Your Inbox Now Feeds Chrome's Form Filler, and the Rules Are Still Thin

Google's Chrome browser can now dig through a user's Gmail for flight bookings and order numbers and offer them in web forms, in a rollout Google announced on October 28, 2026 for users in the United States.

The feature is an extension of Chrome's enhanced autofill, the tool that already fills in addresses and card details. Google says it can now use Gemini, its AI model, with a setting called Personal Intelligence to find details in a user's email and suggest them when a form asks for them. Its own examples are order numbers, tracking information and flight bookings. Chrome's help pages also list information about vehicles. ^[1][3][4]

The convenience is plain. Anyone who has hunted through an inbox for a six-character booking code while a customer-service form waits will see the appeal. The cost is that a browser feature now reads private mail to answer a form field.

Who gets it, and how it works

The feature is beginning to roll out on desktop, Android and iOS. It is for people using Gemini in Chrome who have opted into Personal Intelligence, and Chrome Help says they must be at least 18. ^[1][3][4] The rollout is still under way, so the settings a user sees may differ from the paths below for now.

Google's announcement and help pages name only the United States, and the company has not said whether the feature will reach other countries.

Gmail-based suggestions appear in the usual autofill dropdown, marked with a Gemini icon. From a suggestion, a user can open the email it came from, which lets them check where a value was found before it goes into a form. ^[3][4]

Chrome Help is specific about a few limits. Gmail-derived information cannot be edited inside Chrome. A user can remove a suggestion that is wrong or out of date, but removing it does not delete the original email. Deleting the email, on the other hand, removes the suggestion. ^[3][4]

So the inbox stays the source of truth. Chrome does not let you edit what it takes from your inbox, but whether it keeps a copy is not known.

What Google says about protection

Google says sensitive data is encrypted and that users can manage whether enhanced autofill is on, and what it can access, in Chrome settings. ^[1] That is the whole of the company's stated assurance in the launch post.

The post does not say how much of a mailbox the feature looks at for each suggestion. It does not say whether the system scans everything or searches only for messages that seem relevant to a given field, or what decides relevance. It also does not say how the Gmail-derived details are processed or retained once a suggestion has been produced. ^[1][3][4]

There is a second layer of disclosure, and it is less comforting. Google's help page on Gemini's Connected Apps, the general system that lets Gemini draw on services like Gmail, says Gemini may use email excerpts, summaries and inferences to answer prompts. It says some of those interactions can be reviewed by human reviewers. It also says Gemini activity may be used to improve Google services, including training generative AI, when a setting called Keep Activity is on. ^[2]

The same page says Gemini does not train directly on a user's entire Gmail inbox, though it may train on summaries, excerpts and inferences from the emails it used to answer a request. Users can turn off Keep Activity to stop future Gemini chats being used for improvement, with stated exceptions. ^[2]

That page describes Connected Apps in general. Neither it nor the Chrome announcement says that these practices apply, identically or at all, to Gmail-based autofill in Chrome. Google has not said, and the difference matters. A reader who has opted in cannot tell from Google's published text whether a booking code fished out of an old email might be reviewed by a person or folded into training material.

Google has also not said whether picking a Gmail-derived suggestion needs a separate confirmation before the value lands in a form, or whether that differs for sensitive items.

How to switch it off

On a computer, open Chrome's Settings, then Autofill and passwords, then Enhanced autofill. There is a switch labelled Find and fill with Gemini. Turning it off stops the Gmail-powered suggestions. On Android the path is the same, reached through More and then Settings. ^[3][4]

A separate step is to review Keep Activity in Gemini's own settings, since that is the control Google's help page ties to model improvement. ^[2] The two switches sit in different places and do different jobs, and turning off one does not obviously turn off the other.

Why it matters

An inbox is the closest thing many people have to a diary they never meant to write. It holds hotel confirmations, prescriptions, parcels, old arguments about deposits. Most of us have never gone through it with a pen and decided what deserves to be kept.

An AI that reads it on request makes that unsorted archive useful, and for a task as small as filling in a form, it can save real minutes. It also normalises the idea that the browser, not just the mail client, has a standing right of access. Opt-in consent and a visible link back to the source email are fair design choices. They do not answer the questions Google has left open about retention and review.

Those answers sit in documents Google controls. The company could settle most of them with a few sentences on the Chrome Help page, and until it does, a user deciding whether to opt in is weighing a clear benefit against a data policy that was written for something nearby, not for this.