Ran several tests with a custom GPT — it assured me it doesn’t have access to my personal info from the to=bio tool and the custom instructions, EXCEPT when I click on “regenerate message”, at which point these were appended to the system prompt.
It creeped me out because it suddenly seemed to know my name, then assured me it didn’t when I asked it about it… spooky!
This seems like a bug rather than an intended feature.