private model inference