It's stored in the 3CX DB in plain text. Transport to/from the server to the apps/client should be over a secured connection. The apps themselves - can't tell you if it's encrypted at rest but I doubt it.
It is as @SweetAction said, on the Apps as far as I am aware, the chats are not stored locally, on load they are loaded from the server over a secure transport, but remain in memory.