A Privacy Model for Classical & Learned Bloom Filters