As long as the prompt and Gemini's own training data is all they're using, they're safe.
Gemini allows users to create instances (gems) preloaded with a document, but I don't think this is doing that, given that it (apparently) can use your own API key.
