Alby is a custodial wallet so they can very easily see when one npub zaps another npub. Not very private. Also, zaps are usually published as nostr events so that clients can show the zap tally. Again...