The visit
Verify once when possible; later charges join the same open tab.
User guide
The right record, in the right hands.
Marker records charges alongside the club’s existing POS, billing, and payment systems. It does not replace them.
The record
Every charge records how it was attributed and who handled it.
A correction
A void adds a correction record. It never overwrites the original charge.
One order, end to end
Build first. Confirm clearly. Keep the visit together.
01
Build the full cart
Staff add menu or custom items, quantities, guest items, and the service location before asking anyone to confirm.
02
Choose how to identify
Start with a selected member, let the member identify through QR, or—with consent—identify them using the staff-held camera.
03
Confirm the first charge
The member approves by an available passkey, email code, or PIN, or staff completes an enabled face, tap-confirm, or attribution flow.
04
Keep the visit together
The first charge opens the tab. Later rounds join it without another scan and remain grouped by area and time for easier recall.
05
Preserve the outcome
The folio updates immediately. Email delivery is attempted separately, so a missing address or provider issue never rolls back the ledger.
Three different tools
Face ID, face recognition, and Member PIN are not the same thing.
Passkey
Face ID or a fingerprint on the member’s own device only unlocks a passkey. The passkey may be saved on the device or in a password manager; Marker never receives the device biometric.
Staff-held face recognition
This is a separate, consented camera flow. It can confirm a selected member or search active profiles inside that club, followed by staff confirmation. A QR scan never searches face profiles.
Member PIN
The optional six-digit PIN approves an already identified member for a live charge. It cannot identify a member or be used as a standalone account password.
Enrollment and security
Email is the recovery route.
Enrollment finds the existing membership, confirms the registered email, then offers a passkey, Member PIN, both, or neither. Members can keep multiple named passkeys. Sensitive changes use a recent approval from the last ten minutes or a fresh email security code.
Removing a passkey from Marker does not delete its copy from Bitwarden, Google, Apple, or device settings. Verified email recovery clears a PIN lock; an administrator reset removes the PIN so the member can create a new one.
Settlement, notices, and corrections
The folio tells the truth about what happened.
Marker can record full or partial cash, check, transfer, terminal, or house-account settlement completed elsewhere. It does not collect funds. Members can see the recorded payment state and balance, but cannot pay inside Marker today.
One itemized email is queued for each submitted cart when a deliverable address exists. Delivery failure does not undo the charge. A void is always a new correction event, so the original order and its audit trail remain intact.
By role
What each person can do.
Members
Use Marker to confirm a visit, understand your account, and raise a question about a charge.
Can
- Find an existing membership with a member number, mobile number, or email address, then confirm through the email on file.
- Finish enrollment with a passkey, a club-specific six-digit Member PIN when enabled, both, or neither; email remains the recovery route.
- Scan a charge QR, review every item and the total, and approve with an available passkey, email code, or Member PIN. Choose another method without rescanning.
- Review current and past visits, grouped service rounds, voided orders, and paid or outstanding balances from the secure member account.
- Update email and mobile details and manage multiple named passkeys or a Member PIN after a recent approval or email security check.
- Consent when club staff enroll a staff-held face profile, and ask an administrator to replace or remove it.
- Question an eligible charge and leave a note for the club team.
Cannot
- Edit, void, close, or settle a tab.
- Use a QR scan to identify themselves by face; Face ID or a fingerprint on their own device only unlocks a passkey.
- See another member’s record, change their official member number, name, or status, make a booking, or pay inside Marker.
Staff
Use the staff workspace to open and look after tabs during service.
Can
- Build a full order from menu or custom items, mark guest items, choose the service location, and review the running total before submitting.
- Select a member and verify one-to-one by staff camera, or build first and search consenting club face profiles; QR, tap-confirm, and staff attribution remain available when enabled.
- Reuse an open tab for later rounds, move its table, and review activity grouped by area and time without losing event-level audit detail.
- Void an unvoided order while the tab is open, close with a balance due, or record a full or partial settlement completed outside Marker.
- Find closed, unpaid, partially paid, and paid tabs and continue recording settlement from history.
Cannot
- Open the admin workspace without an admin staff role.
- Alter the original charge record; a void always creates a separate correction record.
- Resolve disputes, change club settings, manage staff, or export reports without an admin role.
- Collect funds through Marker; recording a settlement only records money handled elsewhere.
Club admins
Admins have the staff workspace plus the controls needed to run the club’s Marker account.
Can
- Add or edit members individually, download a CSV template, import or update a roster by member number, and send enrollment invitations.
- Review enrollment, PIN state, and face consent; replace or revoke face profiles and reset a PIN with a required audit reason.
- Add or disable staff, maintain menus and tables, and configure currency, dispute window, club accent colour, email readiness, and verification methods.
- Review and resolve disputes, payments and outstanding balances, verification adoption, and export the charge ledger.
Cannot
- Edit or delete a charge or verification record after it is created.
- Access another club’s data.
- Process funds inside Marker or replace the club’s payment and billing providers; Marker records settlements completed elsewhere.
- See or choose a Member PIN, infer which password manager holds a passkey, or erase append-only ledger and security history.
Guests and walk-ins
Guest charges belong on the host member’s tab. A non-member walk-in is handled through the club’s ordinary payment process.
Platform administration
Platform access is reserved for Marker operators and remains separate from each club’s own administration.