Enrolment
Enrol once, from a code
One phone, fifteen minutes, and the credential the phone keeps afterwards cannot be typed in anywhere else. Nothing is baked into the app.
Delivery
A board that shows what needs a driver, a dedicated Android app on the driver’s own phone, and a cash ledger that adds up at the end of the night. No marketplace, and no cut of the order.
A delivery
Every step is checked at the server, not just hidden on a screen.
Unassigned, assigned, out, problem, done — columns you can read across a counter mid-service.
On shift, on break, off shift, and how many drops each driver already holds. Being on the roster is not being available.
On their own phone. Accept, pick up, navigate, arrive, complete — each one checked against the assignment on the server.
Prepaid, cash on delivery, or an amount in doubt — shown as in doubt, because collecting money that may already have been taken charges a guest twice.
Float out, cash collected, cash handed back. Folded from payment events rather than typed, and a driver cannot approve their own settlement.
The driver app
There is no menu, no order entry, no cash drawer and no kitchen in it. A driver is not a register, and the surest way to keep it that way is for the register’s code not to be in the binary.
Enrolment
One phone, fifteen minutes, and the credential the phone keeps afterwards cannot be typed in anywhere else. Nothing is baked into the app.
Scope
Assignments for the signed-in driver, and nothing about anybody else’s deliveries or the restaurant’s takings.
Cash
Folded from payment events rather than typed. A driver cannot approve their own settlement.
Tips
Card tips on the drop and cash a guest handed over, kept separate from company money — because they are not the same thing and never were.
Offline
A basement with no signal does not stop a delivery being completed or the cash being recorded. It syncs when the phone has bars again, exactly once.
Recovery
Phones kill background apps. The app recovers the active delivery and the payment in progress from its own log rather than from memory.
People
A driver clocks on and off like everybody else, on the same timeline, and appears on the same board and the same payroll export. Their hours are hours.