Gemini Apps Hub

Red flag

Human reviewers see your chats without account connection

Google disconnects your chats from your account before sending them to human reviewers, but reviewers can still access your full conversation content—including personal details, sensitive information, and files you upload—for up to 3 years even after deletion.

Unintended voice activations trigger full data collection

Gemini can activate accidentally when it hears sounds resembling "Hey Google," and these accidental recordings are treated identically to intentional ones—collected, stored, and used to train AI models if Keep Activity is on—without requiring explicit permission for each activation.

Red flag

Canvas app creators can access and permanently store your data elsewhere

When you share data with user-generated Canvas web apps, the app creator can see everything you share and save it to their own servers or locations outside Google's control, and you cannot delete this data once shared—only the creator can.

Last indexed Jul 22, 2026 · View full policy