diff --git a/scripts/install b/scripts/install
index 6ee74ed..1cb9e81 100755
--- a/scripts/install
+++ b/scripts/install
@@ -260,7 +260,7 @@ ynh_multimedia_addaccess $app
 chown -R $app:www-data "$install_dir"
 chown -R $app: "$data_dir"
 chmod -R a=r,u+w,a+X $install_dir/
-chmod -R a=r,u+w,a+X $data_dir/data/
+chmod -R ug=r,o=---,u+w,ug+X $data_dir/data/
 chmod 640 "$install_dir/config/config.php"
 chmod 755 /home/yunohost.app
 chmod 750 $install_dir
diff --git a/scripts/restore b/scripts/restore
index 482b776..4286a7e 100755
--- a/scripts/restore
+++ b/scripts/restore
@@ -82,7 +82,7 @@ ynh_restore_file --origin_path="$data_dir" --not_mandatory
 chown -R $app:www-data "$install_dir"
 chown -R $app: "$data_dir"
 chmod -R a=r,u+w,a+X $install_dir/
-chmod -R a=r,u+w,a+X $data_dir/data/
+chmod -R ug=r,o=---,u+w,ug+X $data_dir/data/
 chmod 640 "$install_dir/config/config.php"
 chmod 755 /home/yunohost.app
 chmod 750 $install_dir
diff --git a/scripts/upgrade b/scripts/upgrade
index 57eb833..602afe7 100755
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -359,7 +359,7 @@ exec_occ background:cron
 chown -R $app:www-data "$install_dir"
 chown -R $app: "$data_dir"
 chmod -R a=r,u+w,a+X $final_path/
-chmod -R a=r,u+w,a+X $datadir/data/
+chmod -R ug=r,o=---,u+w,ug+X $data_dir/data/
 chmod 640 "$install_dir/config/config.php"
 chmod 755 /home/yunohost.app
 chmod 750 $install_dir