Two people, one session. Messages and files are encrypted on your phone, so the server can't read them.