A card in their Wallet. Six rules behind it.

The six rules

1. No app for the customer, ever

   The card lives in the Wallet. If a feature needs a customer app, it is not a StoreWallet feature.

2. Three seconds at the till

   Scan, stamp, done. If a staff action takes longer, it is a bug.

3. The venue's brand, not ours

   The card, the join page and the pushes carry the venue's name, colours and voice. We appear once, small.

4. Every number opens what it counts

   A '42 about to lapse' tile opens the 42 people. No vanity metrics without a drill-down.

5. Say only what we can measure

   The phone decides when to show a nearby card and tells nobody. We never claim footfall we cannot see.

6. Privacy by default, and provable

   Per-channel consent, retention enforced by a job, erasure that revokes the card, a data protection register generated from the code, no third-party trackers on any public page.