I see. Admittedly it's been a minute since I've logged into a new session of Notesnook. But accessing the web portal prompts for my login name, password, and then a 2FA code sent to my email address. Within the app (at least on Android) there is an option for no privacy, some privacy, and max privacy. Which have various behaviors when you navigate away from the app or close and reopen. I'm no expert, but do these sound like zero knowledge in this context?
I've still not decided whether I'll stick with them, but I do like the app and was able to get a year of their pro membership for less than half off, so I figured I'd give it a try and at the very least support the devs to some degree.