Who can see what is in my pocket?

You, and anyone you explicitly share a specific file with. There is no browse, no search and no listing that reaches another person's pocket.

If you set an App Lock PIN, even somebody holding your unlocked phone cannot open it without the PIN.