I assume it works like Pocket personalized recommendations in Firefox. 1/ The reading history is stored on-device, 2/ encrypted on-device, and then 3/ kept in sync with other authenticated devices that are able to decrypt the reading history (which is stored on the server but not readable by the server because it's encrypted).