It's encrypted with a password you type on the computer, but is stored on the phone. Annoyingly, if you lose the password, the only way to change it (even just for future backups) is resetting all settings on the phone.