Nostr seems like a terrible place to do this because even if you encrypt the content it’s still possible to analyze metadata and it’s available to literally everyone (not just relay service providers or servers) . Better to either do it off Nostr or have a key exchange protocol that creates child keys off of the npubs so there’s at least an alias but once again it’s a giant panopticon if those are ever compromised.