Unless you do some MPC or homomorphic enc on tensors, this can't be private and it's just another AI model controlled by someone else.