diff --git a/build/update_users.sh b/build/update_users.sh
index f9c8675..b766f26 100755
--- a/build/update_users.sh
+++ b/build/update_users.sh
@@ -23,7 +23,8 @@ function get_readme() {
   cat <<EOF
 # SSH Box home
 
-- data/  folder is shared to all users, group access is forced.
+- shared/  folder is shared to all users, group access is forced.
+- private/ folder is kept to the user.
 - create any other folder to keep files to yourself.
 - don't mess things up.
 
@@ -73,7 +74,6 @@ for file in *; do
       adduser -D -u $uid $user
       pw=$( get_pass "$file" )
       echo -e "$pw\n$pw" | passwd $user 2> /dev/null
-      mkdir -p "/home/$user/data"
       chmod 0711 "/home/$user"
       usermod -a -G box $user
       if grep -q '^# .*trusted.*' "$file"; then
@@ -82,8 +82,11 @@ for file in *; do
     }
     rm -f "/home/$user/.ssh/authorized_keys"
     get_readme > "/home/$user/README.md"
-    chown -R "$user":box "/home/$user/data"
-    chmod -R u+rwX,g+rwX,o+X "/home/$user/data"
+    mkdir -p "/home/$user/shared" "/home/$user/private"
+    chown -R "$user":box "/home/$user/shared"
+    chown -R "$user":"$user" "/home/$user/private"
+    chmod -R u+rwX,g+rwX,o+X "/home/$user/shared"
+    chmod -R u+rwX,g-rwX,o-rwX "/home/$user/private"
     chmod 0600 "$file"
     chown $USR "$file"
   fi