Practical Approximate k Nearest Neighbor Queries with Location and Query Privacy