Role-based access for customers and shop team

Customer login is phone-first, while the shop team can access cashier, staff, manager, or admin workflows based on their assigned role. Sensitive pricing and payment actions stay out of staff access.

Staff and managers who need selfie attendance can use the staff login flow.