How-toCybersecurity6 min read
How to Stop Google Gemini From Training on Your Data: The 2026 Privacy Guide
Gemini's defaults send your chats to human reviewers and keep them for 18 months. Here's the exact 12-minute walkthrough to turn that off across web, Android, and Workspace — and what Google still keeps anyway.
Omer YLD
Founder & Editor-in-Chief
6 min read
Photo: Technerdo
Google's default privacy posture for Gemini is permissive in ways most people don't realise. As Ars Technica's investigation made clear last week, the out-of-the-box configuration keeps your chats for 18 months, samples a percentage for human review, and quietly extends that retention to three years for any conversation a reviewer touches. None of that is illegal, none of it is hidden — but the toggles to opt out are scattered across at least four different surfaces. This guide walks you through every one of them in roughly 12 minutes.
What you'll need
- A signed-in Google account on a desktop browser (web is the cleanest place to manage these settings)
- Your Android phone, if you use Gemini as a system assistant
- 12 minutes uninterrupted
- If you administer a Google Workspace tenant: an account with super-admin or Gemini-app access
If you have multiple Google accounts, do this for each one — the settings are per-account, not per-device.
How long does it really take to lock Gemini down
Roughly 12 minutes. Five for the web settings, three for Android, and two to four for Workspace depending on whether you're a user or an admin. The verification step at the end is another two minutes and is where most people catch the toggle they missed.
Step01
Turn off Gemini Apps Activity
Open myactivity.google.com/product/gemini in a browser you're signed into. Find the Keep Activity card at the top of the page and click the toggle to switch it off. Confirm in the dialog.
This single setting does most of the work. With Keep Activity off, Google stops adding new conversations to your activity log and stops sampling them for human review. The fine print: Google still retains chats for up to 72 hours after they happen "to provide the service," and any conversation already in human-review pipelines remains there.
Step02
Shorten the auto-delete window
On the same page, find the Auto-delete section. The default is 18 months. Change it to 3 months — that's the shortest non-zero option Google offers.
This matters even with Keep Activity off, because the 72-hour service-retention window doesn't override auto-delete. Setting it to 3 months also retroactively cleans out anything older than that within a few days.
Step03
Delete past chats and revoke uploaded files
In the activity feed below the toggle, click Delete and choose All time in the picker. Confirm.
Then look for Files & data in the side menu (web only — it's not exposed in the mobile flow). Any document, image, or audio file you've ever attached to a Gemini prompt is listed here. Revoke or delete each one you don't actively need referenced.
Heads up
Deleting your activity does not delete chats that have already been read by a Google human reviewer. Those are kept for up to three years on a separate retention path. There is no user-facing control to remove them.
Step04
Disable Gemini integrations on Android
Open the Gemini app on Android (or, on Pixel, swipe in from a corner to invoke the assistant overlay and tap your profile picture).
Tap Settings → Apps. You'll see a list of system apps Gemini can read or act on: Gmail, Calendar, Drive, Maps, Messages, YouTube, and a handful more. Toggle off every one you don't want it touching. Each toggle is independent.
If you want a hard stop — Gemini absent from your phone entirely — go to Settings → Apps → Default apps → Digital assistant app and switch back to Google Assistant (still available on most devices) or "None." On Pixel devices running Android 16, the path is Settings → Apps → Assistant.
Step05
Lock down Gemini in Google Workspace
This step splits depending on who you are.
As an end user with a personal account: open the Workspace privacy hub. Anything labelled "share with Gemini Apps" or "Personal Intelligence" is opt-in only — confirm it's off. Workspace content (Gmail, Docs, Drive, Calendar, Chat, Meet) is contractually excluded from training Google's foundation models, but only as long as you don't manually grant Gemini Apps access to it from a personal account.
As a Workspace admin: sign into admin.google.com and go to Apps → Google Workspace → Gemini. From here you can:
- Disable Gemini app access for the entire org or specific OUs
- Toggle Gemini features within Gmail, Docs, and Drive separately
- Set whether feedback samples can be used to improve Google's products
For regulated industries, set the org-wide policy to deny by default and grant per-OU.
Step06
Verify with the Google Account dashboard
Visit myaccount.google.com/data-and-privacy. Scroll to History settings and confirm Gemini Apps Activity reads Off with auto-delete set to 3 months.
Then scroll further to Connected apps and services. If anything Gemini-related is here from a previous experiment (early-access, Bard legacy connections, third-party prompt tools), revoke it.
This is where you'll catch the integrations a clean-up usually misses — including any plugin you tested once and forgot.
What Google still keeps after you do all this
Three things to know, even with every toggle flipped:
- The 72-hour service window. Every chat is briefly retained to deliver the response and process feedback. There is no opt-out for this; it is part of how the API works.
- Reviewed-conversation retention. Anything a human has read is kept for up to three years on a separate path. You cannot enumerate, delete, or audit it.
- Aggregate model telemetry. Google logs prompt-shape and latency data even when activity is off. It does not tie back to your account in identifiable form, but it does exist.
If you need a posture stronger than this, the only options are: don't use Gemini at all, run a self-hosted model instead (our self-hosted AI agent comparison is a starting point), or move to a Workspace tier with vault-level retention controls.
Troubleshooting common issues
"Keep Activity" toggle is greyed out. You're probably signed into a managed Workspace account where the org admin has locked the setting. There is nothing you can do from the user side — escalate to the admin to either pin it off or give you control.
Setting reverts after a Pixel update. This has been an intermittent regression on Android 16 betas. Re-toggle it after major OS updates and verify in step 6.
Workspace admin console doesn't show a Gemini section. It's only present for tenants with Gemini Business, Enterprise, or Education licensing. Free Workspace and Google Workspace Essentials don't surface the admin controls.
The activity page shows "We're having trouble loading." This usually clears in a couple of hours; in the meantime, set the auto-delete window via the Gemini app settings on Android, which writes the same backend value.
What to do next
You've handled Gemini. The next obvious gap is everything else that's signed into your Google account.
- For broader account hygiene, work through our state of cybersecurity in 2026 checklist.
- If you'd rather move off Google's AI entirely, the OpenClaw self-hosting guide is the gentlest on-ramp.
- And if you run a personal VPS, this week's CopyFail and cPanel patches are non-negotiable.
Privacy is mostly maintenance. Set a calendar reminder to repeat step 6 every six months — that's the realistic cadence for catching new toggles Google quietly added.
— ∎ —
Was this piece worth your five minutes?
Join the conversation — sign in to leave a comment and engage with other readers.
Loading comments...