Differentially private count queries over personalized-location trajectory databases