In the same way that bitcoin transactions are fully public and can be watched by the IRS, zaps can also be watched by them. There are private zaps, but very few clients implement them. The majority of zaps you receive are public and you cannot change that (it's the sender's choice).
If you don't want to receive public zaps, don't add the lightning address to your profile.