Last updated: August 27, 2026
This page has been machine-translated. The English version is authoritative.
Bow & Arrow Music ("Bow & Arrow," "we," "us," or "our") provides a ministry development platform for churches (people, teams, learning, evaluations, scheduling, and songwriting tools) and a public store selling downloadable PDF guides. This policy explains what information we collect, how we use it, and the choices you have. It applies to everyone who uses our website, church platform, or public store.
When you create an account, we collect your name, email address, and any profile details you choose to add (such as a profile photo, instrument, or skill level).
If your church uses Bow & Arrow, your church administrators may enter or your account may generate data such as team memberships, evaluation and journey progress, scheduling and availability, song and rehearsal information, and internal notes. This information is entered and controlled by your church, which acts as the data controller for its own members; we act as a service provider on the church's behalf.
If you choose to use team capacity tools, we store the serving rhythm, weekly energy, available-capacity impact, and private context you submit. Church capacity staff receive scheduling impact and check-in requests; written personal context is shared with them only when you explicitly choose to share it.
Subscription payments and one-time guide purchases are processed by Stripe. We never see or store your full card number — Stripe shares with us only what we need to manage your subscription or fulfil your purchase, such as a payment status and the last four digits of a card.
If your church enables email or WhatsApp notifications (for example, service schedules or evaluation updates), we process the contact details needed to deliver those messages through our providers, Resend (email) and Meta's WhatsApp Business Platform (WhatsApp).
With your optional consent, we use Google Analytics through Google Tag Manager to understand sanitized page journeys, lead and checkout steps, and aggregate product usage across our website, store, and application. We do not send form text, email addresses, names, church names, private ministry content, or token-bearing URLs to analytics. When analytics consent was granted at checkout, Stripe may confirm a purchase using a pseudonymous analytics identifier, transaction ID, currency, value, and item category. See Section 5 below.
We do not sell your personal information, ever.
We share information only with the service providers that help us run the platform, each bound to use it solely to provide their service to us:
We may also disclose information if required by law, or to protect the rights, property, or safety of Bow & Arrow, our users, or others.
Data is stored with Supabase and hosted on AWS infrastructure, encrypted in transit and at rest. Access to church data within our systems is restricted to what's needed to operate the platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information using industry-standard practices.
Necessary storage supports authentication, security, checkout, and your privacy choices. Analytics and advertising technologies are off by default and load only after the corresponding choice in our cookie settings. Analytics may measure sanitized page paths, leads, product views, checkout steps, and consented purchase confirmations; advertising may measure campaigns through Google advertising tools and Meta Pixel. You can accept, reject, or change either optional category at any time using the Cookie settings control. Rejecting optional technologies does not prevent use of the core platform.
We retain account and church data for as long as an account is active, or as needed to provide the service. If a church cancels its subscription, its data is retained for a reasonable period in case of reactivation, after which it may be deleted. You can request deletion at any time — see Section 8.
Bow & Arrow is intended for use by churches and their adult staff and volunteers. We understand that some churches may include minors in scheduling, teams, or evaluations. Where a church enters information about a minor, the church is responsible for obtaining any parental or guardian consent required under applicable law before doing so. We do not knowingly collect personal information directly from children without such consent.
Depending on where you live, you may have rights to access, correct, export, or delete your personal information. If your data was entered by your church, please contact your church administrator first, as they control that data; for anything we hold directly (such as your account login or a guide purchase), contact us at jonathan@bowandarrowmusic.com and we'll respond promptly.
Bow & Arrow and its service providers may process and store information in countries other than your own, including the United States and the United Kingdom. By using the platform, you consent to this transfer and processing, which we handle in line with this policy regardless of location.
We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account administrators directly.
Questions about this policy or your data? Email jonathan@bowandarrowmusic.com.