If the system is implemented correctly then Kagi cryptographically can't link a particular search to a particular user.