It wouldn't be private even if the privacy policy had some boilerplate. Outside of narrowly defined e2e cases, nothing is private once you give it to someone.