Nostr is 'Notes and Other Stuff Transmitted by Relays'
Therefore all content is sent through relays, which can see everything (scary what they can actually see).
Only way to use Nostr "privately" is to host own relay, and only share that with the person you are communicating with.