pull down to refresh

"Best of all, it’s all private — even keystrokes and cursor movements are encrypted", so this data is still collected? How about promoting privacy by not collecting it at all?