I see they transfer the data over SSL/TLS to Amazon's S3, but it appears the data is not encrypted prior-or-after the transfer -- meaning Amazon and/or BitCalm.com has access to your data.
It should do client-side encryption of the data, then send it over SSL/TLS to Amazon S3.