Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number and income
• Account balances and overdraft history
• Transaction history and checking account information

When you are no longer our customer, we continue to share your information as described in this notice.

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Bryant State Bank chooses to share; and whether you can limit this sharing:

• For our everyday business purposes we share information such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus.
• We do not share your information for:
  • Marketing purposes
  • Joint marketing with other financial companies
  • Our affiliates’ everyday business purposes about your transactions and experiences
  • Our affiliates’ everyday business purposes about your creditworthiness
  • Nonaffiliates to market to you

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

We collect your personal information, for example, when you open and account or deposit money, pay your bills or apply for a loan, and use your debit card.

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Federal law gives you the right to limit only:

• sharing for affiliates’ everyday business purposes—information about your creditworthiness
• affiliates from using your information to market to you
• sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

Definitions

• Affiliates - Companies related by common ownership or control. They can be financial and nonfinancial companies.
  • Bryant State Bank has no affiliates.
• Nonaffiliates - Companies not related by common ownership or control. They can be financial and nonfinancial companies.
  • Bryant State Bank does not share with non affiliates so they can market to you.
• Joint Marketing - A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
  • Bryant State Bank doesn't jointly market.

Call Bryant State Bank at 605-628-2171 or go to www.bryantstatebank.com

We want you to understand the types of information we access, collect, use, store, and transfer (“Process”) through our mobile banking application (our “App”), including when you are using the App as well as when the App is running in the background. Be assured the App Processes your information only for the following limited purposes:

• to provide you with digital banking and related services ("Services");
• to maintain & improve our Services;
• to ensure our Services are working as intended, such as tracking outages or troubleshooting issues that you report to us;
• to develop new Services and features;
• to provide you with personalized Services and content;
• to measure the performance of our App and Services;
• to communicate with you;
• to protect our Institution and customers from fraud, abuse, security risks, and technical issues; and
• any other specific purposes referenced or described in this Privacy and Security Policy.

We will always ask for your consent before using your information for a purpose that isn’t covered in this Privacy and Security Policy.

Information you enter or provide to us:

When you register, access, and use the App, you provide us with personal and sensitive information that includes your name, password, government identifiers like your social security number (SSN) or drivers’ license number, phone number, email address, physical or mailing address, financial information, payment information, payment card information, and credit information.

Other information we collect as you use our App:

The information we collect includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number. We also collect information about the interaction of your other apps, browsers, and devices with our digital banking services.

Additionally and as described in more detail below, your device may periodically contact our backend digital banking systems to provide information about your device and connection to the digital banking services. This information may include things like your device type and carrier name, crash reports, which apps you've installed, and, depending on your device settings, other information about how you’re using your mobile device.

Your activity

We collect information about your activity in connection with our App, in order to better understand:

• your interactions and behavior associated with App content and features;
• the ways in which you are moving through and navigating the App;
• the Services and features that are most valuable to you;
• areas or stages of the App where you may disengage or get stuck; and
• your typical patterns of behavior in connection with the App.

The activity information we collect may include:

• logs, tags, reporting, and other analytics reflecting your specific use of screens, workflows, buttons, and features;
• logs, tags, reporting, and other analytics reflecting your navigation through, engagement with, and disengagement with the App;
• haptic information related to your use of your device (e.g. swipes, taps);
• your financial, payment, and transaction activity and history (including purchase history); and
• your navigation to or activity on third-party sites and apps linked to our App.

This information enables us to improve, modify, or expand the services, features, and experience delivered through the App as well as to support in-App messaging, deliver user guides and polls, and optimize performance of the App. Additionally, and in particular, this information also enables us to detect and flag suspicious or potentially fraudulent activity.

Your device and other apps

We access and collect information related to your device and other Apps along with associated data. This information may be collected both while you use the App and while the App is running in the background or is otherwise not in use.

Information we process concerning your device and other Apps includes:

• your device type;
• your device ID;
• other available device identifiers;
• your device operating system;
• network and IP address information;
• your cellular data carrier; and
• device and app diagnostic information.

Additionally, if our App needs to access protected features of your device, then you will have an opportunity to provide consent. In the event that you decline to provide express consent, then the App will not be permitted to access data gated by your device’s permissions model. Without your express consent, the App will not allow use of the protected feature or related data.

If and when our App accesses your:

• phone or contact book data;
• device location; or
• other background restricted permissions,

then all related data is treated as personal or sensitive data subject to this Mobile Privacy and Security Policy.

Restricted permissions accessed by our App include:

• Use of Fingerprint
  • We collect information about your biometric identifiers when you use our App, which enables us to streamline your authentication and login experience and access our Services with less friction.
• Precise or Fine Location
  • We collect information about your location when you use our App, which helps us offer features like search results for branch and ATM locations, credit card controls, and messages based on your general location.
• Read or access Contacts, Contacts List, Contact Images or phone log
  • We collect information about your contacts when you use our App, which enables us to facilitate requested P2P and other payment transactions.
• Access Camera or Pictures/Photos
  • We collect information from your device’s camera and photos when you use our App, which enables use of mobile check deposit and other image scanning or capturing features of the App

Sharing your information

Our App will only share information with third-parties with your consent, for the purpose of providing you with Services, or for the other ancillary purposes described in this Privacy and Security Policy.

Our App Processes your financial or payment information or government identification numbers and will never publicly disclose any personal and sensitive user data related to financial or payment activities or any government identification numbers.

Our App may Process non-public phonebook or contact information, and we don't allow unauthorized publishing or disclosure of your or others’ non-public contacts.

Our app includes third-party code and SDKs that may collect personal and sensitive user data solely for the purposes described in this Privacy and Security Policy. All third-party providers of code and SDKs will Process your data in accordance with this Privacy and Security Policy and all applicable law and standards.

Neither we nor our third-party providers will ever sell your personal and sensitive data Processed by the App.

The App may also transfer data as necessary for legal reasons including compliance with a valid governmental request, applicable law, or as part of a merger or acquisition with legally adequate notice to users.

The App handles all personal and sensitive user data securely, including transmitting it using modern cryptography.