Session security and automatic sign-out

All roles

Understand why the app may sign you out (session expired, account deactivated, inactivity), how to stay signed in, and how to set the inactivity delay.

Presentation

To protect your data, the app may end your session in three cases: (1) your session expired (after a long period), (2) an administrator deactivated your account, (3) you stayed INACTIVE too long (no action). In every case you are returned to the sign-in screen with a message explaining why.

Inactivity sign-out matters on a shared terminal (a till): if you walk away without signing out, nobody can act in your place. Before signing you out, the app warns you with a countdown and lets you choose to stay signed in.

Access

The inactivity delay is set in Settings > Security > "Automatic sign-out". The inactivity warning appears on its own when you stay idle. The message explaining a sign-out is shown on the sign-in screen.

Interface

Inactivity warning: A "Still there?" dialog with a countdown. Two buttons: "Stay signed in" (keeps the session) and "Sign out". If the countdown reaches zero, you are signed out automatically.
Reason message (sign-in screen): A banner on the sign-in screen tells you why the session ended: session expired, account deactivated, or inactivity.
"Automatic sign-out" selector: In Settings > Security: a menu to choose the inactivity delay (5, 10, 15, 30 or 60 minutes), or "Never" to disable it. Default: 10 minutes.

Step-by-step procedure

To change the delay: open Settings > Security > "Automatic sign-out" and pick a duration (or "Never"). -> The new delay applies immediately and is kept on this device (even after a restart). (Check: Reopen the menu: the chosen value is shown.)
When the "Still there?" warning appears: click "Stay signed in" to continue, or "Sign out" to end the session now. -> "Stay signed in" resets the timer. Otherwise, when the countdown ends, you are returned to sign-in.

Examples

I come back in time: You leave the till for 14 minutes. The warning appears: you click "Stay signed in". You carry on without re-entering your password.

Lunch break: You leave for 30 minutes without signing out (delay set to 15 min). On return you are on the sign-in screen with the "signed out for inactivity" message. You sign in again: everything is intact.

Account deactivated mid-session: An administrator deactivates your account while you work. On your next action you are immediately signed out with the "account deactivated" message. This is expected: contact your administrator.

"Never" option: inactivity sign-out is disabled. Use only on a trusted PERSONAL device; not advised on a shared till.

After a security update, you may need to sign in once again, even if nothing else changed. This is normal.

When paying, a double-click or a retry after a network drop never charges twice: the operation is protected.

Error messages

Your session has expired. Please sign in again.

Cause: Your sign-in validity period was reached, or the sign-in is no longer valid. - Solution: Sign in again with your email and password.

Your account has been deactivated. Please contact your administrator.

Cause: An administrator deactivated your account; your access is suspended. - Solution: Contact your administrator to reactivate the account.

Tips

On a shared till, choose a short delay (5 or 10 min) and always sign out when you leave.
Only stay signed in on a trusted device: while the session is open, someone else could act on your behalf.