
VAULT Member App Spec
Owner: Trill Walker (CSO, product oversight) Marketing lead: Tia Dunn Founder + face: Taj Hines (approvals only, never operator) Doc status: v1.0, 2026-07-28 Location context: Charlotte NC flagship, Q4 2027 open
1. Purpose
The VAULT app is the primary member surface between visits. It has to feel like a private club key, not a fitness tracker. Every interaction should reinforce that VAULT is a 5-star luxury multi-purpose wellness club with the softness of a spa, the discipline of a strength gym, and the ceremony of a members-only room.
Three jobs the app must do:
- Get a member through the door and into a class without friction.
- Keep the member emotionally attached between visits (community, content, retail).
- Give staff and the GM a real-time operating dashboard without leaking anything to the member surface.
2. Core member features
2.1 Booking
- Class booking up to 14 days out for Access $299, 21 days for Studio $499, 45 days for Black Card $999.
- Waitlist auto-promotion with 60-second confirmation window via push and SMS.
- Cancellation window 6 hours for Access, 3 hours for Studio, 1 hour for Black Card. Late cancels charge a $15 cleaning fee to Access, waived for Black Card twice per quarter.
- Private studio, cabana, and recovery suite reservations (sauna, cold plunge, contrast room, red light).
- 1:1 booking flow for personal training, pole coaching, breathwork, nutrition, and concierge stylist.
- Group booking flow: a Black Card member can bring up to 3 guests per month at no charge, guest fee $75 beyond that.
2.2 Member profile
- Photo, preferred name, pronouns, member since date, tier badge.
- Body composition history (InBody 970 sync), heart rate history (Polar OH1 + Apple Watch + WHOOP integrations), sleep + recovery pull from Oura and WHOOP.
- Preferences: favorite instructors, music volume tolerance, scent sensitivities, allergy flags, locker preference, towel size, robe size.
- Privacy toggle: VIP Privacy Mode (see 2.7).
- Emergency contact + medical notes visible only to on-shift GM and lead trainer via staff app.
2.3 Community
- In-app member directory, opt-in only, three visibility layers: public to all members, mutuals only, or hidden.
- Direct message with automatic decay after 30 days unless saved. No public feed. No likes. No follower counts. Intentional restraint to keep the tone private-club, not social platform.
- Event RSVP for member-only nights, guest-list events, and THE VAULT INVITATIONAL member allocations.
- Interest groups: run club, pole collective, mothers, founders room, sober social, book club. Group chats limited to 40 members each with a rotating host.
2.4 Content library access
- Deep link into the digital content library (see 02_CONTENT_LIBRARY.md).
- Access tier gates: Access sees 30 percent of catalog, Studio sees 70 percent, Black Card sees 100 percent plus early drops.
- Download for offline on Studio + Black Card. Access is stream only.
- Continue watching, saved playlists, instructor follow.
2.5 Retail integration
- Full VAULT apparel + apothecary catalog with member pricing (Access 5 percent off, Studio 10 percent, Black Card 15 percent plus early access to drops).
- In-club scan-to-buy: NFC tap on shelf tags adds to cart, checkout inside app, item held at front desk or shipped.
- Wishlist that alerts on restock.
- Apple Pay, Google Pay, Stripe stored cards. Members can also charge to house account, billed monthly with dues.
2.6 Notifications
- Layered opt-in: booking reminders (default on), waitlist promotion (on), community DM (on), retail drops (opt-in), instructor updates (opt-in), event invites (on for Studio + Black Card).
- Quiet hours default 9 pm to 7 am, member configurable.
- Twilio for SMS fallback, APNs + FCM for push, Postmark for transactional email.
2.7 VIP Privacy Mode
- Toggle in profile. When on:
- Member does not appear in directory, guest lists, class rosters visible to peers, or leaderboards.
- Booking creates a shadow reservation visible only to GM and lead on shift.
- Front desk sees only a code name and preferred entrance.
- Photo and name are stripped from staff-facing views except for the on-shift GM.
- Designed for the athlete, artist, and executive members. Trill’s touring roster (Beyonce, MJB, Teyana, Kelly Rowland, Khalid, 50 Cent, GloRilla, Doechii, Future) is the reference user set.
- Black Card default is VIP Privacy on. Studio and Access can enable manually.
2.8 Contactless door entry via NFC
- Primary entry method. Member taps phone or Apple Watch on reader at main entrance, parking garage, locker room, private studio, and rooftop.
- Backend: HID Origo Mobile Access provisioned per member, keys rotate every 24 hours.
- Bluetooth Low Energy fallback for hands-full moments (bag, coffee, child in arms).
- Physical black brass key card as backup, issued at onboarding, $50 replacement.
- Every tap logs to the staff dashboard for occupancy, safety, and check-in counts. Member sees only their own history.
2.9 Apple Wallet + Google Wallet member card
- Auto-provisioned on first successful payment.
- Shows tier, member number, join date, and a rotating QR for front desk fallback.
- Live status: green when membership is current, amber when payment is retrying, red when frozen. Members with red status are routed to the concierge line at the front desk, never turned away publicly.
2.10 Mystery-shopper hidden features for staff
- Staff app has a hidden mystery-shopper mode triggered by a 5-tap sequence on the VAULT logo. Activates a private checklist a staffer or an anonymous auditor completes during a visit: greeting warmth, towel presentation, water offer, locker walk, class start punctuality, restroom cleanliness, closing farewell.
- Scores route to GM dashboard, never to public reviews.
- Monthly mystery-shopper audit by an outside firm (Coyle Hospitality or LRA by Deloitte) is triggered from the same interface.
3. Staff and GM features (separate app)
- Occupancy heatmap by zone (front desk, main floor, pole studio, recovery, rooftop, locker).
- Real-time class fill, waitlist depth, no-show flags, VIP Privacy Mode shadow list.
- Incident log with photo attachment, routes to GM + Ops Director on Slack.
- Inventory: retail, apothecary, towels, robes, cleaning supplies (see 07_OPERATIONS).
- Payroll clock-in via NFC on the same reader system.
- Mystery-shopper scoring interface.
4. Stack decision: Mindbody Enterprise vs. custom
Option A: Mindbody Enterprise + custom skin (RECOMMENDED for Y1)
Mindbody is the fitness industry standard, powers Equinox, Barry’s, SoulCycle, and most premium boutique chains. It gives us:
- Booking engine, waitlist, class scheduling, payment processing, retail POS, membership billing, staff scheduling, payroll clock, and reporting out of the box.
- Integrations already built for Apple Health, Google Fit, WHOOP, InBody, ClassPass (which we will not accept), and 200+ others.
- White-label API and custom app skin available on the Enterprise tier so members never see Mindbody branding.
Cost (Charlotte cost basis, 2026 pricing): - Mindbody Enterprise setup: $18,000 one-time. - Monthly platform fee: $2,400 per location. - Transaction fees: 2.9 percent + 30 cents on member billing. - Custom skin build via a Mindbody-certified partner (Marianatek or Zingfit as alternates, but Mindbody Enterprise for the integrated retail + payroll): $85,000 to $120,000 one-time.
Timeline to launch: 5 to 7 months.
Total Y1 platform cost estimate: $130,000 to $170,000.
Option B: Custom on Stripe + Twilio + Supabase (RECOMMENDED for Y3 migration)
Own the stack once we have the member base and data to justify the build. See 03_TECH_STACK.md for full spec.
Cost (Y3, 2029 estimate): - Build: $450,000 to $650,000 across 12 months. - Ongoing platform: $8,000 to $14,000 monthly at 800 to 2,500 members. - Payment processing: Stripe direct at 2.7 percent + 5 cents on volume above $1M annual.
Why we migrate: at 800 members Y3 and franchise ramp Y3 plus, Mindbody’s per-location pricing scales worse than owned infrastructure, and we lose control of the member data layer we need for THE VAULT INVITATIONAL broadcast, national digital membership growth, and franchise partner reporting.
Migration plan
- Y1 (2027): Mindbody Enterprise + custom skin. Ship on time.
- Y2 (2028): Parallel build of owned stack, shadow-write from Mindbody. Digital membership (see 01_DIGITAL_MEMBERSHIP.md) launches on owned stack from Day 1 to avoid double migration.
- Y3 (2029): Cutover Charlotte flagship. Franchise locations launch on owned stack directly.
5. Accessibility
- WCAG 2.2 AA compliance required at launch.
- VoiceOver, TalkBack, dynamic type, high contrast mode.
- Deaf and hard of hearing: captions on all video content library items, visual pulse cue in class instead of audio-only countdown for members who request it.
6. Privacy and data
- Member health data (InBody, WHOOP, Oura) stored encrypted at rest, HIPAA-adjacent handling even though we are not a covered entity.
- Location data from NFC entry retained 90 days for safety and occupancy, then aggregated.
- Members can export or delete all data via in-app request, 30-day SLA.
- No data sold. Ever. This is a founding principle, put in the member agreement.
7. Open questions for GM hire
- Do we want a members-facing waitlist for new sign-ups (creates scarcity signaling) or open enrollment with tier scarcity only?
- Guest policy: soft-cap enforcement in app, or GM discretion?
- Retail: how tightly do we couple to the apothecary line launch (see 08_RETAIL_APPAREL) at app launch or 6 months in?
8. Sign-off
Founder + face approval: Taj Hines CSO: Trill Walker Marketing Director: Tia Dunn GM: TBD, hire Q2 2027