The Member View.

A member never buys a pass in the app. Staff sell it at the counter, and from that moment the pass lives in the member's wallet.

Businesses can display a QR code for a pass they sell. Scanning it opens the pass's public page: what it covers, the validity, and the price, with a note that staff sell it at the till. Members who already hold that pass get a shortcut to their remaining count.

Buying works in two directions from there. Logged-in members see a Buy at the counter code on that page; staff scan it and complete the sale for exactly that pass. Or staff start it: after payment they show a purchase code on their screen, the member scans it with their phone camera, and the pass lands in the wallet right away (after signing in, for new customers).

In the Wallet

My Cards gains a Your Passes section between stamp cards and vouchers. Each pass shows the product name, the business, the remaining count (for example "6 of 10 left") or Unlimited, and the expiry date. Passes from different businesses sit side by side; each business sees only its own.

When every pass is used up or expired, the section explains where passes come from: they are sold at the counter, and the next one lands here.

The Pass Page

Tapping a pass opens its page:

• The remaining count and a progress bar.
• Show QR code. Staff scan this code to tick off a visit. The code works from the phone screen at the counter.
• Details. The business, the validity window, and what the pass covers.
• History. Every movement in plain words: when the pass was sold, each visit, any correction by staff, and the expiry. The history never hides anything; a corrected scan shows both the scan and the undo.
• Add to Google Wallet, when the business enabled it. The wallet copy carries the remaining count and updates after every visit.

A used-up or expired pass keeps its page and history, marked with its state. The QR disappears; there is nothing left to scan.

Emails

Two emails exist, both sent with the business's name as sender:

• The receipt, at the moment of sale: pass name, visits, validity, and the price paid at the counter.
• One reminder, when a pass enters its final week with visits left: "Your pass expires on this date, you still have this many visits." Each pass sends this at most once.

Members who disabled emails in their account receive neither; the pass itself and the wallet stay unaffected, and the pass still expires on its date.

Privacy

Passes follow the same rules as the rest of the wallet. The business that sold the pass sees it; no other business does. A member's data export includes their passes and pass history. Account deletion severs the link between the member and the pass records, the same way purchase history is handled.