g-force: i have had a look at your code, everything seems ok, but may i suggest a optimization? (could perhaps also help with next version alowing more users to view...)
i see your privacy infos depent on the username, that's no problem as long as you don't change someones username because he want....
you should convert the username into the userid and just save the userid of the user a private message is shown, so he can always read the message, no matter if he changes his name somewhere in future.
as said this could help later also with adding more users to view this...
just a suggestion