Lady working at a laptop computer in an office

Privacy Policy

What Does Farmers & Merchants Savings Bank Do With Your Personal Information?

FACTS	Rev. Date 04/2024
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social security number and income Account balances and payment history Credit history and credit scores When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information, the reasons Farmers & Merchants Savings Bank chooses to share, and whether you can limit this sharing.

Reasons We Can Share Your Personal Information	Does Farmers & Merchants Savings Bank Share?	Can You Limit This Sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes – to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	Yes
For our affiliates’ everyday business purposes – information about your transactions and experiences	No	We Do Not Share
For our affiliates’ everyday business purposes – information about your creditworthiness	No	We Do Not Share
For our affiliates to market to you	No	We Do Not Share
For nonaffiliates to market to you	No	We Do Not Share
Questions? Call 563-927-4475 or go to https://www.fmbankia.com/

Who We Are
Who is providing this notice?	Farmers & Merchants Savings Bank 101 E Main St., P.O. Box 588, Manchester, IA 52057

What We Do
How does F&M Bank protect my information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does F&M Bank collect my information?	We collect your personal information, for example, when you Open an account or deposit money Pay your bills or apply for a loan Use your credit card or debit card We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only Sharing for affiliates’ everyday business purposes –information about your creditworthiness Affiliates from using your information to market to you Sharing for non-affiliates to market to you State laws and individual companies may give you additional rights to limit sharing.

Definitions
Affiliates	Companies related by common ownership or control. They can be financial and non-financial companies. Farmers & Merchants Savings Bank does not share with affiliates.
Non‑Affiliates	Companies not related by common ownership or control. They can be financial and non-financial companies. Farmers & Merchants Savings Bank does not share with nonaffiliates so they can market to you.
Joint Marketing	A formal agreement between non-affiliated financial companies that together market financial products or services to you. Our joint marketing partners include Affinion Group.

Other Important Information:

Mobile App

The F&M Bank mobile app on the Apple App Store and Google Play Store may request permission to use phone features such as the camera, storage, microphone, biometrics, and location. These permissions are used for optional features and are not required to use the F&M Bank mobile app or F&M Bank Online Banking.

If you have enabled location services on your phone and agree to the collection of your location when prompted by the Mobile App, we will collect location data when you use the Mobile App even when the app is closed or not in use; for example, to provide our fraud detection services. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

General

We want you to understand the types of information we access, collect, use, store, and transfer (“Process”) through our mobile banking application (our “App”), including when you are using the App as well as when the App is running in the background. Be assured the App Processes your information only for the following limited purposes:

To provide you with digital banking and related services (“Services”);
To maintain & improve our Services;
To ensure our Services are working as intended, such as tracking outages or troubleshooting issues that you report to us;
To develop new Services and features;
To provide you with personalized Services and content;
To measure the performance of our App and Services;
To communicate with you;
To protect our Institution and customers from fraud, abuse, security risks, and technical issues;
And any other specific purposes referenced or described in this Privacy Policy.

We will always ask for your consent before using your information for a purpose that isn’t covered in this Privacy Policy.

Information You Enter or Provide to Us

When you register, access, and use the Mobile App, you provide us with personal and sensitive information that includes your name, password, government identifiers like your social security number (SSN) or drivers’ license number, phone number, email address, physical or mailing address, financial information, payment information, payment card information, and credit information.

Other Information We Collect As You Use Our Mobile App

The information we collect includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and Mobile Application version number. We also collect information about the interaction of your other Mobile Apps, browsers, and devices with our digital banking services. Additionally, and as described in more detail below, your device may periodically contact our backend digital banking systems to provide information about your device and connection to the digital banking services. This information may include things like your device type and carrier name, crash reports, and, depending on your device settings, other information about how you’re using your mobile device.

Your Activity

We collect information about your activity in connection with our Mobile App, in order to better understand:

Your interactions and behavior associated with Mobile App content and features;
The ways in which you are moving through and navigating the Mobile App;
The Services and features that are most valuable to you;
Areas or stages of the Mobile App where you may disengage or get stuck; and
Your typical patterns of behavior in connection with the Mobile App.

The activity information we collect may include:

Logs, tags, reporting, and other analytics reflecting your specific use of screens, workflows, buttons, and features;
Logs, tags, reporting, and other analytics reflecting your navigation through, engagement with, and disengagement with the Mobile App;
Haptic information related to your use of your device (e.g. swipes, taps);
Your financial, payment, and transaction activity and history (including purchase history); and
Your navigation to or activity on third-party sites and Mobile Apps linked to our Mobile App.

This information enables us to improve, modify, or expand the services, features, and experience delivered through the Mobile App as well as to support in-app messaging, deliver user guides and polls, and optimize performance of the Mobile App. Additionally, and in particular, this information also enables us to detect and flag suspicious or potentially fraudulent activity.

Your Device and Mobile App

We access and collect information related to your device along with associated data. This information may be collected both while you use the Mobile App and while the Mobile App is running in the background or is otherwise not in use.

Information we process concerning your device and other Mobile Apps includes:

Your device type;
Your device ID;
Other available device identifiers;
Your device operating system;
Network and IP address information;
Your cellular data carrier; and
Device and Mobile App diagnostic information.

Additionally, if our Mobile App needs to access protected features of your device, then you will have an opportunity to provide consent. In the event that you decline to provide express consent, then the Mobile App will not be permitted to access data gated by your device’s permissions model. Without your express consent, the Mobile App will not allow use of the protected feature or related data.

If and when our Mobile App accesses your:

Device location; or
Other background restricted permissions,

Then all related data is treated as personal or sensitive data subject to this Policy. Restricted permissions accessed by our Mobile App include:

Use of Biometrics	We collect information about your biometric identifiers when you use our Mobile App, which enables us to streamline your authentication and login experience and access our Services with less friction.
Precise or Fine Location	We collect information about your location when you use our Mobile App, which helps us offer features like search results for branch and ATM locations, credit card controls, and messages based on your general location.
Access Camera or Pictures/Photos	We collect information from your device’s camera and photos when you use our Mobile App, which enables use of mobile check deposit and other image scanning or capturing features of the Mobile App.

Sharing Your Information

Our Mobile App

Will only share information with third parties with your consent, for the purpose of providing you with Services, or for the other ancillary purposes described in this Policy.
Processes your financial or payment information or government identification numbers and will never publicly disclose any personal and sensitive user data related to financial or payment activities or any government identification numbers.
May Process non-public phonebook or contact information, and we don't allow unauthorized publishing or disclosure of your or others’ non-public contacts.
Includes third-party code and SDKs that may collect personal and sensitive user data solely for the purposes described in this Policy. All third-party providers of code and SDKs will Process your data in accordance with this Policy and all Mobile Applicable law and standards.
May also transfer data as necessary for legal reasons including compliance with a valid governmental request, Mobile Applicable law, or as part of a merger or acquisition with legally adequate notice to users.
Handles all personal and sensitive user data securely, including transmitting it using modern cryptography.

Neither we nor our third-party providers will ever sell your personal and sensitive data processed by the Mobile App.