Google can't track information in private inference. That's kinda the point.