I am by no means a security expert. I will definitely add a disclaimer about this haha.

It uses nip44 encryption.

Right now no expiration date, but I want to make this a daemon and the daemon could check if the expiration is reached and overwrite the data. I am not sure if relays honor the timestamp. However someone might still copy the data while it is available. Getting the encryption right is crucial in this case