I’m not sure whether requests are encrypted, but the app itself says that it refreshed from tmr data on the main page. Of course this could just be a lie however.