Harrigan Home Barbados multi-vendor retail group Live

Harrigan Home loyalty platform

Installable PWA where partner stores publish deals and coupons, members earn points and tiers, and a live event mode runs bus-tour days with QR check-ins, AI-scored receipt challenges, realtime leaderboards and sponsor lead capture.

app.harriganhome.com
Harrigan Home loyalty platform, desktop

Challenge

Harrigan Home wanted a loyalty programme that could survive a real event day: people signing up on their phones mid-shop, live check-ins at partner stores, receipt challenges, and a points balance nobody could cheat.

Approach

The app is an installable PWA on Postgres with row-level security throughout. Database triggers guard the points economy, so even someone holding the public API key cannot mint points. Event mode adds QR check-ins, receipt challenges scored by a vision model, and a live leaderboard. Before launch we attacked our own build in review passes and fixed the holes we found.

Outcome

The spec was written on 30 May 2026. Production went live on 12 July. The Goods Tour ran on 25 July: 71 people joined that day, with 220 check-ins, 56 scored receipts and 13,110 points awarded. Under eight weeks from spec to a public event.

Numbers, with their dates

72
members (71 joined on event day)
Aug 2026
220
QR check-ins, 49 unique members on site
Jul 2026
56
receipts scanned and scored by vision AI
Jul 2026
13,110
points awarded under database guard triggers
Jul 2026
Web appapp.harriganhome.comNext.js 16 + Supabase PWA (members, vendors, admin)
Websiteharriganhome.comAstro 6 marketing + tour registration

Inside the product

Architecture

Next.js PWAmember · vendor · admin
SupabasePostgres · auth · RLS · realtime
AI servicesvision receipt scoring
VercelCI · hosting
member and vendor clients → application layer → row-level-secured data with guard triggers → realtime channels and notification fan-out

Security & standards

  • RLS throughout with adversarial review passes that found and closed real vulnerabilities before launch
  • DB trigger guards so points and approvals cannot be forged even with the public API key
  • Passwordless magic-link auth, branded SMTP
  • RFC 8058 one-click unsubscribe
  • 147 unit tests + CI

Stage & handover

Live Production 2026-07-12; live public event day 25 July 2026. Master spec was written 2026-05-30: spec to live event in under 8 weeks.. In production and in active development under agreement; 147 unit tests and CI gate every deploy.

Techbase Solutions · private preview

Shared in confidence

This portfolio was prepared for GovTech Barbados. Some of the work shown is private client material or unlaunched product, so please keep the link within the evaluation.