Google Gemini
Google · Chat assistant · US · gemini.google.com
services/google-gemini.yamlVendor data-handling terms
Keep Activity is on by default for consumer accounts. Turning it off, or using temporary chats, stops chats being used to improve Google AI with human review. Google states its own settings do not control anonymised processing used to improve services. Workspace accounts are governed by the separate Workspace privacy hub and are not covered by this consumer notice.
“Visit Gemini Apps Activity to review and delete your activity (including imported chats), change your auto-delete period, and control whether your data is used to improve Google AI. / You can also use temporary chats , which are not used to improve Google AI with help from human reviewers. / Please don’t enter confidential information that you wouldn’t want a reviewer to see or Google to use to improve our services, including machine-learning technologies.”
Auto-delete can be set to 3, 18, or 36 months, or indefinite. Data reviewed by humans is not deleted with the user's activity.
“You can change your auto-delete setting in Gemini Apps Activity from the default of 18 months to 3 months, 36 months, or indefinite. / Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. / Instead, they are retained for up to three years.”
The Gemini Apps Privacy Hub defers retention and storage detail to the Google Privacy Policy, which does not commit to a storage region for consumer accounts. Workspace data-residency terms are separate and pending review.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| gemini.google.com | app | observed |
| bard.google.com | app | observed |
| generativelanguage.googleapis.com | api | observed |
| aistudio.google.com | app | vendor-documented |
Assessment
Reasoning: On a consumer account the default setting sends chats to human review and model improvement, the vendor itself warns against entering confidential information, and reviewed chats survive deletion for up to three years. That is the highest exposure profile among the major assistants for a personal account used at work. Workspace accounts run under different terms that have not yet been verified here, so they are unrated rather than assumed safe.
Flags: GDPR Art. 28 (no processor agreement on consumer accounts) · GDPR Chapter V (storage region not committed for consumer accounts) · Assessed 2026-09-15. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-15Documented. Consumer-account training, human review, and retention terms verified against the Gemini Apps Privacy Hub. Workspace terms pending.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.