I am trying to find documentation on how Kleopatra stores keys that are either imported or generated by it.

It appears that the tool relies on the passphrase (if required) and does not offer any additional layer.

Am I correct in this assumption?