Citenook

Blog · Privacy

Is Gemini safe? What Google does with your chats

Illustration: a calendar page with a clock, linked by dotted lines to a chat bubble with one highlighted line above a switch, and a blue shield with a padlock under a watching eye.

Google's Gemini chatbot is safe to use for everyday questions, but on a personal account it isn't private by default. If you're 18 or over, Keep Activity is on, so Google keeps your chats for 18 months, uses them to improve its AI models, and has human reviewers read a sample, keeping those for up to three years. You can turn that off. Work and school accounts don't train on your chats or send them to reviewers.

This guide is about Google's Gemini AI app, not the Gemini crypto exchange. It covers training, how long chats are kept, who can read them, memory and connected apps like Gmail, work accounts, how Gemini compares with ChatGPT and Claude, other risks, and the settings to change. Facts come from Google's Gemini Privacy Hub and help pages, checked on 23 October 2026.

Does Gemini train on your chats?

Yes, by default on personal accounts. The setting is called Keep Activity, and Google's help page says: "If you're 18 or over, Keep Activity is on by default." Here's how Google describes it on the setting itself:

Google's Gemini Apps Activity page with Keep activity switched on, auto-delete set to 18 months, and the option to improve Google services with audio and Gemini Live videos unticked.
Gemini Apps Activity on a personal account we checked on 23 October 2026: Keep activity on, deleting activity older than 18 months.
  • On: your chats help "improve Google services, including AI models."
  • Off: new chats aren't used to improve AI models unless you send feedback, but Google still keeps them for up to 72 hours to respond to you and for safety.
  • To turn it off: on gemini.google.com, open Settings & help, then Activity, click On and choose Turn off. You can also delete past activity there.
  • For one chat: start a Temporary chat. Google says temporary chats "are not used to train Google's AI models."

A separate checkbox covers your voice and Gemini Live videos and screen shares; it was off in the account we checked.

How long Gemini keeps your chats

WhatHow long (personal account)
Chats with Keep Activity on18 months by default; you can choose 3 or 36 months or no auto-delete
Chats with Keep Activity off, and temporary chatsUp to 72 hours
Chats picked for human reviewUp to three years, even if you delete your activity
Feedback you sendUp to three years

Most articles quote only one of these numbers. They're three different clocks: 18 months is the default, 72 hours applies only when activity is off, and three years applies only to reviewed chats.

Who can read your Gemini chats?

Google says "a subset of chats are reviewed by human reviewers," including its trained service providers, and that chats "are disconnected from your account" before they're sent to reviewers. Its own advice: "Please don't enter confidential information that you wouldn't want a reviewer to see."

Google also says it does "not sell your personal information to anyone," that your Gemini chats "are not being used to show you ads," and that chats are "not end-to-end-encrypted by Google," which means Google's systems can read them.

Memory and connected apps like Gmail

  • Memory of past chats only works with Keep Activity on; Google says it "isn't available when this setting is off." Manage it under Personal Intelligence in settings.
  • Connected apps let Gemini read Gmail, Calendar, Drive, Photos and more. Google says connecting apps is off until you turn it on.
  • Training: Google says Gemini "does not train generative AI models directly on your Gmail inbox, Drive, Contacts, Calendar" and similar apps. With Keep Activity on, it can still use your prompts, Gemini's answers, and summaries or excerpts from those apps to improve its models.
  • Google's own warning: don't connect apps to Gemini if they contain personal or confidential information you wouldn't want used that way.

Is Gemini safe for work and confidential files?

On a Google Workspace account, it's much safer. Google says "Workspace does not use customer data for training models without customer's prior permission," and that chats and uploaded files in the Gemini app "won't be reviewed by human reviewers." Admins control how long chats are kept: 3, 18 or 36 months, with 18 as the default. Workspace lists ISO 27001, ISO 42001 and SOC 2 among its certifications and can support HIPAA workloads with a signed agreement.

Two catches. Some Workspace editions include Gemini as an "additional service" with different terms, so check yours with your admin. And Google says Gemini in Chrome isn't covered by its ISO and SOC compliance or its HIPAA agreement.

A personal Gmail account used for work follows the personal rules above. If you handle client files, your professional rules still apply; see our guides to ChatGPT for lawyers and AI for HR, which apply to Gemini too.

Gemini vs ChatGPT vs Claude on privacy

GeminiChatGPTClaude
Personal plans train on chatsYes, with Keep Activity on (default for adults)Yes, unless you turn it offIf "Help improve our AI models" is on
How long chats are kept18 months by defaultUntil you delete them, then within 30 daysUntil you delete them, then within 30 days
Human reviewA subset, kept up to 3 yearsStaff and outside reviewersNot by default
One-off private chatTemporary chat, 72 hoursTemporary Chat, 30 daysIncognito, 30 days
Business plans trainNo, on core WorkspaceNo, by defaultNo, by default

More detail in is ChatGPT confidential and is Claude safe. The plan and settings matter more than the brand.

Other risks to know about

  • Fake Gemini downloads. Security researchers at Darktrace reported a fake "Gemini for Windows" installer in July 2026 that spread password-stealing malware. Use gemini.google.com or the official app stores; Gemini doesn't need an installer that asks you to turn off antivirus.
  • Kids and teens. Children under 13 need a parent to manage access through Family Link, and Google says its extra filters for younger users "are imperfect." Common Sense Media, an outside group, rated the under-13 and teen versions "High Risk" in 2025.
  • Accuracy. Like every chatbot, Gemini can make mistakes. Check anything important against the original source.

How to use Gemini more privately

  1. Turn off Keep Activity: Settings & help, Activity, then Turn off.
  2. Or shorten auto-delete to 3 months if you want to keep history.
  3. Use a Temporary chat for anything sensitive.
  4. Review Memory and Connected Apps under Personal Intelligence, and disconnect apps you don't need.
  5. Use a Workspace account for work, not a personal one.
  6. Install only from official sources.

When files shouldn't leave your computer

For documents you can't send to any company, the AI has to run on your own machine. Citenook is a Mac app that answers questions from your files with a model running on the Mac, so nothing is uploaded, and every answer links to the passage it came from. If you'd rather use Gemini for the answers, Citenook can use your own Google API key: only the passages picked for that answer are sent, and names and numbers are hidden first. See how it fits lawyers and doctors.

It's Mac only, doesn't search the web or connect to Gmail like Gemini, and starts at $9.99 a month after a 30-day free trial. See privacy and security for what goes where.

Questions

Is Gemini safe to use?

For everyday questions, yes. For private information, change the defaults first: on personal accounts Gemini keeps chats for 18 months, uses them to improve its models and has humans review a sample.

Does Gemini train on my data?

On personal accounts, yes while Keep Activity is on, which is the default for adults. Turn it off or use a Temporary chat. Core Workspace accounts aren't used for training.

Can Google employees read my Gemini chats?

A subset of chats is reviewed by human reviewers, including Google's service providers, after being disconnected from your account. Reviewed chats are kept for up to three years.

Does Gemini read my Gmail?

Only if you connect Gmail to Gemini, which is off until you turn it on. Google says it doesn't train its models directly on your inbox.

Does Google use Gemini chats for ads?

Google says your Gemini chats are not being used to show you ads, and that it will tell you clearly if that changes.

Is Gemini safer than ChatGPT?

Not by default. Gemini keeps chats for 18 months and has humans review some; ChatGPT also trains by default but deletes chats within 30 days after you delete them. On business plans, neither trains on your data.

Sources, checked 23 October 2026: Google Gemini Apps Privacy Hub, managing Gemini Apps activity, memory of past chats, connected apps, Gemini with work and school accounts, Gemini for children and the Workspace generative AI privacy hub; Google's Personal Intelligence announcement. Fake installer as reported by Darktrace; teen rating by Common Sense Media. ChatGPT and Claude facts from our earlier guides. Screenshot from our own account settings.

Try it on your own files.

Every feature free for 30 days. No card needed.