The notification contents are sent over secure channels but are not end-to-end encrypted.

You can add additional data to the payload and have a helper app decrypt on the device when a notification is received.