A pass that changes every 30 seconds.
A quick visual guide to what happens between a scan and a safe handoff.
- Pass lifetime
- 30 seconds, then it rotates
- Reuse
- Refused after the first scan
- Release record
- Pass, guardian, staff, time
Six checks built into every pass
The code rotates every 30 seconds
A screenshot goes stale when the pass refreshes.
The pass is signed, not just encoded
Edited or invalid codes are rejected at the door.
One guardian, one child
Each pass is tied to an approved guardian and child.
The first scan retires it
Used passes are refused and logged.
It lives inside a signed-in session
Passes belong to a signed-in guardian.
Left-open passes close themselves
Unused passes expire with the pickup window.
Scan to handoff
- 01
Pass verified
Expired, used, or edited codes stop here.
Then - 02
Guardian matched
Match the pass to an approved guardian.
Then - 03
Pickup rules applied
Check permissions and pickup rules.
Then - 04
Staff confirm
Staff confirm; the handoff is logged.
If a check fails, staff stop and review. Scanning alone never releases a child.
Stop, check, record
The pass is expired, or already used
It is refused and the attempt is logged.
The guardian is not on the child's list
No release is offered until permission is confirmed.
Somebody else is holding the phone
The pass name is shown. Staff make the final call.
A pickup is disputed next week
Check the pass, scan time, staff member, and release record.
Only what a handoff needs
- Guardian names and contact details you entered
- Who is authorized to collect each child
- Every release: child, guardian, staff member, time
- Refused and expired attempts, for the same day
- Photographs of children
- Guardian location or movement data
- Card or payment details inside a pickup record
- Anything sold, rented, or shared with advertisers
Your centre controls its staff access and can export or delete its records.
See the checks in action.
Test a real pickup flow with your team during the pilot.