Everything is private, every user has a unique key associated with their account, and every object (file and folder) has unique, individual encryption keys generated for it.

Because of the way data is encrypted, the system supports sharing at the file and folder level without granting access to other data in a user's filesystem.