Gemini Spark Leaked: Google’s 24/7 AI Agent Days Before I/O 2026

๐Ÿ†• Breaking (May 16, 2026): Gemini Spark surfaced in Google app beta 17.23 on May 14, two days before publication. Google has not officially announced the product. Expected reveal: Google I/O 2026 keynote on May 19. Everything below is sourced from the leaked onboarding screen, hands-on screenshots from independent testers, and verified APK decompilation reporting from 9to5Google. This post will be updated within 24 hours of the official announcement.

Three days before Google I/O 2026, a single onboarding screen leaked out of the Gemini app beta and broke the internet’s tech corner. The product is called Gemini Spark. It is Google’s answer to Claude Cowork, OpenAI Operator, and Microsoft’s Copilot agent. And the line everyone is screenshotting reads: “may do things like share your info or make purchases without asking.”

This Gemini Spark analysis covers everything we know after 48 hours of leaks, three independent APK decompilations, and side-by-side comparison with the agentic AI tools we have actually tested. The verdict so far: Spark looks genuinely useful, but the privacy fine print is the loudest warning Google has ever shipped on a consumer AI product.

The Bottom Line

โšก TL;DR โ€“ The Bottom Line

What It Is: Google’s always-on AI agent that handles inbox triage, scheduled tasks, and multi-step workflows in the background of your Gemini app โ€” expected to launch at Google I/O 2026 on May 19.

Best For: Heavy Gmail and Google Workspace users, anyone already paying for Google AI Pro or Ultra, and people delegating work to Claude Cowork who want the same automation inside Google’s ecosystem.

Likely Price: Unconfirmed. Strongest signals point to Google AI Ultra ($249.99/month) at launch, expanding to AI Pro ($19.99/month) within 90 days. Free-tier access not expected.

Our Take: If the privacy controls at launch match what the leak suggests, this is the most aggressive agent permission model any major lab has shipped. Wait two weeks past launch for real-world reports before turning it on.

โš ๏ธ The Catch: The leaked onboarding screen warns Spark “may do things like share your info or make purchases without asking.” Google’s own copy tells you to supervise it.

May 19
Expected Launch
$249.99
Likely Entry Price/mo
AI Ultra
Predicted Tier
3.5/5
Provisional Rating

A person checking their phone showing Gemini Spark beta onboarding screen, with morning coffee and laptop in background
Gemini Spark surfaced in Google app beta version 17.23 on May 14, 2026.

What Gemini Spark Actually Does

Strip the marketing language out and Gemini Spark is Google’s bid to ship the same product category that Anthropic shipped as Claude Cowork in January 2026 and OpenAI shipped as Operator. The category goes by different names. The shape is always the same.

It runs in the background, not as a chat window you open. It pulls from your accounts (email, calendar, location, browser sessions, connected apps) without asking each time. It executes multi-step tasks while you do other things. The closest everyday analogy: imagine hiring an intern who never sleeps and already has the keys to your house, your inbox, and your credit card. Useful, but you would not give those keys lightly.

The leaked onboarding screen, spotted first by 9to5Google’s APK Insight team and confirmed by independent testers Andrew Curran and TestingCatalog, describes three example capabilities:

  • Declutter your inbox. Summarize or archive newsletters, unsubscribe from mailing lists.
  • Get meeting briefs. Pull concise overviews and relevant context before important calendar events.
  • Get a custom news digest. Track stories you care about and follow how they evolve.

If those three use cases sound familiar, it is because they are the same demos Anthropic ran for Claude Cowork in January and OpenAI ran for Operator in late 2025. Spark is Google playing catch-up in the agentic AI race, with one advantage neither rival can match: it sits one tap away inside the Gemini app already installed on hundreds of millions of Android phones.

The new app layout reveals a two-tab interface, “Chat” and “Agent,” replacing the current single-pane Gemini experience. The Agent tab is where Spark lives. You create new tasks, see active ones running in the background, and view scheduled tasks set to fire at specific times.

๐Ÿ’ก Key Takeaway: Spark is not a smarter chatbot โ€” it is a scheduled, always-on background process with API access to your Google accounts. If you currently keep “AI” mentally fenced inside a chat window, that mental model breaks the moment you turn this on. Spark acts on your data while you do other things.

Inside the Leaked Onboarding Screen

The full text of the leaked Spark onboarding screen is unusually candid about what the agent will and will not do. Here is the relevant passage, reproduced from screenshots verified across multiple testers:

Let Gemini do more as your everyday AI agent, ready 24/7 to help with your inbox, online tasks, and more. The more you use Gemini Spark, the better it understands you and what you want to accomplish. To work on your tasks, it uses your info from sources like Connected Apps, skills, chats, tasks, websites you’re logged into, Personal Intelligence, location, and more. Gemini will also share necessary info with third parties.

Read that list again. Connected Apps. Skills. Chats. Tasks. Websites you are logged into. Location. The agent’s context is not just your Gemini chat history. It is your entire Google-adjacent digital life, plus whatever third-party services you have authorized.

Conceptual illustration of the Gemini Spark two-tab interface showing Chat and Agent modes with task management
The leaked interface shows a two-tab split: Chat for conversations, Agent for autonomous tasks.

The Most Important Sentence in the Leak

One sentence on the onboarding screen has done more for the leak’s viral reach than the entire feature set. Reproduced verbatim:

While it is designed to ask for your permission before taking sensitive actions, it may do things like share your info or make purchases without asking.

Notice the architecture of that sentence. “Designed to ask for your permission” is a stated intention. “May do things… without asking” is the operational reality. Most consumer agreements bury these tensions in 40-page terms of service. Google put them on the welcome screen.

๐Ÿ” REALITY CHECK

Marketing Claims: “Let Gemini do more as your everyday AI agent, ready 24/7.”

Actual Onboarding Disclosure: The same screen instructs users to “make sure to supervise Gemini Spark, and don’t rely on it for medical advice, legal, financial, or other professional help.” Google is telling you to babysit the always-on agent.

Verdict: “Always-on” and “needs supervision” are difficult to reconcile in the same product. The launch will live or die on whether Google ships granular per-task permission controls.

For context on how rival agents handle this same trust problem, our Claude Cowork review covers Anthropic’s approval-required model in detail. Claude Cowork halts before destructive actions like sending email, making purchases, or overwriting files. Whether Spark ships with the same guardrail or defaults to “act first, ask later” will be the single most important detail in Google’s I/O announcement.

It is worth noting that Sameer Samat, who runs Android at Google, told CNBC just days before the leak that “the human is always in the loop” for the Gemini Intelligence agentic features. The leaked Spark onboarding screen suggests otherwise, at least for some action categories. The reconciliation between those two statements is what we will be listening for on May 19.

Gemini Spark Features That Actually Matter

Skills: Recurring Tasks With Custom Instructions โญโญโญโญโญ

The most-talked-about feature in the leak is “Skills.” Think of a Skill as a saved instruction set for a task you run repeatedly. Format your weekly investor update from a fixed template. Pull receipts from Gmail every Sunday and add them to a tracking spreadsheet. Summarize the top three industry newsletters every weekday before 9 a.m.

If that sounds familiar, it is. Claude Projects already does this. Gemini Gems already does this. The difference is that a Spark Skill executes autonomously on a schedule, not when you open the app and ask. That is the leap from “custom assistant” to “actual agent.”

A professional setting up a recurring Gemini Spark skill on a desktop, with a calendar showing scheduled automated tasks throughout the week
Skills turn one-off prompts into scheduled background tasks. This is the leap from custom assistant to actual agent.

Gmail Inbox Triage โญโญโญโญ

Spark can summarize newsletters, archive low-priority threads, and unsubscribe from mailing lists. For anyone with a Gmail inbox carrying 5,000 unread messages, this is the killer use case. Twenty minutes of inbox archaeology becomes a 30-second background task.

The honest caveat: Claude in Chrome and Operator already do this. The advantage Spark has is the direct API connection to Gmail rather than DOM-level browser scraping, which means less breakage and faster execution. The risk is that an inbox triage agent with auto-archive permissions can quietly file away an important email and you may never realize it shipped to the wrong folder.

Chrome Browser Control โญโญโญ

Leaked details suggest Spark can operate the Chrome browser as an agent, similar to Project Mariner’s existing implementation for AI Ultra subscribers. The new wrinkle is “remote browser session data,” which appears to let Spark resume workflows in the background even after you close the tab.

๐Ÿ” REALITY CHECK

Marketing Implication: Background browser automation means you set up a task and walk away.

Actual Mechanic: The system stores remote browser session data including login information and remote execution states. That is genuinely useful for resuming workflows, and it is also a serious authentication-token attack surface if Google’s session storage is ever compromised.

Verdict: Powerful feature. Wait for security researchers to audit the session-storage layer before turning this on for accounts that hold financial credentials.

Meeting Briefs โญโญโญโญ

Spark pulls relevant emails, documents, and recent communication with attendees before a Calendar event fires. If you have a 2 p.m. with a client and Spark sees a Google Doc shared with them last week, a Gmail thread from this morning, and a Drive folder of past presentations, it stitches together a one-page brief automatically.

This is the feature that genuinely justifies the Google ecosystem advantage. No third-party agent has clean API access to Gmail, Calendar, Drive, and Docs at the same time. Spark does. For anyone running back-to-back calls all day, this single feature might be worth the subscription cost on its own.

Person reviewing a clean Gmail inbox on laptop after Gemini Spark AI agent triaged morning newsletters
Inbox triage is the killer demo most testers reported running first.

Gemini Spark Feature Strength (Pre-Launch Estimate)

Star ratings from our pre-launch assessment of each leaked Spark capability, on a 1-5 scale.

๐Ÿ’ก Key Takeaway: If you only judge Spark on the four user-facing features above, it lands as “useful but not revolutionary.” The reason it scores 3.5/5 and not 4.5 is the fifth bar on the chart โ€” privacy controls โ€” where Google has shipped less detail than any rival agent in this category.

Gemini Spark Pricing: What You’ll Probably Pay

Pricing is the single biggest unanswered question. Google has not confirmed anything publicly. The strongest signals from the leak, combined with how Google has tiered every previous Gemini agent feature, point to the following structure.

PlanCurrent PriceSpark Access (Predicted)Verdict
Free Gemini$0/moNot expected at launchSkip. Almost certainly behind paywall
Google AI Plus$7.99/moPossibly delayed accessWait. Plus has historically lagged Pro on new features by 30-90 days
Google AI Pro$19.99/moLikely within 60-90 days of launchProbable best value if Spark works
Google AI Ultra$249.99/moExpected at launchFor early adopters and heavy users only

๐Ÿ” REALITY CHECK

Marketing Implication: Spark looks like the natural successor to free Gemini agent features that Google has previewed.

Actual Tier History: Project Mariner, Deep Think, Veo 3.1, and every Google agentic feature shipped in the last 18 months launched on Ultra first. The free tier has never received an agent-class feature at launch.

Verdict: Assume Spark is gated to AI Ultra ($249.99/month) at launch. Plan your budget accordingly, or wait for the AI Pro rollout 30-90 days later.

Why this matters: the existing Gemini Agent feature (which Spark appears to be the renamed evolution of) has been gated to Google AI Ultra subscribers since launch. The “Spark” rebrand and the consumer-facing onboarding screen both suggest a wider rollout, but Google has every commercial incentive to keep the headline agent feature on the $249.99 tier as an Ultra differentiator against ChatGPT Pro at $200/month.

The price math worth running: if you are already paying $20/month for Claude Pro for Cowork access, adding Google AI Pro at $19.99/month for Spark doubles your monthly AI spend. The question becomes whether Spark’s Google ecosystem advantage (Gmail, Calendar, Drive, Docs) is worth a parallel subscription. For most heavy Google users, the answer will be yes. For everyone else, picking one agent and sticking with it makes more sense.

๐Ÿ“ฌ We’re updating this post within 24 hours of I/O 2026.

Get the verdict โ€” and hands-on findings โ€” delivered the moment Spark goes live. No hype, no spam.

Subscribe Free โ†’

Gemini Spark vs Claude Cowork: Head-to-Head

The most direct comparison for Gemini Spark is Claude Cowork, which we have been using daily since January 2026. Both products target the same job, the same user, and roughly the same price point. The differences are mostly architectural.

CriteriaGemini Spark (Leaked)Claude Cowork (Tested)Winner
Always-on background executionYes, default modeNo, runs when you delegateSpark for set-and-forget
Permission model“May share info or make purchases without asking” (per leak)Halts before destructive actions, awaits approvalCowork for safety
Gmail / Calendar / Drive integrationNative API accessVia Claude in Chrome browser automationSpark for Google users
Local file access on your computerLimited, mostly cloud-firstFull desktop access (Windows / macOS)Cowork for file work
Recurring scheduled tasks (Skills/Projects)Skills with scheduled executionCowork scheduled tasks, GA since April 2026Tie, near-identical features
Expected entry price$19.99/mo (estimated, AI Pro)$20/mo (Pro, GA confirmed)Tie
Pre-existing user trustMixed (Gemini privacy history)Strong (Anthropic safety positioning)Cowork
Availability as of May 16, 2026Leaked, not launchedGenerally available since April 9Cowork by default

The honest summary: if you live inside Gmail and Google Workspace and want one agent to handle inbox, calendar, and Docs without context-switching, Spark will likely be the better tool the moment it ships. If you work across local files on your computer, value approval-required guardrails on destructive actions, or simply want an agent you can use today, Claude Cowork is the better answer.

Three-Way Agent Showdown: Spark vs Cowork vs Operator

Pre-launch scoring across seven dimensions that matter for daily use. Higher is better. Spark scores are provisional based on the leaked feature set.

๐Ÿ’ก Key Takeaway: The chart above hides nothing: Spark wins on ecosystem and background execution but loses on safety and trust. If your work is “send 10 routine emails for me every morning,” Spark wins. If it’s “draft a contract and don’t accidentally send it,” Cowork wins. Match the agent’s strengths to your task type, not to the marketing.

For a more technical comparison between the underlying models powering each agent, our Claude Opus 4.5 vs Gemini 3.0 breakdown covers reasoning benchmarks, coding scores, and where each model genuinely wins.

What About OpenAI Operator and Project Mariner?

OpenAI Operator and Google’s own Project Mariner are the other two agents in this category. Operator runs as a web-based browser agent inside a cloud VM, which means it cannot touch your local files but is also harder to compromise. Project Mariner is the existing Google agent that Spark appears to be the consumer-facing rebrand of, currently limited to AI Ultra subscribers.

The cleanest mental model: Operator is the cautious cloud-only option, Mariner is the limited-tier predecessor, Cowork is the desktop-savvy alternative, and Spark is Google’s bid to put all of it inside the Gemini app that hundreds of millions of users already have installed. The distribution advantage alone could make Spark the most-used consumer AI agent by year-end, even if Cowork remains the most capable.

Who Should Use Gemini Spark (And Who Shouldn’t)

Choose Spark if: Your daily work lives inside Gmail, Calendar, Drive, and Google Docs. You are already paying for Google AI Pro or Ultra and want the agent features bundled in. You spend more than 30 minutes a day on inbox management, meeting prep, or recurring research tasks that follow predictable templates.

Stick with Claude Cowork if: Your work involves local files on your computer, you value approval-required guardrails on destructive actions, or you are already deep in the Claude Code and Anthropic ecosystem. Cowork has shipped, has been audited, and has a year of public security testing behind it. Spark has none of that yet.

Try OpenAI Operator if: You want browser-only automation isolated from your personal accounts, prefer the cloud VM security model, or already pay for ChatGPT Pro. Operator is the most cautious option of the three.

Skip the whole category if: You handle sensitive client data under NDA, work in regulated finance or healthcare, or live in the EU or UK where the AI Act’s transparency obligations for consumer-facing AI agents kick in on August 2, 2026. Wait for the regulatory dust to settle.

What the Community Is Saying About Gemini Spark

The leak has already generated a measurable wave of skepticism, mostly concentrated on the privacy language. The viral TestingCatalog thread on X hit over 1,700 likes in 24 hours, with the most-shared replies all flagging the same line about sharing info and making purchases without asking.

The Reddit reaction tracks similar concerns. Threads on r/Bard and r/google have framed Spark as a “watch out for what you opt into” moment rather than a hype cycle. Developers on the platform are noting that the “skills” framework looks more capable than what currently ships in Gemini Gems, but the always-on positioning is what raises eyebrows.

Notable enterprise commentary is still thin because nothing has officially launched. Expect that to change within hours of the I/O keynote on May 19, particularly from privacy-focused outlets and security researchers who will be auditing Spark’s permission model in detail.

Side-by-side comparison concept of Gemini Spark and Claude Cowork AI agents showing different work environments
Gemini Spark and Claude Cowork target the same job from opposite architectural directions.

The Road Ahead: What I/O 2026 Will Reveal

Short-term (May 19 keynote): Official Spark announcement, pricing tier confirmed, supported regions disclosed, demo of the inbox triage and meeting brief use cases. Based on the existing Google AI agent rollout pattern, expect immediate AI Ultra access and a waitlist for AI Pro users.

Medium-term (June-August 2026): Broader rollout to AI Pro subscribers, third-party app integrations beyond Google Workspace (Slack, Notion, Linear most likely), and the first round of security researcher findings on the session-storage layer. The EU AI Act’s consumer-facing AI agent obligations also kick in on August 2, which will force Google to publish clearer disclosure documentation.

Long-term (Q4 2026): Probable expansion to Aluminium OS laptops and Googlebooks, deeper integration with Android Auto, and the inevitable Apple Intelligence response at WWDC 2026 in June. Whether Spark becomes the default consumer AI agent or remains a power-user feature will be visible in Google’s Q3 earnings call.

Gemini Spark FAQs: Your Questions Answered

Q: Is there a free version of Gemini Spark?

A: Almost certainly not at launch. The leaked onboarding screen does not specify a tier, but every previous Google agentic feature has launched on AI Ultra ($249.99/month) before trickling down to AI Pro ($19.99/month) and never reaching the free tier. If you want any agent capability for free today, Gemini CLI remains the only free Google option.

Q: When does Gemini Spark launch?

A: The strongest signal points to Google I/O 2026 on May 19, 2026, at 10 a.m. Pacific. Google has not officially confirmed Spark as a keynote item, but the timing of the beta leak two days prior is the same playbook Google used for Gemini 3 and Project Mariner.

Q: Is Gemini Spark safe to use?

A: The honest answer is that we do not yet know. The leaked onboarding screen explicitly warns that Spark “may do things like share your info or make purchases without asking” and tells users to supervise it. Wait two weeks past the official launch for security researcher findings before authorizing Spark on accounts that hold financial credentials or sensitive correspondence.

Q: How does Gemini Spark vs Claude Cowork compare?

A: Spark is Google’s always-on, Gmail-native agent expected at I/O 2026. Cowork is Anthropic’s desktop-first agent that has been generally available since April 2026. Spark wins on Google ecosystem integration and background execution. Cowork wins on local file access, approval-required guardrails, and the fact that it actually exists today. Full breakdown in our Claude Cowork review.

Q: How does Gemini Spark compare to ChatGPT Operator?

A: Operator runs in an isolated cloud VM and only touches the web through a browser. Spark runs natively inside Gemini with API access to Gmail, Calendar, and Drive. For Google-heavy users, Spark will likely produce more useful work. For anyone uncomfortable giving an agent direct access to their inbox and calendar, Operator’s cloud-only sandbox is the safer architectural model.

Q: What are Gemini Spark Skills?

A: Skills are saved task templates with custom instructions. Think of them as Claude Projects or Gemini Gems with one critical difference: a Spark Skill can fire automatically on a schedule, not just when you open the app. Example: “Every Friday at 4 p.m., summarize the top 5 emails from my biggest client and draft a status update.”

Q: Will Gemini Spark train on my data?

A: Unconfirmed at the time of this writing. Google’s current policy for Gemini Apps Activity is that data used to improve the model can be opted out via the activity setting, but functional improvements may continue to use limited data for up to 72 hours. The Spark-specific privacy policy has not been published. Expect clarification at the I/O announcement.

Q: Will Gemini Spark be available in the EU and UK?

A: Probably not on day one. The EU AI Act’s transparency obligations for general-purpose AI models began applying in August 2025, and the broader consumer-facing AI agent obligations take effect on August 2, 2026. Google has historically launched agentic features in the United States first and added EU and UK access 60-180 days later, after compliance documentation is filed.

Final Verdict: Wait Two Weeks, Then Decide

โ˜…โ˜…โ˜…ยฝโ˜†
3.5/5
Editor’s Provisional Rating ยท Pre-Launch

Genuinely capable agent technology with a real Google ecosystem moat โ€” held back from a higher score by the most aggressive permission language any major lab has shipped on a consumer AI agent.

โœ… What Looks Strong

  • โœ“ Native Gmail, Calendar, Drive, and Docs API access โ€” no DOM scraping
  • โœ“ Skills framework enables scheduled, recurring task execution
  • โœ“ Meeting briefs use case is a unique ecosystem-only advantage
  • โœ“ Already-installed Gemini app means zero-friction distribution
  • โœ“ Two-tab Chat/Agent UI clearly separates conversational from autonomous use

โŒ What Raises Eyebrows

  • โœ— “May share info or make purchases without asking” โ€” explicit on onboarding
  • โœ— Remote browser session storage is an authentication-token attack surface
  • โœ— Likely $249.99/month AI Ultra at launch puts it out of reach for most
  • โœ— Zero independent security audit before consumer rollout

The technology behind Spark looks genuinely capable. The Google ecosystem integration is a real moat that neither Anthropic nor OpenAI can replicate. The Skills framework, scheduled execution, and meeting brief use case are the kind of features that justify a subscription on their own for heavy Gmail users.

The reason the rating sits at 3.5 instead of higher is the privacy fine print. Google chose to put the most controversial sentence about Spark on the welcome screen itself, which is to their credit on transparency and to their detriment on trust. Whether the launched product ships with the granular permission controls and per-action approval prompts that the onboarding text implies will be the single biggest determinant of whether Spark is worth turning on.

Use Spark if: You live in Gmail and Workspace, already pay for Google AI Pro or Ultra, and have 30+ minutes of recurring inbox and calendar work per day that follows predictable patterns.

Stick with Claude Cowork if: You value approval-required guardrails, work with local files on your computer, or simply want an agent you can use today rather than one that ships next week.

Our recommendation: do not turn on Gemini Spark in the first 48 hours after launch. Let the security researchers and privacy-focused outlets audit the permission model first. Then decide. We will update this Gemini Spark review within 24 hours of the official I/O 2026 announcement on May 19, with the same level of skepticism and the addition of hands-on testing the moment access becomes available.

A thoughtful person looking at a calendar with May 19 circled, holding a smartphone showing the Gemini app, deciding whether to activate Gemini Spark
Watch the I/O 2026 keynote on May 19. Wait two weeks. Then decide.
T
Reviewed by Tanveer Ahmad

Founder of AI Tool Analysis. Tests every tool personally so you don’t have to. Covering AI tools for 10,000+ professionals since 2025. See how we test โ†’

Stay Updated on AI Agent Launches

Don’t miss the next big update. Get AI Weekly delivered every Thursday at 9 AM EST with honest reviews, price drops, and features you can actually use.

  • โœ… Honest Reviews: We actually test these tools, not rewrite press releases
  • โœ… Price Tracking: Know when tools drop prices or add free tiers
  • โœ… Feature Launches: Major updates covered within days
  • โœ… Comparison Updates: As the market shifts, we update our verdicts
  • โœ… No Hype: Just the AI news that actually matters for your work

Free, unsubscribe anytime. 10,000+ professionals trust us.

Want AI insights? Sign up for the AI Tool Analysis weekly briefing.

Newsletter

Want AI insights? Sign up for the AI Tool Analysis weekly briefing.

Newsletter

Signup for AI Weekly Newsletter

Last Updated: May 16, 2026

Gemini Spark Version Tested: Google app beta 17.23 (leaked onboarding screen, not hands-on)

Next Review Update: Within 24 hours of Google I/O 2026 keynote (May 19, 2026)

Have a tool you want us to review? Suggest it here | Questions? Contact us

Leave a Comment