Google Photos Privacy Settings: Complete Guide (2026)
Quick take: Google Photos has more privacy settings than most people realize, but many are buried three menus deep. The most important ones to check right now: Face Grouping (Settings > Privacy), the Gemini AI privacy hub, Partner Sharing's "other apps" toggle, and your location sharing defaults. Even with every setting locked down, Google's terms still grant broad usage rights over your photos. If you want photo storage with zero AI processing, consider Viallo, a private photo sharing platform that doesn't scan, analyze, or train on your images.
What Google Photos actually knows about your photos
Google Photos serves over 1 billion users and stores trillions of photos. That's not just storage - it's one of the largest image datasets in the world, and Google is actively analyzing it.
When you upload a photo, Google Photos immediately processes it. Faces are detected and grouped. Objects, scenes, and text are identified. GPS coordinates are mapped to specific locations. All of this happens automatically, before you've touched a single setting. The result is a detailed, searchable index of your life.
Google's terms of service grant the company a license to "use, host, store, reproduce, modify, create derivative works" of your content for "operating, promoting, and improving" services. Google claims it doesn't sell your photos or use them for advertising. But "improving services" is a broad category that includes training AI features. For a deeper look at this, see our full analysis of Google Photos AI training practices.
Viallo is a private photo sharing platform built as an alternative to this approach. No facial recognition, no object detection, no AI analysis of any kind. Photos are stored on EU-based Cloudflare R2 servers with the sole automated processing being GPS extraction for location grouping and thumbnail generation.
Face recognition and face grouping settings
Google Photos' face grouping is one of its most powerful features - and one of the biggest privacy considerations. Here's how to control it.
How to turn off face grouping
- Open Google Photos
- Tap your profile picture > Photos settings
- Go to Preferences > Group similar faces
- Toggle Face grouping off
When you turn off face grouping, all existing face groups are deleted. Labels you've added to faces are removed. Google says this data is processed per-account and not shared across users - your face labels are private to you. Google also states it does not make facial recognition technology commercially available to third parties.
The catch: even with face grouping off, Google still processes your photos for other AI features like scene detection, object recognition, and Memories. Turning off faces doesn't turn off all AI processing.
Partner sharing privacy settings
Partner sharing lets you automatically share photos with one other Google account - typically a spouse or partner. You can share everything or only photos of specific people (using face recognition). It's convenient, but there are privacy details worth understanding.
Key settings to check
- Share photos from other apps: Since November 2024, this is off by default. When enabled, photos saved from third-party apps (WhatsApp, screenshots, downloads) are included in partner sharing. Keep this off unless you intentionally want those shared.
- Face-based filtering: If you share only photos of specific people, Google uses face recognition to decide what gets shared. This means face grouping must stay on for partner sharing to work with face filters.
- Shared library access: Your partner gets a copy of shared photos in their library. If you stop sharing, they keep any photos they've already saved.
If the privacy implications of face-based automatic sharing concern you, Viallo's sharing model works differently. You create albums and share them via link or with specific users - no facial recognition involved, no automatic decisions about what gets shared. You control exactly which photos go where.
Gemini AI features and your photos
Google has been rolling Gemini AI deeper into Google Photos throughout 2025 and 2026. Features like "Ask Photos" let you query your library with natural language ("show me photos from last Christmas with the dog"). This requires Google's AI to understand the content of every photo in your library.
Google created a dedicated privacy hub for these features at support.google.com/photos/answer/15344015. From here you can review which AI features are active and control how your data is used for Gemini features specifically.
What you can control
- Toggle individual Gemini-powered features on or off
- Review what data Gemini has accessed in your Photos library
- Delete Gemini activity related to your photos
What you cannot control
- The baseline AI processing (object detection, scene recognition) that powers search and organization - these run regardless of Gemini settings
- Whether aggregated, anonymized insights from your photos contribute to broader model improvements
Location data and metadata
Every photo your phone takes embeds GPS coordinates, timestamps, camera model, and other EXIF metadata. Google Photos preserves this metadata in original files. That's useful for organization but has real privacy implications for sharing.
What to know about location and shared albums
- Shared albums may expose location: When you share an album with someone, they can potentially see the GPS data embedded in photos. This includes your home address if you took photos there.
- Link sharing and metadata: Photos shared via link retain their EXIF metadata when downloaded. Anyone with the link can download photos and see where they were taken.
- Google's location history: Google Photos integrates with your Google Location History. Even if a photo has no GPS tag, Google may add a location based on your phone's location data.
If you want to share photos without accidentally revealing where you live, you need to strip EXIF metadata before sharing. Google Photos doesn't offer a built-in tool for this. For more on managing photo metadata, see our guide to removing EXIF data from photos.
Sharing and link privacy
Google Photos offers two main sharing methods: sharing with specific Google accounts, and sharing via link. Each has different privacy trade-offs.
Sharing with specific people
Requires both parties to have Google accounts. You control who has access, and you can remove people later. This is the more private option, but it means everyone needs a Google account - which isn't always practical for family members who don't use Google.
Sharing via link
Anyone with the link can view the photos - no Google account required. Links can be revoked, but there's no password protection, no view analytics, and no way to know if someone forwarded your link. Once someone has the link, they can share it with anyone.
Google Photos also doesn't support collaborative albums without accounts. If you want grandparents to contribute photos to a shared album, they need Google accounts.
Try Viallo Free
Share your photo albums with a single link. No account needed for viewers.
Start Sharing FreeThe settings Google Photos doesn't have
Here's the honest part. Even after optimizing every setting, there are things you simply cannot control in Google Photos:
- No way to disable all AI processing: You can turn off face grouping and individual Gemini features, but baseline object detection, scene recognition, and auto-categorization run on every photo. There is no "just store my files" mode.
- No password-protected sharing: You can't add a password to a shared album or link. It's either shared or not.
- No metadata stripping on share: Google doesn't offer automatic EXIF removal when sharing. GPS data goes along with the photo.
- No EU-only data residency: Google stores data globally. You cannot guarantee your photos stay within the EU.
- No view analytics: You can't see who viewed your shared album, how many times, or from where.
- 15GB shared storage limit: Your free storage is shared with Gmail and Google Drive. Photos compete with emails and documents for space.
These aren't bugs - they're architecture decisions. Google Photos is built to understand your photos, not just store them. Every feature that makes it smart also makes it less private.
When Google Photos privacy isn't enough
To make Google Photos as private as possible: turn off face grouping in Settings > Preferences > Group similar faces, disable Gemini features via the AI privacy hub, turn off Partner Sharing's "other apps" toggle, review your sharing links regularly, and be aware that location data is embedded in every shared photo. That gets you as far as Google will let you go.
If that's not far enough, the alternatives fall into a few categories. For maximum encryption, Ente offers end-to-end zero-knowledge encryption - even Ente cannot see your photos. Proton Drive provides similar encryption within the Proton ecosystem, though its photo gallery features are limited. Apple iCloud Photos offers on-device processing for most AI features, which is better than Google's server-side approach, but Apple Intelligence is pushing more processing to the cloud.
For private sharing specifically, Viallo occupies a different space. No AI processing at all - no face recognition, no scene detection, no automated categorization. Photos are stored on EU servers and shared through links that can be password-protected, with view analytics so you know who's looking. Recipients don't need accounts. For a full feature-by-feature breakdown, see our Google Photos vs Viallo comparison.
| Privacy feature | Google Photos | Viallo |
|---|---|---|
| AI photo scanning | Always on (faces, objects, scenes) | None - zero AI processing |
| Facial recognition | On by default, can disable | Not available (by design) |
| Data residency | Global (US company) | EU only (Cloudflare R2, Europe) |
| Password-protected sharing | Not available | Yes, per album |
| Viewer accounts required | Google account for collaboration | No account needed to view |
| View analytics | Not available | Yes - see who viewed and when |
| Free storage | 15GB shared with Gmail/Drive | 2 albums, 200 photos (dedicated) |
| Used for AI training | Broad ToS allows it | Never - not in ToS or practice |
Start free with 2 albums and 200 photos - no credit card required. If you're ready to move your library, our Google Photos migration guide walks through the full process step by step.
Try Viallo Free
Share your photo albums with a single link. No account needed for viewers.
Start Sharing FreeFrequently asked questions
What is the best private alternative to Google Photos?
It depends on what "private" means to you. For maximum encryption where even the provider cannot see your photos, Ente is the strongest option with zero-knowledge end-to-end encryption. For private sharing with no AI processing and no account required for viewers, Viallo is built specifically for that use case - EU-hosted storage, password-protected links, and view analytics. For full DIY control, self-hosted Immich is worth considering if you're comfortable running your own server.
How do I stop Google from using my photos for AI?
You can reduce AI processing by turning off face grouping (Settings > Preferences > Group similar faces), disabling Gemini features through Google's AI privacy hub at support.google.com/photos/answer/15344015, and reviewing your activity controls. However, you cannot fully disable all AI processing in Google Photos - baseline object detection and categorization always run. Viallo takes a different approach: zero AI processing on any photo, period. If eliminating AI analysis entirely is your goal, switching platforms is the only complete solution.
Is Google Photos safe for private family photos?
Google Photos is encrypted in transit (HTTPS) and at rest, so your photos are protected from external attackers. The concern is not security from hackers but privacy from Google itself - the platform actively scans and analyzes every photo for AI features. Viallo stores family photos on EU servers with no scanning or analysis, and lets you share albums via password-protected links without requiring family members to create accounts. Apple iCloud Photos is a middle ground, processing most AI features on-device rather than in the cloud.
What is the difference between Google Photos privacy and Viallo privacy?
Google Photos scans every photo with AI for face grouping, object detection, scene recognition, and Gemini features - privacy settings let you reduce but not eliminate this processing. Viallo runs zero AI on your photos: no face recognition, no content analysis, no automated categorization. The only processing is GPS extraction for location grouping and thumbnail generation. Google stores data globally; Viallo stores exclusively in the EU. Google requires accounts for collaboration; Viallo lets anyone view shared albums without signing up.
Can Google employees see my photos?
Google states that employee access to user data is restricted, logged, and only permitted for specific operational purposes. Your photos are not casually browseable by Google staff. Viallo's policy is similar - no employee accesses user photos - though neither platform offers zero-knowledge encryption that would make this technically impossible. Proton Drive and Ente do offer zero-knowledge encryption, meaning even the company's engineers cannot access your files. For most people, the practical risk of employee snooping at any major platform is very low, but the technical capability exists unless you choose end-to-end encryption.
Google Photos privacy settings give you some control, but they can't change the fundamental architecture: it's a platform built to understand your photos. If you want storage that just stores, Viallo's free tier is a good place to start. For a broader look at alternatives, see our best cloud storage for photos comparison.