I'm not sure whether requests are encrypted, but the app itself says that it refreshed from tmr data on the main page. Of course this could just be a lie however.
I actually researched it after I posted and from what I could gather not yet but it is in the works. Hopefully materialises faster than Transperths transition to contactless payments 😅