Staff, PINs and hours

No. Staff management for the counter is part of the restaurant POS system you already have. You add each person once under Settings → The POS, in the section called People at the POS, and that one list decides who may sign in, who may approve a discount, and whose name goes on every sale. There is nothing extra to buy and nothing to connect.

Open Settings → The POS and scroll to People at the POS. Fill 'Their name', choose 'What they may do', type four numbers in 'Their PIN', then press Add them. They can sign in on any of your paired devices from that moment.

Sell is an ordinary cashier. Sell, and approve discounts is a manager. Everything is the owner level. The role is chosen in the 'What they may do' box when you add somebody, and it is shown under their name in the list afterwards.

Four things at the counter: give money back, cancel a sale that has already printed, take money out of the drawer, and close a shift while orders are still unpaid. A manager can also apply a discount. Everything else, including taking sales and opening a shift, an ordinary cashier does on their own.

They can open the Discount screen and see exactly what it would take off, but they cannot apply it. A manager has to. Either way the screen asks why, and the reason is kept on the sale rather than lost in conversation, so the total given away appears on the Z report at the end of the shift.

The cashier stays signed in. A box appears, the manager taps their own name, types their own four numbers, and the thing being approved is recorded against the manager and not against the cashier. The cashier carries on with the same basket the moment it is done.

Yes. Adding somebody, changing a PIN and switching somebody off are all owner-level, because each of them hands out the right to take money. A manager signed in to the dashboard is refused politely and told so. The people already added carry on working normally.

Nothing. The POS is one yearly price for the whole restaurant, whatever number of POS machines, kitchen screens and waiter phones you put on it, and there is no charge for a person. You can see the price and the renewal date under Settings → Plan & billing.

There is no limit. The only practical one is the sign-in screen, which lists everybody who can currently sign in, so it is worth switching off people who have left rather than letting the list grow. Their old sales and hours keep their name either way.

Yes. People, the ways you take money, printing and stations can all be prepared without the add-on. Only pairing a device needs it to be on, so you can have your whole team and your buttons ready before the first tablet arrives.

Because that is what somebody types with one hand while a customer waits. Four numbers are safe here because of what surrounds them: they are useless without a device you paired yourself, they are checked by us and never on the device, and five wrong tries lock that one person out for five minutes.

The screen says the PIN is wrong. After five wrong tries that person waits five minutes, and the screen tells them how many minutes are left. Everybody else carries on selling as normal.

No, and that is deliberate. A counter stands where anyone can reach it, so the wait is always on the person, never on the machine. Locking the machine would let a stranger shut your restaurant out of its own counter in under a minute.

Type four new numbers in the 'New PIN' box on their row under People at the POS and press Save. That also clears any wait they are sitting under, so they can sign in straight away.

No. A PIN is never shown anywhere, to anybody, including you, and it is not kept in a form that can be read back. A forgotten PIN is replaced with a new one, never looked up.

No. A device is only ever told the names and the roles of the people who may sign in. The numbers are checked by us each time. A tablet that goes missing therefore holds nobody's PIN, and you can stop it selling from the dashboard with Disconnect.

Press Switch off on their row under People at the POS. Their name comes off the sign-in screen the next time the device checks in with us, and the device's own settings has a button to check again straight away if you want it gone this minute.

No, and this is on purpose. People are switched off, never removed, because a shift closed last month still has to be able to say who closed it and a sale from last week still has to name who took it. A switched-off person shows greyed in the list and cannot sign in.

Press Lock on the selling screen. The person is signed out, the basket is cleared, and the next sale cannot be taken until somebody signs in with their own numbers. There is a second lock button in the device's own settings, and closing a shift locks the device by itself.

No. Today it locks when somebody presses Lock and when a shift is closed, and not on a timer. So it is worth teaching your team to press Lock the way they would close a drawer, because everything a signed-in person does carries their name.

No. Locking only signs the person out. The device stays paired, the menu stays on it, and any sale waiting to reach us is still safe on the device and still goes up on its own.

No. A device paired as a screen in the kitchen goes straight to the tickets and never asks anybody to sign in, which is right for a screen on a wall in a hot room. A POS that sells and a waiter's phone both ask.

On the sign-in screen of any POS machine or waiter phone. Tap the clocking button first, then their name, then their four numbers. It clocks them in if they were out, and out if they were in, and the screen says which one just happened.

Yes. The clock belongs to the person, not to the machine, so a waiter can start on a phone and finish at the counter. A person can only have one stretch open at a time, so there is nothing to get out of step.

Nothing closes it for them. The stretch keeps counting and shows as still in on the report, which is how you spot it. A manager then opens that row, presses Correct, types the real time they left, and saves. The row is marked as edited afterwards.

Reports → Hours worked. It opens on the last seven days in your restaurant's own clock, and the From and To boxes with the Show button move the range. The zone it is counting in is printed under the title so there is never any doubt.

Two figures at the top, hours in the range and how many people, with how many are clocked in right now. Then a per-person total. Then every stretch, one row each, with the day, who, in, out, the break, the worked total, and which POS machine they used.

Yes, if you are the owner or a manager. Press Correct on the row and you can change In, Out and Break minutes, and add a Note saying why. Press Save the correction. The row is then marked as edited and the change is recorded with your name on it.

Yes. Use 'Add a stretch by hand' at the bottom of Reports → Hours worked. Choose the person, type In and Out, any Break minutes and a Note such as 'forgot to clock in', then press Add. It is marked as edited from the start, so a typed stretch never looks like a clocked one.

A break is a number of minutes on the stretch rather than a second clocking, and it is taken off the worked total. Up to 600 minutes can be entered on one stretch. Set it while you correct the row or while you add one by hand.

Yes. Download CSV on Reports → Hours worked gives one row per stretch with the day, the name, the in and out times, break minutes, worked minutes and worked hours, which device, whether it was edited and any note, followed by a totals block per person. Every download is recorded.

No, and that is a deliberate choice. There are no rates and no money on this screen at all, only the hours for your payroll sheet. It means the report can be shown to a manager without showing anybody what anybody earns.

Anybody with a dashboard login for your restaurant can look at it. Only the owner or a manager can correct a stretch or add one by hand, and the buttons are simply not there for anybody else.

Yes, if your branches are grouped together. The reports page across your branches carries an 'Hours worked, every branch' panel showing who was on, at which branch, and for how long, over the period you pick.

No, they are two separate lists and neither one grants the other. Four numbers let somebody sell at the counter and nothing more. A dashboard login is an email and a password and it opens the menu, the orders and the reports in a browser.

Open Settings → Team, which is owner only, and use Add a manager. Fill 'Their name' and 'Their email' and press Create manager account. A one-time password is shown once on the screen, and you hand it over yourself. It is never emailed, so do not close the page before you have copied it.

Up to five manager accounts, plus your own owner account. Every account you create is a manager, and each person needs an email address of their own that has no account on the platform already.

Three things. They cannot cancel an order that was already delivered, they cannot connect or change the WhatsApp number and its groups, and they cannot see plans and billing. Each of those refuses with a clear message naming the reason. Everything else works for them exactly as it does for you.

Please do not. Changes in the dashboard are recorded against the account that made them, and one shared login makes that record worthless on the day you need it. Each person having their own login is the whole point of the Team screen.

Open Settings → Team and press Remove on their row. The account is gone and they cannot sign in again. What they did while they worked for you stays in your records under their name, so removing an account never erases its history.

Every counter sale carries who took it. Every discount carries who applied it and why. A refund carries the manager who approved it. Money taken out of the drawer, cash a waiter hands in, and the opening and closing of every shift all carry a name. Hours carry a name and say whether anybody edited them. On the dashboard, changes such as adding a person or correcting a stretch are recorded against the account that made them.

Use Find a sale on the POS and search by the receipt number, the amount, or the last four digits of a phone. The sale names the person who took it, what was on it, and how it was paid. Reports → Shifts and the POS shows the same money shift by shift, with who opened and who closed each one.

Yes. Tick 'Print who served them' under Settings → Printing & receipts. The receipt then names the person who took the sale, which settles most counter disputes before they start.

No. Once a sale has printed only a manager can cancel it, with a reason, and only a manager can give money back. Both appear on the Z report at the end of the shift and in Reports → Shifts and the POS, so nothing leaves quietly.

Only the owner or a manager can edit at all, and an edited stretch is permanently marked as edited, keeps its note, and the change is recorded with the account that made it. A correction is meant to be visible, so an honest fix and a quiet one look completely different.

Yes. A shift is opened by a person, with a float they count, and the shift records who opened it and later who closed it. That is why the sign-in screen comes before everything else on a POS machine each morning.

The device is paired but no people have been added yet, and it says so on the screen. Open Settings → The POS on the dashboard and add at least one person under People at the POS. Add a manager as well as a cashier, because a refund or a cancelled receipt needs somebody with manager rights on that counter.

Give one of them a surname or an initial. Two people at the POS cannot share a name, and adding the second one tells you so instead of quietly making a duplicate that nobody could tell apart on a report.

Not today. What is built is who may use the counter, what each of them may approve, and how many hours each of them worked. There is no rota builder and no wage calculation, so a planning sheet stays where it is and this gives you the hours to check it against.