There's encrypted memos that only the account owner can read.

Basicl'y you put thus in the memo field:

# my secret message

The dash makes it into an encrypted string for everyone except the sender and receiver.