Alby is a open source client side application. They keys are only in the software on your computer that displays messages.
end-to-end means it is encrypted from the sender to the receiver - but you need some software to decrypt it otherwise you'll never be able to read it. :)
this software must run only on your computer and nowhere else.