diff --git a/README.md b/README.md
index 45414330451befc988478fff83dcc8abdb7db4f9..1b89c0e9568d57a8f987ef2365c3a8d84fe42f1c 100644
--- a/README.md
+++ b/README.md
@@ -168,6 +168,15 @@ Your credentials for postfix admin (https://mail.yourdomain.com) are:  user/pass
 - Post installation, please navigate to https://$DOMAIN/settings/admin/overview to check if there are any configuration warnings related to your installation
 - Please note that we have not used http2 protocol in nginx because of nextcloud's notably [slow performance](https://github.com/nextcloud/server/issues/25297) with http2
 
+## Privacy
+
+- The default behaviour of nextcloud is that all users on a server can see and share with each other. As this may make sense on a company or family environment, we keep this behaviour in the  `selfhost` image tag.
+- For public instances like our [ecloud](https://ecloud.global), we provide the `selfhost-privacy` tag with the enhanced privacy approach.
+- Some of the improvements are:
+  - Users cannot find each other on search unless they use the full email address
+  - User statuses are not available globally for other users to view
+  - Global contacts menu for searching contacts is disabled
+
 ## Setting up /e/ OS with /e/ selfhosting
 
 For a new installation, enter login (email address - username@yourdomain.com), password and selfhosting domain FQDN in the fist time usage wizard.
diff --git a/templates/docker-compose/docker-compose.yml b/templates/docker-compose/docker-compose.yml
index 0f2d0e25792ab9416772e0e3cf70f35c50d376a6..87206a9bb94c61de986a8747a3bc23b366c4f81c 100644
--- a/templates/docker-compose/docker-compose.yml
+++ b/templates/docker-compose/docker-compose.yml
@@ -123,7 +123,7 @@ services:
       - "${DOMAIN}:${NC_HOST_IP}"
 
   nextcloud:
-    image: registry.gitlab.e.foundation/e/infra/ecloud/nextcloud:316db4e0
+    image: registry.gitlab.e.foundation/e/infra/ecloud/nextcloud:selfhost
     container_name: nextcloud
     restart: always
     networks: