Our product · Ghana & Lebanon
Loyalty cards that live in the phone people already carry.
LoyaltyPass
The problem
Loyalty programmes in this market mean punch cards that get lost or apps nobody downloads for a single coffee shop. Small merchants want repeat custom without asking a customer to install anything.
What we built
- Multi-vendor SaaS with per-vendor isolation
- Apple Wallet and Google Wallet pass generation
- SMS OTP with automatic wallet provisioning on confirmation
- Punch and stamp mechanics
- Customer analytics and top-customer reporting
- Paystack subscription billing
- WhatsApp campaign capability
Architecture notes
Multi-tenant on pooled Postgres with row-level security enforcing vendor isolation at the database rather than the application layer, so an application bug cannot leak another vendor's customers. Staging and production run as fully separate projects and all schema changes ship as committed migration files. We ran a row-level-security audit against our own codebase, found service-role key paths that bypassed policy and SECURITY DEFINER functions that needed tightening, and remediated in stages. We are the client here, which is why that audit happened before a breach rather than after one.
Outcome
Live with vendors in Ghana and Lebanon. From 500 GHS/month in Ghana, $60/month in Lebanon.