Google Gemini is Google LLC's consumer AI assistant app, operated as a subsidiary of publicly traded Alphabet Inc. Google's own Gemini Apps Privacy Hub discloses that a subset of chats are reviewed by human reviewers (including Google's trained service providers) to improve its models, and that reviewed chats and related metadata are retained for up to three years even after a user deletes their activity, disconnected from the account; ordinary chat activity auto-deletes on an 18-month default (adjustable), while temporary chats or chats with Keep Activity off are retained 72 hours. The Hub states Gemini chats are not currently used to show ads and describes what data Gemini exchanges with Connected Apps (Workspace, Photos, etc.) and other Google services. Apple's App Store privacy label separately discloses that identity-linked data including precise/coarse location, contact info, and identifiers may be used by the developer for advertising or marketing purposes. Alphabet's FY2025 10-K confirms Google LLC is a subsidiary of Alphabet Inc., a SEC-reporting public company. No fine or completed enforcement order was found; Ireland's Data Protection Commission opened a live, unresolved statutory inquiry in September 2024 into whether Google conducted a required GDPR Article 35 impact assessment before processing EU/EEA personal data to develop the foundational AI model (PaLM 2) that preceded Gemini's underlying models.
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-09-12]
Ireland's Data Protection Commission announced on 2024-09-12 that it opened a Cross-Border statutory inquiry under Section 110 of the Irish Data Protection Act into whether Google complied with GDPR Article 35 obligations to conduct a Data Protection Impact Assessment before processing EU/EEA personal data to develop its foundational AI model, PaLM 2 (a precursor to the models underlying Gemini). The inquiry was open/unresolved as of the fetched page.
Apple's App Store privacy label for the Google Gemini app (developer: Google) discloses that data linked to a user's identity — precise and coarse location, physical address, name, contacts, user content (photos/videos), search history, browsing history, and device/user identifiers — is collected for the purpose of 'Product Personalization.'
Alphabet Inc.'s FY2025 Form 10-K, filed with the SEC (CIK 1652044), states directly that Google LLC is a subsidiary of Alphabet, and the filing as a whole documents Alphabet as a publicly traded, audited company with Class A/B/C stock and named executive leadership.
Google's general Privacy Policy states it does not share personal information with companies, organizations, or individuals outside of Google except in defined cases (user consent, legal process, trusted processing partners, etc.), and separately states it does not share information that personally identifies a user with advertisers unless the user initiates the contact.
Ireland's Data Protection Commission announced on 2024-09-12 that it opened a Cross-Border statutory inquiry under Section 110 of the Irish Data Protection Act into whether Google complied with GDPR Article 35 obligations to conduct a Data Protection Impact Assessment before processing EU/EEA personal data to develop its foundational AI model, PaLM 2 (a precursor to the models underlying Gemini). The inquiry was open/unresolved as of the fetched page.
Apple's App Store privacy label for the Google Gemini app discloses that identity-linked location (precise and coarse), contact info (email, name), and identifiers (User ID) may be used for the developer's own 'Advertising or Marketing' purpose.