Your cloud always contains a copy of the same encrypted data as on your device. We download the whole encrypted copy and decrypt it locally on your device for real sync operation to merge changes. Afterwards we upload the encrypted data on the cloud. In a nutshell, your cloud is only a storage medium, and no security related operation ( encryption or decryption ) is actually performed there. All such operations are performed locally on your device.