It private on the receiver side by using BIP352, so that you don't have to regenerate new addresses each time or give out an xpub.