Staff & permissions

• Owner — the account that created the business. That is you, and today it is the only account that signs in to your business.
• Employee records — your team as a list, with their details, so attendance and shifts have something to hang on. A record is not a login; adding someone here does not give them access to anything.
• Attendance and shifts — mark the team present or absent day by day, define shift timings and working days, and let the month calendar show you the pattern.
• App lock — a PIN, and a fingerprint on phones that support it, so the shared counter device does not expose your business to whoever picks it up.

Three screens are owner-only: payment settings, reports and the sales dashboard, and the operations agent. A signed-in user who is not the owner of the business sees a plain “owner access needed” screen there rather than your payout details or your numbers.

Now the limit, said plainly: because staff cannot sign in yet, there is currently no way for anyone except the owner to be signed in to your business — so in practice that wall protects against a situation that cannot arise today. It is built and waiting for the logins that make it matter. We would rather tell you that than let you believe a wall is doing work it is not.

One device, your sign-in, PIN-locked. It is not what we want long-term and we are not going to dress it up:

1. Set a PIN in the app, and turn on fingerprint unlock if the phone supports it. This is the single most useful thing you can do right now.
2. Keep billing on one shop device that stays at the counter, rather than on your personal phone that leaves with you.
3. Never share your OTP, and never let a staff member sign in on their own phone using your email — that is your whole business in their pocket, permanently.
4. Take attendance and check the day's sales at close. Until there is a log of who billed what, the day-end report against your own sense of the day is your check.

If handing over the till without your own account attached is not acceptable in your shop — and for many shops it should not be — the honest advice is to keep billing yourself until per-person logins land, and use Lekhita for the parts that do not need them.

• Staff signing in with their own account.
• Per-person permissions — cashier, manager, stockist — rather than one owner/staff line.
• An activity log: who billed what, who changed a price, and when.
• Pinning a staff member to the branch they work in.

None of these are in the app today and we are not putting a date on them here. See pricing for how they are planned to be packaged — and note that the plan they belong to is marked as not sellable yet, for exactly this reason.

Remove their employee record so they stop appearing in attendance and shifts. Then, because they may have used the counter device: change your app-lock PIN the same day. If you ever shared your sign-in email with them, treat that as the serious problem it is — read Account & security and write to us.