Yes, this is spelled out in the software's Data Storage Policy. Hacked databases are stored encrypted, and the decryption key is generated offline, even members of the SpyMSG team do not have access to the data.