Authy necessarily has the keys on its servers in cleartext. When you integrate them into your application, you send the code the user inputs to Authy's servers for verification.

Authy is a third-party authentication provider, it is not simply a synchronization service.