Your data is processed on-device first: what ONE sees is processed locally wherever possible. Anything that leaves the device is encrypted in transit and at rest, tied to your account only, and never sold or used for advertising.