{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:27586b24-0b42-5d07-8a7a-50caa8d2bb75",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-04T00:00:00Z"
  },
  "components": [
    {
      "type": "machine-learning-model",
      "bom-ref": "https://jesseahawkins.com/vendors/gemini-app/aibom/component",
      "name": "Gemini Apps: Gemini Apps for personal Google Accounts",
      "properties": [
        {
          "name": "com.jesseahawkins:fact:ai_subprocessors",
          "value": "Service providers' reviewers see some chats, disconnected from the account; none are named"
        },
        {
          "name": "com.jesseahawkins:evidence:ai_subprocessors",
          "value": "snapshot:sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c"
        },
        {
          "name": "com.jesseahawkins:recorded-at:ai_subprocessors",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:ai_subprocessors",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:responsive-to:ai_subprocessors",
          "value": "dora-roi@2024-2956:B_05.02 iso-42001@2023:A.10.2 iso-42001@2023:A.10.3 nist-ai-rmf@1.0:GOVERN-6.1 nist-ai-rmf@1.0:MANAGE-3.1"
        },
        {
          "name": "com.jesseahawkins:fact:customer_data_retention_period",
          "value": "Activity auto-deletes after 18 months by default (3, 36 months or indefinite); some chats kept longer"
        },
        {
          "name": "com.jesseahawkins:evidence:customer_data_retention_period",
          "value": "snapshot:sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c"
        },
        {
          "name": "com.jesseahawkins:recorded-at:customer_data_retention_period",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:customer_data_retention_period",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:responsive-to:customer_data_retention_period",
          "value": "iso-42001@2023:A.7.3 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:trains_on_customer_data",
          "value": "Yes while Keep Activity is on; not in temporary chats, or with it off unless you send feedback"
        },
        {
          "name": "com.jesseahawkins:evidence:trains_on_customer_data",
          "value": "snapshot:sha256:ee8f0fa990d2760ebb62bbd7bad5cd6352b42e56252a35987d877bddb685621c"
        },
        {
          "name": "com.jesseahawkins:recorded-at:trains_on_customer_data",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:trains_on_customer_data",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:responsive-to:trains_on_customer_data",
          "value": "eu-ai-act@2026-07-27:annex-iv/2/d eu-ai-act@2026-07-27:annex-xi/s1/2/c iso-42001@2023:A.7.3 iso-42001@2023:A.7.5 nist-ai-rmf@1.0:MEASURE-2.10"
        },
        {
          "name": "com.jesseahawkins:fact:usage_limits",
          "value": "Compute-based limits refresh every 5 hours up to a weekly limit; higher on paid plans; may change"
        },
        {
          "name": "com.jesseahawkins:evidence:usage_limits",
          "value": "snapshot:sha256:9b8c6b0ed82564d6151b3baa7099af9fbadaae654dd2b1fa42c4ebd84b5b9fdf"
        },
        {
          "name": "com.jesseahawkins:recorded-at:usage_limits",
          "value": "2026-11-04T00:00:00Z"
        },
        {
          "name": "com.jesseahawkins:valid-from:usage_limits",
          "value": "2026-11-04"
        },
        {
          "name": "com.jesseahawkins:withheld:certifications",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:data_residency",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:dpa",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:withheld:zero_data_retention",
          "value": "no-value"
        },
        {
          "name": "com.jesseahawkins:quote:ai_subprocessors",
          "value": "We take your privacy seriously, and we do not sell your personal information to anyone. Chats are disconnected from your account before being sent to service providers."
        },
        {
          "name": "com.jesseahawkins:source:ai_subprocessors",
          "value": "https://support.google.com/gemini/answer/13594961?hl=en"
        },
        {
          "name": "com.jesseahawkins:quote:customer_data_retention_period",
          "value": "You can change your auto-delete setting in Gemini Apps Activity from the default of 18 months to 3 months, 36 months, or indefinite. You can also manually delete your Gemini Apps chats anytime."
        },
        {
          "name": "com.jesseahawkins:source:customer_data_retention_period",
          "value": "https://support.google.com/gemini/answer/13594961?hl=en"
        },
        {
          "name": "com.jesseahawkins:quote:trains_on_customer_data",
          "value": "Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers."
        },
        {
          "name": "com.jesseahawkins:source:trains_on_customer_data",
          "value": "https://support.google.com/gemini/answer/13594961?hl=en"
        },
        {
          "name": "com.jesseahawkins:quote:usage_limits",
          "value": "Gemini Apps have compute-based usage limits that determine how much you can interact with Gemini tools and features. These limits factor in the complexity of your prompt, the models and features you use, and the length of your chat. Your limit refreshes every 5 hours until you reach your weekly limit."
        },
        {
          "name": "com.jesseahawkins:source:usage_limits",
          "value": "https://support.google.com/gemini/answer/16275805?hl=en"
        }
      ]
    }
  ],
  "properties": [
    {
      "name": "com.jesseahawkins:vendor",
      "value": "gemini-app"
    },
    {
      "name": "com.jesseahawkins:record",
      "value": "https://jesseahawkins.com/vendors/gemini-app/"
    },
    {
      "name": "com.jesseahawkins:notice",
      "value": "This record is a factual recitation of publicly available vendor documentation as of the verification date. It does not constitute a legal opinion, a regulatory compliance certification, or an allegation of wrongdoing. The kept pages are held strictly as an evidentiary record that supports these findings."
    },
    {
      "name": "com.jesseahawkins:signed",
      "value": "false"
    },
    {
      "name": "com.jesseahawkins:signature-note",
      "value": "The AIBOM files of this record are not signed. A signature waits on a signing key held in a key management service. Until then, check each quote against the kept page and its sha256."
    }
  ]
}