By default user data is accessible but unlisted (so theoretically private). You can set permissions in a way that everything including new uploads is always private to you unless you explicitly share it.
For details: https://galaxyproject.org/learn/privacy-features/
1 Like