I read a comment by another PM on Reddit who said that everything is fully encrypted, but is sent to a remote server to negotiate the connection with the other user. They also said that they don't collect any private information/code.