Loading
Security and trust
Your data is safe, and the right people see the right things
WalkInCheckIn was built multi-location first, with access roles, audit logs, encryption, and trusted devices baked in. You get serious controls without an enterprise headache.
Trust, built in from day one
Four things hold true on every screen, in every location: the right access, a full record, encrypted data, and clean separation between shops.
The right people see the right things
Five roles set who can do what: Owner, Manager, Viewer (read-only), Staff, and platform Superadmin. A new front-desk hire never lands on your revenue numbers, and a read-only role can look without touching.
Tracked actions have audit records
Audit records capture tracked actions, actors and timestamps. Authorised users can query and export records at their permitted business or shop scope.
Stored provider credentials are encrypted
Stored messaging-provider credentials are encrypted in the database. Passwords and PINs are hashed. Access to customer records is controlled by authentication and permissions.
Each location stays separate
Businesses are isolated by database row-level security. Within a business, application permissions restrict access to assigned shops; authorised owners can work across their locations.
Five roles, one clear hierarchy
Give each person the reach their job needs, and nothing it does not. Roles map to how a salon actually runs.
Owner
Full reach across every location in the business: settings, staff, promotions, and the org-wide roll-up.
Manager
Runs the day at their location or locations, without the business-wide controls reserved for the owner.
Viewer
Read-only. Perfect for an accountant or a partner who needs to see the numbers but should not change anything.
Staff
Works the floor and clocks in and out. No back-office access they do not need to do their job.
Superadmin
A platform-level support role that lives in a separate system tenant, cleanly walled off from your customer data.
Only trusted devices at the front desk
Decide which iPads and tablets are allowed to run your surfaces, and stay in control as devices come and go.
Pair a kiosk in seconds
Approve a new iPad or tablet with a short enrollment code. No fiddly setup, no shared passwords floating around the salon.
Revoke or rename any device
See every paired device, rename it so you know which counter it sits on, and revoke a lost or retired one with a tap.
Drift recovery built in
If a device falls out of sync, WalkInCheckIn recovers the pairing on its own instead of leaving you with a dead screen at the front desk.
Verified identity, no buddy-punching
When a staff member clocks in or out, WalkInCheckIn asks for a single-use check tied to that person and valid for only a short window. There is no shared button to tap for a co-worker, so the hours you pay line up with the hours that were actually worked.
Set the access mode that fits each location
A high-volume walk-in shop and a quiet appointment studio do not need the same front door. Choose per location.
Open
Anyone can reach the public surface. Best for a busy walk-in shop where speed at the door matters most.
PIN-gated
A short PIN unlocks the surface, so only your team can open the staff or check-in screen on a shared device.
Device-gated
Only kiosks you have paired and approved can load the surface. Combine it with a PIN for two layers at once.
Mix and match across your business. One shop can stay open at the door while another runs device-gated and PIN-gated together.
Security questions, answered
Who can see my sales and customer data?
Only the roles you grant. Owners see everything across the business, managers run their own locations, and a read-only Viewer role can look at the numbers without changing them. Staff stay on the floor-level screens they need and nothing more.
Is each of my locations kept separate?
Businesses are isolated by database row-level security. Within a business, application permissions restrict access to assigned shops; authorised owners can work across their locations.
Can I prove who did what?
Audit records capture tracked actions, actors and timestamps. Authorised users can query and export records at their permitted business or shop scope.
How do you stop staff clocking each other in?
Clocking in or out requires a single-use, short-lived identity check tied to the staff member's PIN. Staff must keep PINs private; managers still need an attendance review process.
What about Face ID at check-in?
Face ID is disabled for the current pilot. Staff identity uses PINs and short-lived verification tokens; biometric collection is not enabled.
See WalkInCheckIn on your own salon’s flow
Book a 20-minute demo and we’ll show you the queue, kiosk and loyalty running on a setup like yours.