You could in theory have one separate chain for each user, but it would get quite difficult to manage, since each chain requires its own multichaind process. You're probably better using a single chain and thinking carefully about how to manage confidentiality.