They use your public PGP key to encrypt mails sent to you, before storing them on their server.

This is an optional feature, and turning it on will make webmail and smartphone mail unusable.

Edit, source: (even if you read German it was tricky to find what exactly differentiates their encryption feature.) https://mailbox.org/im-stiftfilm-erklaert-das-vollstaendig-v...