They are practically the exact same. They are interchangeable. A timid person is someone who lacks self-assurance, is easily alarmed and is shy. A shy is person is someone who doesn't like confrontation and doesn't like drawing attention to themselves.