Incremental release of differentially-private check-in data