Privacy codes don’t keep your conversation private, they simply filter out transmissions from others who aren’t using the same CTCSS or DCS tone. If you have a privacy tone enabled and someone else doesn’t, they’ll hear your transmission, but you won’t hear theirs.