Most active commenters
  • mattzito(3)
  • ipsum2(3)
  • tiahura(3)
  • fhinkel(3)

←back to thread

Gemini CLI

(blog.google)
1342 points sync | 33 comments | | HN request time: 1.448s | source | bottom
Show context
ipsum2 ◴[] No.44379036[source]
If you use this, all of your code data will be sent to Google. From their terms:

https://developers.google.com/gemini-code-assist/resources/p...

When you use Gemini Code Assist for individuals, Google collects your prompts, related code, generated output, code edits, related feature usage information, and your feedback to provide, improve, and develop Google products and services and machine learning technologies.

To help with quality and improve our products (such as generative machine-learning models), human reviewers may read, annotate, and process the data collected above. We take steps to protect your privacy as part of this process. This includes disconnecting the data from your Google Account before reviewers see or annotate it, and storing those disconnected copies for up to 18 months. Please don't submit confidential information or any data you wouldn't want a reviewer to see or Google to use to improve our products, services, and machine-learning technologies.

replies(20): >>44379046 #>>44379132 #>>44379301 #>>44379405 #>>44379410 #>>44379497 #>>44379544 #>>44379636 #>>44379643 #>>44380425 #>>44380586 #>>44380762 #>>44380864 #>>44381305 #>>44381716 #>>44382190 #>>44382418 #>>44382537 #>>44383744 #>>44384828 #
1. mattzito ◴[] No.44379301[source]
It's a lot more nuanced than that. If you use the free edition of Code Assist, your data can be used UNLESS you opt out, which is at the bottom of the support article you link to:

"If you don't want this data used to improve Google's machine learning models, you can opt out by following the steps in Set up Gemini Code Assist for individuals."

and then the link: https://developers.google.com/gemini-code-assist/docs/set-up...

If you pay for code assist, no data is used to improve. If you use a Gemini API key on a pay as you go account instead, it doesn't get used to improve. It's just if you're using a non-paid, consumer account and you didn't opt out.

That seems different than what you described.

replies(4): >>44379517 #>>44380349 #>>44381012 #>>44382425 #
2. ipsum2 ◴[] No.44379517[source]
Sorry, that's not correct. Did you check out the link? It doesn't describe the CLI, only the IDE.

"You can find the Gemini Code Assist for individuals privacy notice and settings in two ways:

- VS Code - IntelliJ "

replies(3): >>44379799 #>>44380640 #>>44382427 #
3. tiahura ◴[] No.44379799[source]
As a lawyer, I'm confused.

I guess the key question is whether the Gemini CLI, when used with a personal Google account, is governed by the broader Gemini Apps privacy settings here? https://myactivity.google.com/product/gemini?pli=1

If so, it appears it can be turned off. However, my CLI activity isn't showing up there?

Can someone from Google clarify?

replies(1): >>44380702 #
4. foob ◴[] No.44380349[source]
your data can be used UNLESS you opt out

It's even more nuanced than that.

Google recently testified in court that they still train on user data after users opt out from training [1]. The loophole is that the opt-out only applies to one organization within Google, but other organizations are still free to train on the data. They may or may not have cleaned up their act given that they're under active investigation, but their recent actions haven't exactly earned them the benefit of the doubt on this topic.

[1] https://www.business-standard.com/technology/tech-news/googl...

replies(6): >>44380772 #>>44381196 #>>44381287 #>>44382297 #>>44382437 #>>44385194 #
5. mattzito ◴[] No.44380640[source]
That's because it's a bit of a nesting doll situation. As you can see here:

https://github.com/google-gemini/gemini-cli/tree/main

If you scroll to the bottom, it says that the terms of service are governed based on the mechanism by which you access Gemini. If you access via code assist (which the OP posted), you abide by those privacy terms of code assist, one of the ways of which you access is VScode. If you access via the Gemini API, then those terms apply.

So the gemini CLI (as I understand it) doesn't have their own privacy terms, because it's an open source shell on top of another Gemini system, which could have one of a few different privacy policies based on how you choose to use it and your account settings.

(Note: I work for google, but not on this, this is just my plain reading of the documentation)

replies(1): >>44381027 #
6. mattzito ◴[] No.44380702{3}[source]
I am very much not a lawyer, and while I work for Google, I do not work on this, and this is just my plain language reading of the docs.

When you look at the github repo for the gemini CLI:

https://github.com/google-gemini/gemini-cli/tree/main

At the bottom it specifies that the terms of service are dependent on the underlying mechanism that the user chooses to use to fulfill the requests. You can use code assist, gemini API, or Vertex AI. My layperson's perspective is that it's positioned as a wrapper around another service, whose terms you already have accepted/enabled. I would imagine that is separate from the Gemini app, the settings for which you linked to.

Looking at my own settings, my searches on the gemini app appear, but none of my gemini API queries appear.

replies(1): >>44380801 #
7. TrainedMonkey ◴[] No.44380772[source]
Another dimension here is that any "we don't train on your data" is useless without a matching data retention policy which deletes your data. Case and point of 23andMe not selling your data until they decided to change that policy.
replies(3): >>44381263 #>>44381313 #>>44381964 #
8. tiahura ◴[] No.44380801{4}[source]
Thanks for trying to clarify.

However, as others pointed out, that link take you to here: https://developers.google.com/gemini-code-assist/resources/p... Which, at the bottom says: "If you don't want this data used to improve Google's machine learning models, you can opt out by following the steps in Set up Gemini Code Assist for individuals." and links to https://developers.google.com/gemini-code-assist/docs/set-up.... That page says "You'll also see a link to the Gemini Code Assist for individuals privacy notice and privacy settings. This link opens a page where you can choose to opt out of allowing Google to use your data to develop and improve Google's machine learning models. These privacy settings are stored at the IDE level."

The issue is that there is no IDE, this is the CLI and no such menu options exist.

replies(1): >>44382436 #
9. aflukasz ◴[] No.44381012[source]
> It's a lot more nuanced than that. If you use the free edition of Code Assist, your data can be used UNLESS you opt out,

Well... you are sending your data to a remote location that is not yours.

10. ipsum2 ◴[] No.44381027{3}[source]
My understanding is that they have not implemented an opt-out feature for Gemini CLI, like they've done for VSCode and Jetbrains.
replies(1): >>44382430 #
11. echelon ◴[] No.44381196[source]
We need to stop giving money and data to hyperscalers.

We need open infrastructure and models.

replies(1): >>44381463 #
12. decimalenough ◴[] No.44381263{3}[source]
Google offers a user-configurable retention policy for all data.

https://support.google.com/accounts/answer/10549751

That said, once your data is inside an LLM, you can't really unscramble the omelette.

replies(1): >>44381541 #
13. Arisaka1 ◴[] No.44381313{3}[source]
I'll go ahead and say that, even if there was a method that deletes your data when you request it, nothing stops them from using that data to train the model up until that point, which is "good enough" for them.
14. Xss3 ◴[] No.44381463{3}[source]
People said the same thing about shopping at walmart instead of locally.
replies(1): >>44381576 #
15. elictronic ◴[] No.44381541{4}[source]
Lawsuits and laws seem to work just fine at unscrambling. Once a company has a fiscal interest they seem to change very quickly.
16. oblio ◴[] No.44381576{4}[source]
Isn't that as toxic? I've read a bunch about Walmart and the whole thing is basically a scam.

They get a ton of tax incentives, subsidies, etc to build shoddy infrastructure that can only be used for big box stores (pretty much), so the end cost for Walmart to build their stores is quite low.

They promise to employ lots of locals, but many of those jobs are intentionally paid so low that they're not actually living wages and employees are intentionally driven to government help (food stamps, etc), and together with other various tax cuts, etc, there's a chance that even their labor costs are basically at break even.

Integrated local stores are better for pretty much everything except having a huge mass to throw around and bully, bribe (pardon me, lobby) and fool (aka persuade aka PR/marketing).

replies(2): >>44381969 #>>44388228 #
17. CamperBob2 ◴[] No.44381969{5}[source]
Integrated local stores are better for pretty much everything except for actually having what you want in stock.

There is a reason why rural communities welcome Wal-Mart with open arms. Not such a big deal now that you can mail-order anything more-or-less instantly, but back in the 80s when I was growing up in BFE, Wal-Mart was a godsend.

replies(2): >>44386683 #>>44388243 #
18. Melatonic ◴[] No.44382297[source]
Hopefully this doesn't apply to corporate accounts where they claim to be respecting privacy via contracts
19. andrepd ◴[] No.44382425[source]
Yes, I'm right about to trust Google to do what they pinky swear.

EDIT: Lmao, case in point, two sibling comments pointing out that Google does indeed do this anyway via some loophole; also they can just retain the data and change the policy unilaterally in the future.

If you want privacy do it local with Free software.

replies(1): >>44384195 #
20. fhinkel ◴[] No.44382427[source]
Sorry our docs were confusing! We tried to clear things up: https://github.com/google-gemini/gemini-cli/blob/main/docs/t...
replies(2): >>44386066 #>>44388752 #
21. fhinkel ◴[] No.44382430{4}[source]
We have! Sorry our docs were confusing! We tried to clear things up https://github.com/google-gemini/gemini-cli/blob/main/docs/t...
22. fhinkel ◴[] No.44382436{5}[source]
It applies to Gemini CLI too. We've tried to clear up our docs, apologies for the confusion. https://github.com/google-gemini/gemini-cli/blob/main/docs/t...
replies(1): >>44382627 #
23. sheepscreek ◴[] No.44382437[source]
Reading about all the nuances is such a trigger for me. To cover your ass is one thing, to imply one thing in a lay sense and go on to do something contradicting it (in bad faith) is douchebaggery. I am very sad and deeply disappointed at Google for this. This completes their transformation to Evil Corp after repealing the “don’t be evil” clause in their code of conduct[1].

[1] https://en.m.wikipedia.org/wiki/Don't_be_evil

24. tiahura ◴[] No.44382627{6}[source]
Thanks, however I'm not sure I've got it.

Are you saying the Gemini Apps Activity switch controls? Or, that if I download VS Code or Intelli J and make the change, it applies to the CLI? https://developers.google.com/gemini-code-assist/docs/set-up... says "These privacy settings are stored at the IDE level."

25. 8n4vidtmkvmk ◴[] No.44384195[source]
Do you have recommendations? I have ollama but it doesn't have built in tool support
26. _cs2017_ ◴[] No.44385194[source]
This is incorrect. The data discussed in court is data freely visible on the web, not user data that the users sent to Google.

If the data is sent by a user to sub-unit X of Google, and X promised not to use it for training, it implies that X can share this data with sub-unit Y only if Y also commits not to use the data for training. Breaking this rule would get everyone in huge trouble.

OTOH, when sub-unit X said "We promise not to use data from the public website if the website owner asks us not to", it does not imply another sub-unit Y must follow that commitment.

27. olejorgenb ◴[] No.44386066{3}[source]
"1. Is my code, including prompts and answers, used to train Google's models?

This depends entirely on the type of auth method you use.

    Auth method 1: Yes. When you use your personal Google account, the Gemini Code Assist Privacy Notice for Individuals applies. Under this notice, your prompts, answers, and related code are collected and may be used to improve Google's products, which includes model training."
The opt out appear to be about other type of stats, no?
28. oblio ◴[] No.44386683{6}[source]
The 80s were 40 years ago, though. Something can outlive its usefulness.
replies(2): >>44388115 #>>44389296 #
29. CamperBob2 ◴[] No.44388115{7}[source]
True. A good example being Sears, which should have become Amazon but didn't. Prior to the arrival of Wal-Mart, if you couldn't find something locally (which, again, was true more often than not) your options were to drive 50-150 miles to the nearest large city, or order from the local Sears catalog merchant.

The latter wasn't what most people think of as a Sears store, because the local economy could never have supported such a thing. It was more like a small office with a counter and a stockroom behind it. They didn't keep any inventory, but could order products for pickup in about a week. Pickup, mind you. You still had to drive to town to get your order. As stupid as this sounds, it was 10x worse in person.

So if Wal-Mart didn't exist, it would have had to be invented. It was not (just) a monster that victimized smaller merchants and suppliers, a tax scam, or a plot to exploit the welfare system. It was something that needed to happen, a large gap in the market that eventually got filled.

Nowadays I wouldn't set foot in one, but it was different at the time. I didn't mean to write a long essay stanning for Wal-Mart, but your original post is a bit of a pet peeve.

30. kortilla ◴[] No.44388228{5}[source]
You forgot the part where nobody wants to shop at local stores and pay twice as much for 1/4 of the inventory.

Walmart spread so successfully precisely because so many people immediately started shopping there for all of the basics.

31. kortilla ◴[] No.44388243{6}[source]
This hasn’t changed much. In rural communities there isn’t same day or even over-night Amazon.

It may have shifted where people buy things they can wait for, but for weekly shopping I don’t think it has.

32. dinvlad ◴[] No.44388752{3}[source]
Thanks a lot for clarifying in plain language! Makes sense re basically anything paid is NOT used for training, free - does.

Off-topic, but I wish this kind of plain language doc existed for Google One vs Google Workspace as well.

33. s1artibartfast ◴[] No.44389296{7}[source]
Local stores are better in many ways, but not the ones consumers care about: price and convenience.