Only the scanning private key, but not the spending private key, so it's a solution where you trust or run your own instance so it can see all incoming payments, but also it would need to keep track of all labels that are created in a wallet to scan for those too