Encrypting user data with privacy policies