diff --git a/firestore.rules b/firestore.rules
index f758a19c..4b1d7142 100644
--- a/firestore.rules
+++ b/firestore.rules
@@ -5,7 +5,10 @@ service cloud.firestore {
 
     match /users/{userId} {
       allow read;
-      allow create: if request.auth != null;
+    }
+
+    match /private-users/{userId} {
+      allow read: if resource.data.creatorId == request.auth.uid;
     }
 
     match /contracts/{contractId} {