Four stages, each described as it is built today, with the early-access holds called out where they exist.
Step 1 · Before the day — roster and consent
The camp brings its camper roster — the same roster its registration system already holds — and a per-camper consent request goes to each parent. A parent grants or declines whether their camper may be photographed and whether the family wants to order. No face template is computed from a child’s photo in the shipping configuration. The consent machinery for face matching is off by default per child, and the matching capability is a capability we are building and is not turned on today — the recognizer is not yet wired. The photographer sees a consent roster before the shoot, so an un-consented camper is known at the name level, not discovered afterward. Consent-gated capture is built and live.
Step 2 · Photo day — one pass, the whole camp
On the day, the photographer captures portraits, cabin and activity groups, and candids in one organized pass, each shot tagged to a camper or a group from the roster. Shots that do not resolve to a roster camper are flagged in the upload queue for the photographer to sort before the store opens. The whole camp is accounted for against the roster, so a parent later finds their camper instead of scrolling a pile.
Step 3 · The store — a parent claims a camper
Each family gets a claim code. A parent opens the store, enters the code, and sees only their own camper — a permission-checked roster lookup, not a face scan. They pick prints, packages, and downloads, each priced above the code-enforced cost floor. The branded parent store and outside-lab order routing are early access; there is no live checkout on this marketing page today.
Step 4 · After — the split and payouts
On every order the split is computed in exact cents — the camp keeps the larger leg — and the record of what was sold and what the camp earned is the camp’s to keep. Automatic payouts run once the camp connects its own payout account. The exact-cents split is built; the charge rail that actually moves a parent’s money is honest-off here until the store goes live for a camp.