquiries about consent and purpose limitation.
3. 03Evidence of real ads shown from connected Gmail, Drive or Photos content, plus whether Google applies the same terms to Workspace, work and school accounts or to other regions.