keys are stored on device. profile pics can be stored anywhere, they are just urls. We use https://nostr.build for uploading since they scan CSAM for us. Relays are stored as a note on relays, just like your profile, notes, contacts, etc