Dot doesn't store any data. There is no code inside it to allow that. Your music stays with you.
Dot doesn't make any HTTP or HTTPS calls. This means that the app physically doesn't communicate with any remote servers.
All the data that Dot uses is stored on-device using the system music library.