If it’s actually a zap, and you’re writing the message in the client, and their client is displaying it to them, all of nostr.

If it’s a lightning payment with a message and only showing up in their wallet, then it’s private.