They know the names of their customers but they don't know their search queries. There's the privacy. At least that's what they said. Since Kagi isn't Open Source it always comes down to trust.
Email is inherently not private. Even if your own provider zealously protects your privacy, if the person you're emailing uses Gmail, that's all she wrote.