Encrypt on the phone. The relay never holds a body in the clear.

Each device makes a key pair. Public keys register so people can encrypt to you. Private keys stay on the device.

The relay holds ciphertext until delivery or the hold window. Then it deletes that payload. Receipt times may remain. Content does not.