Yes, your account data is encrypted in transit and at rest. Your tasks and other data are encrypted in transit. 

If you are very privacy conscious, you can disable "Cloud Sync" in your account settings, and then none of your user data will leave your computer! Marvin uses local storage so all of your tasks can live directly in your browser (using the web app) or in your file system (when using desktop apps).