Sign in and recover access

Admin sign-in and account menu

Activate an invitation

Open the invitation received by email, check the restaurant, choose your password and confirm your contact details. A POS code is requested only when the assigned restaurant permissions allow taking orders (orders.manage) or managing payments (payments.manage). A courier with the usual read-only delivery role, or a kitchen-only role, finishes without this step. A role name alone does not determine the requirement. Never share a password or POS code.

The personal passcode must differ from those of other accounts configured in this restaurant. The same code may be used in a different restaurant.

Select the restaurant

Sign in with your own account, then choose an authorized restaurant. Check its name before editing or exporting data.

Recover access

After a rejected POS code or failed save, reopen the same still-valid email link and retry; failed activation does not consume it. A duplicate code message means a POS operator must choose a different 4–6 digit code. A courier without POS permissions does not need to try more combinations. If the link is expired, lacks restaurant context or says it was already used and activation did not finish, ask a staff manager to open Staff → Employees → the member → Resend setup invitation. Use the newest email; resending invalidates previous unused links without recreating the member. If activation already succeeded, sign in with the password you chose, or use password recovery. Removed restaurant access must be reviewed by the manager. Never share activation links or credentials with the assistant.

If your session has been revoked, sign in again with your own account when Foody asks. On an already enrolled terminal, use your personal passcode. Signing in again does not replace a rejected device authorization. Keep pending operations and verify their status before submitting them again.

Clock in on the terminal

On an already enrolled POS, Sign in shows Enter your passcode. Enter your complete personal 4–6-digit code, then tap Start shift. The four slots shown initially expand when you enter a fifth digit; they do not limit an existing code to four digits. Backspace removes the last digit. Entry is not submitted automatically: wait for the sign-in result before using the POS. A rejection displays an error and clears the entry for another attempt; never share your code. Set up this terminal with email and password returns to the sign-in form. A successful PIN session also clocks you in; your account’s role and permissions still apply. Show hours opens a separate flow: checking your status starts neither a shift nor a sales session. See personal time tracking.

The email address used to authorize the terminal does not determine the employee signed in afterward: the personal passcode determines this session’s profile and permissions. A separate FoodyAdmin sign-in does not replace that employee.

If a code matches several accounts configured in the same restaurant, sign-in and time tracking are refused with a generic error: no new sales session or clock-in is created. The refusal does not identify those accounts. Ask a manager or support to check access, without repeated attempts or erasing terminal data.

End a POS shift safely

On a compatible version, use Sign out in navigation or End shift in More. Foody checks your personal work period before offering confirmation. If a cash report or local operation remains pending, Cash drawer report pending keeps you signed in. Cancel changes nothing; Finish report opens Cash drawer balance without closing anything or signing out. Resolve the operation, physically count and close cash on its original POS, then request shift end again. Without report permissions, ask an authorized manager. See the pending report.

If no period is active, Shift already ended offers Lock terminal. Explicit confirmation and another verification are required before returning to PIN; no new clock-out is recorded. See an already ended period. An expired or revoked historical device authorization that is still found may permit a shift end when its drawer is confirmed closed; it does not reactivate cash access.

A missing or foreign reference, failed verification or incompatible server keeps you signed in and offers Retry. If a shift-end response is uncertain, verify it before another action. Never erase journals or local data to bypass a refusal. Shift end keeps the device enrolled for the next PIN. A Verifone deposit remains separate and never starts automatically.