Text this: Characterizing privacy in quantum machine learning