# Google Gemini privacy rating

AI assistant from Google for questions, writing, coding and image generation, connected to Google services such as Gmail and Drive. Available on the web and in Android and iOS apps.

## Summary

Google Gemini scores 35 out of 100 (grade F) on the AI assistants criteria. It meets 3 of 11 criteria: no ads or data sales, transparency report and tells users about requests. It partly meets TLS configuration, no training on your data and no account needed. It does not meet open source, no trackers or telemetry, independent audit, runs locally and limited chat retention. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B.

- Website: https://gemini.google.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Android, iOS
- Category: [AI assistants](https://privacyratings.com/ai-assistants/)
- Also rated: [Gmail](https://privacyratings.com/email-providers/gmail/) (Email providers), [Gmail app](https://privacyratings.com/email-clients/gmail-app/) (Email clients), [Google Takeout](https://privacyratings.com/email-backup/google-takeout/) (Email backup tools), [Google Chrome](https://privacyratings.com/browsers/google-chrome/) (Browsers), [Google Search](https://privacyratings.com/search-engines/google-search/) (Search engines), [Google Authenticator](https://privacyratings.com/two-factor-authentication/google-authenticator/) (Two-factor authentication), [Google Messages](https://privacyratings.com/messengers/google-messages/) (Messengers), [Google Meet](https://privacyratings.com/video-calls/google-meet/) (Video calls), [Google Voice](https://privacyratings.com/virtual-phone-numbers/google-voice/) (Virtual phone numbers), [Google Public DNS](https://privacyratings.com/dns-resolvers/google-public-dns/) (DNS resolvers), [Google Cloud](https://privacyratings.com/server-hosting/google-cloud/) (Server hosting), [Chrome Remote Desktop](https://privacyratings.com/remote-desktop/chrome-remote-desktop/) (Remote desktop), [Google Keep](https://privacyratings.com/notes/google-keep/) (Notes), [Google Calendar](https://privacyratings.com/calendars/google-calendar/) (Calendars), [Google Docs](https://privacyratings.com/office-suites/google-docs/) (Office suites), [Google Forms](https://privacyratings.com/forms/google-forms/) (Forms and surveys), [Google Translate](https://privacyratings.com/translation/google-translate/) (Translation), [Google Drive](https://privacyratings.com/cloud-storage/google-drive/) (Encrypted cloud storage), [Google Maps](https://privacyratings.com/maps/google-maps/) (Maps and navigation), [Google Analytics](https://privacyratings.com/web-analytics/google-analytics/) (Website analytics), [Google Home](https://privacyratings.com/smart-home/google-home/) (Smart home), [Google Nest Cam](https://privacyratings.com/security-cameras/google-nest-cam/) (Security cameras), [Fitbit](https://privacyratings.com/wearables/fitbit/) (Wearables and health), [Google Fit](https://privacyratings.com/fitness-trackers/google-fit/) (Fitness trackers), [Google Photos](https://privacyratings.com/photo-management/google-photos/) (Photo management)
- Grade: F (35/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Google collects activity, device and usage data across its services, including Gemini, and this cannot be fully turned off. | https://policies.google.com/privacy |
| No ads or data sales | Yes | No ads are shown in Gemini, and Google states chats are not used to show ads, though it says it will announce any change. | https://support.google.com/gemini/answer/13594961 |
| Independent audit | No | No independent audit of the consumer Gemini app is published. |  |
| Transparency report | Yes | Google publishes counts of government requests for user data and how it responds, updated twice a year. | https://transparencyreport.google.com/user-data/overview |
| Tells users about requests | Yes | Google emails the user before disclosing data in response to a government request, unless prohibited by law. | https://policies.google.com/terms/information-requests |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=gemini.google.com&hideResults=on |
| Security headers | Not tested yet | Not tested yet. |  |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No training on your data | Partial | With Keep Activity on, which is the default, chats are used to train models. Turning it off stops this. | https://support.google.com/gemini/answer/13594961 |
| Runs locally | No | Hosted only. |  |
| Limited chat retention | No | Activity is kept for 18 months by default, and chats reviewed by human reviewers are kept for up to three years even after deletion. | https://support.google.com/gemini/answer/13594961 |
| No account needed | Partial | Gemini can be used without signing in to a Google account, with fewer features. | https://support.google.com/gemini/answer/13594961 |

Source: https://privacyratings.com/ai-assistants/google-gemini/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/ai-assistants/google-gemini.md