The goal of our model is to manipulated learned embedded representation such that any potential adversary cannot infer users' privateattribute information.
a challenge is that the text anonymizer does not know the adversary's attack model.