We do both, all client side 😊

Private key is stored on iOS to keychain and on android it is encrypted cia key that is stored in keystore 😊