Every host, manager, and staff member signs in with their own PIN. You decide what each person can do, and a manager PIN approves anything extra.
Each person signs in with their own 4-digit PIN. Switching users at a busy host stand takes seconds.
Start from Owner, Manager, Host, or Staff. Each role comes with sensible permissions you can adjust.
Turn individual actions on or off per person: deleting reservations, editing the floor plan, sending messages, changing settings, and more.
When someone does not have permission, a manager enters their PIN to approve that one action. No need to sign anyone out.
Lock the app after 15 minutes, 1 hour, or 4 hours of inactivity so the next person has to sign in.
Sign-ins, overrides, failed PIN attempts, and staff changes are recorded in the Activity Log.
Add your team from Settings
Protect the owner account with a PIN first. Restaurants that do not want logins keep working exactly as before.
Add each person with their name, a role, and their own 4-digit PIN.
Fine-tune what each person can do, from seating guests to deleting reservations or changing settings.
Staff tap their name and enter their PIN. Anything they cannot do asks for a manager PIN instead.
Four account-wide settings the owner can turn on or off at any time
Off · 15 minutes · 1 hour · 4 hours
What it does
Returns the app to the sign-in screen after the time you choose with no activity, so the next person has to sign in with their own PIN.
Why use it
A shared iPad left signed in as a manager gives manager access to whoever picks it up next. Use 15 minutes for a busy shared host stand, or 1 to 4 hours for a device that stays with one person.
On or off
What it does
Shuffles the numbers on the keypad every time a manager enters their PIN to approve an override. Anyone can also tap the shuffle button on a keypad to scramble it for a single entry.
Why use it
Host stands face guests and coworkers. When the numbers move, nobody can learn a manager's PIN by watching where their fingers land.
On or off
What it does
After 5 wrong PINs in a row, that person cannot sign in for 15 minutes on any device. Five wrong attempts at a manager override pause overrides on that device for 15 minutes. Lockouts are recorded in the Activity Log.
Why use it
Four digits are fast to type, and a lockout keeps them safe: nobody can sit at the host stand guessing until they get in.
Off, or open as a person you choose
What it does
Skips the PIN screen and opens the app already signed in as the person you pick. Their permissions still apply, and staff can still switch to their own login when they need to.
Why use it
Perfect for a single trusted host stand or a tablet used by one role. Nobody types a PIN at the start of every shift, but limits stay in place and a manager PIN still approves anything extra.
Keep floor plan edits, online booking settings, and billing in the hands of the people you trust.
Decide who can delete reservations, remove waitlist parties, or erase guestbook entries.
The Activity Log shows who signed in, who signed out, and who approved each override.
New hosts can learn the app without being able to change settings or delete anything important.
Approve an exception with a PIN instead of handing over your own login.
Turn on a scrambled keypad and a wrong-PIN lockout to keep PINs private and stop anyone from guessing their way in.
No. If you never add staff or set an owner PIN, the app opens straight to your floor plan just like before.
There are 40 individual permissions across settings, the floor plan, reservations, the waitlist, guest messaging, the guestbook, statistics, online booking, servers, and billing.
A PIN keypad appears showing the action. Anyone with that permission, like a manager, can enter their PIN to approve it once.
The owner can change any staff PIN, and the owner can have their own PIN recovery sent to the account email.
Yes, if you want it to. Choose to auto-lock after 15 minutes, 1 hour, or 4 hours of inactivity, or leave it off.
Yes. Turn on Open Without Login and choose who the app opens as. That person's permissions still apply, and a manager PIN still approves anything extra.
Yes. Sign-ins, sign-outs, overrides, failed PIN attempts, and staff changes are all recorded in the Activity Log.
Only if you allow it. Table closures have their own permission, just like editing the floor plan or deleting reservations.
Add your staff in minutes. Free 7-day trial.