Are AI tools such as Gmail’s Gemini accessing your emails? What you need to know

In late 2025, reports emerged that Google had enabled its Gemini AI by default for Gmail, Chat, and Meet users, allowing it to analyze private communications – often without explicit user consent. While Google maintains that Gmail content is not used to train its public Gemini AI models, it can still scan and process emails, attachments, and other data for personalization features like summarizing and drafting replies.

The controversy centers on how this access was enabled by default, the lack of clear user notification, and the complexity of opting out, sparking concerns about privacy and transparency. Here’s what’s happening, why it matters, and what you can do.

Person holding mobile phone while checking email, and AI having access to email

What happened

In October 2025, there were reports that Google had automatically enabled Gemini AI – Google’s advanced, multimodal AI system designed to process text, images, audio, and video – for Gmail, Chat, and Meet users. Unlike previous “opt-in” features, this change was applied by default. Millions of users potentially had their emails, attachments, and even video calls analyzed by AI – without being asked.

When enabled, Gemini in Gmail can access your entire email history, including personal conversations, medical records, financial statements, and confidential attachments. Gemini uses this data to provide “productivity enhancements”, such as summarizing emails, drafting replies, or surfacing key information. However, Google has clarified that this data is not used to train its public AI models – only to power personalized features for individual users.

AI bot scanning emails

Despite this clarification, the lack of transparency around the automatic activation and the buried opt-out process have led to widespread criticism. Google’s privacy policy itself warns users: “Please don’t enter confidential information that you wouldn’t want a reviewer to see or Google to use to improve our services, including machine-learning technologies.” In other words, if you don’t want Google’s AI analyzing your emails, you must take action to disable it.

The Opt-Out process is unclear and buried

Google claims users can disable Gemini’s access to their data. But the process is buried in privacy settings, requiring multiple steps. Many users don’t even realize this setting exists. A class-action lawsuit in California, where privacy laws are among the strictest in the US, alleges that Google intentionally obscured the opt-out, violating privacy laws by collecting data without explicit consent and allowing Gemini to analyze users’ private communications without their knowledge. Google’s official response is that they did not change user settings, but the lawsuit and user reports suggest otherwise.

Opt out button on keyboard

Different rules for US and European users

In the US, Gemini’s access to Gmail is enabled by default, forcing users to manually opt out – a process critics argue is intentionally obscure. This automatic opt-in model is common in the US, where most companies – including Google – enable opting in of data collection of cookies, targeted marketing, data sharing, or AI features by default. Users must actively opt out to protect their privacy. This approach shifts the burden onto users, making privacy protection complex and time-consuming – often requiring navigation through multiple settings.

In Europe, however, the General Data Protection Regulation (GDPR) rejects the automatic opt-out model used in the US. The (GDPR) requires explicit, informed consent from users before processing their personal data. Companies must use an opt-in model, where users actively agree to data collection or processing, rather than an opt-out model, where data collection happens by default unless users take action to disable it.

This means Gemini is not enabled by default – users must actively opt in before it can access Gmail. Google must also comply with stricter data protection rules under GDPR, including transparency about data use and the right to revoke access at any time. This ensures that users have full control and transparency over how their data is used.

GDPR opt in vs opt out

The Core Issue: Trust, Transparency, and Control

Google has confirmed that Gmail content is not used to train its public Gemini AI models, meaning emails aren’t part of the broader AI system. But here’s the real issue: If you enable features like Deep Research” or “Help me write”, Gemini can still access and analyze Gmail, Drive, and Chat content – often without clear communication or meaningful consent.

At its core, this is about transparency and control. Users deserve clarity about how their private emails are being processed. While opting out is possible, the process is neither intuitive nor well-communicated, leaving many unaware of how their data is being used.

If privacy matters to you, the safest step is to limit Gemini’s access. Below, we provide step-by-step instructions to opt out of Gemini in Gmail.

Is the Trade-Off Worth It?

If you’re comfortable with Google’s Gemini AI accessing your private emails, attachments, and conversations, and if you appreciate the convenience of AI-powered assistance – like smart replies, summaries, or automated task management – then these features may be useful for you.

However, it’s worth asking: Does the trade-off between personalized productivity and data privacy align with your priorities? Or do you prefer to maintain full control over who accesses your sensitive information? If so, adjusting your settings to limit AI access or exploring alternatives might be a better choice.

A Better Alternative

If you’re ready to prioritize your privacy, consider transitioning to a secure email service that never enables intrusive features without your explicit consent – putting you in full control of your personal data.

Runbox, based in Norway, adheres to the world’s strictest data protection laws and is committed to being an ethical, transparent, and sustainable choice for your private communications. With Runbox, your privacy is never compromised.

Take control of your digital privacy today. Explore our plans and make the switch.

How to opt out of Gemini in Gmail

European users are not automatically opted in due to GDPR, and the process may differ for Workspace users.

  1. On a computer, open Gmail.
  2. Click the Settings ⛭ icon in the top-right corner.
  3. Select See all settings.
  4. In the General tab, scroll down to the Smart compose, smart reply, and smart features or Google Workspace smart features section.
  5. These features can be turned on or off to manage Gemini’s access to email content for assistance.
  6. Click Save Changes at the bottom of the page. 
  7. Read more about Gemini Apps privacy.
Share: