Safety Assistant app by Google

Is Gemini tasks (formerly Gemini Agent / Spark) safe?

Short answer Google warns that agentic AI can be misled by hidden malicious instructions (prompt injection) and advises against entering passwords or payment details in the task thread or scheduling sensitive tasks. support.google.com · checked

6 of 6 safety questions answered on Google's own pages , Asks before sensitive actions: Yes , Sees your passwords: Yes , Trains on your data: Yes

What Google states about connecting your accounts. AideDex reports the vendor's published statements, each linked to its source; it does not test or audit them. "Not published" means we found no statement, not that the answer is no. Facts checked up to .

Can you get it
  • Status Beta
  • Where Global except 33 (Beta worldwide except 33 countries)
  • Plan $19.99/mo (Cheapest plan that includes it: Google AI Pro)
Gemini tasks (formerly Gemini Agent / Spark): countries, plans, capabilities →

The six questions

6 of 6 answered
  • What data can Gemini tasks (formerly Gemini Agent / Spark) access?

    Connected Apps (Gmail, Calendar, Drive, Docs, Sheets, Keep, Tasks, Photos, Contacts, YouTube, Search/Maps/Flights), Personal Intelligence, location, and sites you are signed into; it can read and write (send, edit, delete). Revoke via Connected Apps settings, turning off auto browse in Settings > AI Innovations, or turning off task mode. support.google.com · checked
  • Does Gemini tasks (formerly Gemini Agent / Spark) ask before sending, buying or deleting?

    Yes
    Designed to ask for confirmation before sending communications, modifying data, making purchases and submitting web forms; exception: bulk… Full quoteDesigned to ask for confirmation before sending communications, modifying data, making purchases and submitting web forms; exception: bulk actions on private Google Tasks can run without confirmation.
    support.google.com · checked
  • Can Gemini tasks (formerly Gemini Agent / Spark) see my passwords?

    Yes
    With your permission, in your local Chrome it can use login info saved in Google Password Manager; Google advises not typing passwords or… Full quoteWith your permission, in your local Chrome it can use login info saved in Google Password Manager; Google advises not typing passwords or payment details into the task thread.
    support.google.com · checked
  • Does Gemini tasks (formerly Gemini Agent / Spark) use my data to train AI models?

    Yes
    Tasks are only available with Keep Activity on; with Keep Activity on, Google uses your activity to improve its services, including training generative AI models. Full quoteTasks are only available with Keep Activity on; with Keep Activity on, Google uses your activity to improve its services, including training generative AI models. The page does not say whether remote browser data is used.
    support.google.com · checked
  • Where does Gemini tasks (formerly Gemini Agent / Spark) run, and is it isolated?

    Either your local desktop Chrome (same signed-in sites as you) or a remote cloud browser and remote computer run by Google that keep saved cookies and code-execution files between sessions. support.google.com · checked
  • How long does Gemini tasks (formerly Gemini Agent / Spark) keep my data?

    Gemini Apps activity auto-deletes after 18 months by default (3, 36 months or never selectable); human-reviewed chats are kept up to 3 years. Remote browser and remote computer data is saved for future sessions and can be deleted at any time in Task settings; Gemini may also delete saved browser data automatically, and turning off task mode deletes it. support.google.com · checked

Other things Google states

3 statements
  • Google advises not to type sign-in or payment details into the task thread, and warns that a schedule running while you are offline may complete an unintended action. support.google.com · checked
  • Google lists prompt injection as a risk: malicious instructions hidden in websites, emails or documents could mislead the agent into leaking data or running malicious code. support.google.com · checked
  • To complete tasks Gemini shares necessary info (e.g. name, address, files) with websites and third parties. support.google.com · checked

More questions about Gemini tasks (formerly Gemini Agent / Spark) and your data

1 answer
Is it safe to let Gemini browse for me?
Google warns that agentic AI can be misled by hidden malicious instructions (prompt injection) and advises against entering passwords or payment details in the task thread or scheduling sensitive tasks. support.google.com · checked

Compare and read on

All alternatives to Gemini tasks (formerly Gemini Agent / Spark) · Is it safe to connect Gmail to an AI agent? What each vendor says it does · How facts are checked

Sources for this page

2 pages
  1. support.google.com/gemini/answer/17094507?hl=en
  2. support.google.com/gemini/answer/13594961?hl=en

Spotted something wrong or out of date? Report an error · Corrections log