Google's Gemini Connected Apps Help Page States That a Subset of Connected Gmail and Drive Data Is Reviewed by Humans, and Its 2023 "Not Seen by Human Reviewers" Statement Now Carries an Update

Google's Gemini help page on Connected Apps now states that when apps are connected to Gemini, a subset of the Connected Apps data Gemini processes is reviewed by human reviewers, including trained service providers. The scope covers interactions, summaries, excerpts and inferences from relevant emails and files, and for a brief email or file the summary may just be the original; the page warns users not to connect apps containing confidential information they would not want a reviewer to see. An October 2023 Google blog post had said content from Gmail, Docs and Drive used through Workspace extensions is not seen by human reviewers, and that sentence is now followed by an update dated October 16, 2026. The wording drew attention on Hacker News on November 9 through a GitHub repository, whose author's test findings have not been independently verified.

What the help page says now

Google's Gemini help page "About personalization with Connected Apps" states that when apps are connected to Gemini, a subset of the Connected Apps data Gemini processes is reviewed by human reviewers, including trained service providers, to debug the services, help keep them safe and improve them. The listed scope includes interactions, summaries, excerpts and inferences from relevant emails and files, with a note that where an email or file is brief or particularly relevant to the prompt, the summary may just be the email or file; summaries and inferences from Google Wallet and payment services information are also included. Under an "Important" label, the page tells users not to connect apps that contain confidential information they would not want a reviewer to see. Connectable apps include Workspace services such as Gmail, Calendar and Drive, as well as Search services, Contacts, Wallet, Photos and YouTube.

A paragraph added after the 2023 sentence

Google's October 12, 2023 blog post "Our responsible approach to building guardrails for generative AI" said that for users of the Workspace extensions in Bard, content from Gmail, Docs and Drive is not seen by human reviewers, used to show ads, or used to train the Bard model. That sentence is now followed by a note marked "Update, October 16, 2026": once users choose to enable new features that connect Workspace apps to other Google services, that data is processed for personalization, can be used to train generative AI models depending on the user's settings, and can also be subject to human review in limited circumstances.

The safeguards Google lists, and the claims still unverified

The help page says that before service providers review the data, Google disconnects interactions from the user's account and reduces the personal information in them, except when addressing abuse or harm; outside such cases and user-submitted feedback, human reviewers do not view media from the Photos library. Disconnecting an app does not delete existing Gemini Apps activity; deleting that activity prevents its future use for product improvement, unless it has already been reviewed by reviewers.

The wording drew attention on November 9 when the GitHub repository thisisme6598/gemini_files reached Hacker News. The repository's author also claims that Gemini retrieves emails on its own in ordinary conversation without tags such as @Gmail, sometimes pulling in the full original text; this is the author's own testing and has not been independently verified. No public response from Google was found as of verification.

via: Gemini Apps Help: About personalization with Connected Apps, Google Blog: Our responsible approach to building guardrails for generative AI, GitHub: thisisme6598/gemini_files