Based off linux uses linux Commands Permisiions based of linuix
Android runtime - modern translation layer from byte code into device instructions Every app has its own sandboxed virtual machine
system apps are isolated
Each app has its own user for the app
The apps dont interact with each other unless explicitly instructed or Content provider/Broadcast receiver is exposed
Root user can access all app folders
Profiles - Separate app data