And each user's home directory is stored on a separate hidden partition that is encrypted with another PIN so that even if the device is rooted they can't look at the other user's data.