On your device first - that copy is the one you actually work with. The sync copy lives on servers in Zurich, Switzerland.
Because everything is encrypted before it leaves your device, the server location is a bonus rather than a load-bearing promise: the synced data would be unreadable no matter where it sat.