Also, is the data store encrypted at rest even when the app is actively being used?
The data is all local, so there's no need for encryption yet. But when we implement sync it'll be end to end encrypted.