Information Automatically Collected:

We collect information from and about users of our Mobile App directly from you when you provide it to us, and automatically when you use the CapEd Mobile App. Non-Personal Identifiable Information is collected and stored automatically from all users who use the CapEd website and the CapEd Mobile App. This information includes the Internet Protocol address, Internet domain from which you used to access our website, the browser and operating system used when visiting our site, the date and time you accessed our site, the pages you visited and website usage. The information is used to analyze how we can make our digital banking better for our users.

When you download, create an account, or use the CapEd Mobile App, we may ask you to provide information by which you may be personally identified, such as name, postal address, email address, telephone number, date of birth or any other identifier by which you may be contacted online or offline ("personal information"). We may gather your personal and financial information from various sources, including mobile applications, our website, account opening and loan applications, forms, etc. This collected information may include name, postal address, telephone number, date of birth, tax identification number, ITIN number, passport number, email, security phrase, payment card, your account history, behavioral biometrics, financial, demographic and geographic information. We do not collect personal information automatically, but we may tie non-personal information collected automatically to personal information about you that we collect from other sources or that you provide to us.

We may also record our conversations for security, quality control, and verification purposes.

If you do not want us to collect this information do not download the CapEd Mobile App or delete it from your device.

Geolocation Information:

The CapEd Mobile App periodically collects, transmits, and uses geolocation information to enable features that prevent fraudulent card use and send alerts. Geolocation information can be controlled by the individual user on their device's app settings. Users can choose what type of location access to grant any app requesting location information.

How We Use Your Information:

We use information that we collect about you or that you provide to us, including any personal information, to:

• Provide you with the CapEd Mobile App and its contents, and any other information, products, or services that you request from us.
• Fulfill any other purpose for which you provide it.
• Give you notices about your account.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Notify you when CapEd Mobile App updates are available, and of changes to any products or services we offer or provide though it.

The usage information we collect helps us to improve the CapEd Mobile App and to deliver a better and more personalized experience by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize the CapEd Mobile App according to your individual interests.
• Speed up your searches.
• Recognize you when you use the CapEd Mobile App.

We may use location information we collect to enable features that prevent fraudulent card use and send alerts.

Disclosing of Personal Information:

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. In addition, we may disclose personal information that we collect, or you provide:

• To our subsidiaries and affiliates, including CapEd Insurance Services, a wholly owned subsidiary of CapEd Credit Union.
• To our contractors, service providers, and other third parties we use to support our business, including our marketing partners, TruStage Financial Group and iLending Direct.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all CapEd's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CapEd about our App users is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce our rights arising from any contracts entered into between you and us.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CapEd, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Protecting Personal Information:

CapEd uses state-of-the art technology to protect the personal information we collect. CapEd has also established reasonable procedures to protect the confidentiality, security, and integrity of personal information. Please note that no data transmission or storage can be guaranteed to be 100% secure. We want you to feel confident using CapEd's website and CapEd Mobile App, but we cannot ensure or warrant the security of any information you transmit to us. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures included through the App.

Retention of Personal Data:

We keep your personal data according to our retention policy and as needed to perform our activities, follow laws and regulations, and protect everyone's rights and safety. We will hold and use information that we collect about you or that you provide to us, including any personal information, for as long as is necessary to provide you with our services, or as required to comply with legal or regulatory obligations, including under applicable tax laws. We will delete your information from our systems when you close your account with us and after it has ceased to be necessary for us to retain such information.

Children's Online Privacy Policy:

We do not knowingly collect personal information from children under 13 without verification of parental consent. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, then we will delete that information. To do so, contact [email protected] to have the information deleted or to notify CapEd to discontinue further collection or use of the child's information. We describe our Children's Online Privacy Policy in more detail here https://capedcu.com/about/notices-policies/childrens-privacy-policy/.

Choice About How We Use and Disclose Your Information:

We strive to provide you with choices regarding the personal information you provide to us. This section describes mechanisms we provide for you to control certain uses and disclosures of over your information.

• Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies or block the use of other tracking technologies, some parts of the App may then be inaccessible or not function properly.
• Location Information. You can choose whether to allow the App to collect and use real-time information about your device's location through the device's privacy settings. If you block the use of location information, some parts of the App may become inaccessible or not function properly.
• Promotion by CapEd. If you do not want us to use your email address to promote our own or third parties' products or services, then you can opt-out by stating your request to at [email protected].

We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

Accessing and Correcting Your Personal Information:

You can review and change your personal information by logging into the App and visiting your account profile page. You may also send us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Changes to CapEd's Online Privacy Policy:

CapEd may revise this policy to reflect changes in the law or our practices. CapEd will notify you before we make any material changes and give you the opportunity to review the revised policy before you choose to continue using our services.

Non-material changes will be effective immediately upon posting on our website; however, we will note the effective date of such changes at the top of the privacy policy. Please review this policy regularly so that you have the most current information on our practices.

Contact Information:

For questions or comments regarding our Online Privacy Policy please contact us at 208-884-0150 or toll free at 800-223-7283, email [email protected] or write to CapEd Credit Union P.O. Box 570 Meridian, ID 83680. Please note that email is not a secure form of communication, and we recommend not submitting any personal identifiable information through email.