
TiPJAR
Built the platform that powered TiPJAR's Crowdcube fundraising campaign — exceeding their target by 336%.
When it handles money, failing quietly is the worst failure mode.
We build the systems that move money between people: tip and tronc distribution for hospitality staff, credit-based billing and trainer payouts for gym operators, and payment loops for products that had to reach market before the funding ran out.
Financial software has an unusual property — when it breaks, the people it breaks for find out before you do. A member charged twice, a payout that silently did not land, a billing rule that has quietly drifted from what was sold. So the engineering priority is not throughput, it is making failures loud.
Capabilities
Splitting and distributing money between many recipients — tips across a venue's staff, payouts to trainers — with the audit trail to show exactly how each figure was reached.
Credit-based booking and recurring billing over a managed billing platform, including live migration of existing members without interrupting them mid-term.
The complete path — inbound payment, forwarding, confirmation and payout — built and in market as a working loop rather than a demo.
Automated checks that surface billing drift before a customer does, naming each way a member's charges can diverge from what they were sold.
Verified identity and on-site check-in flows, so the person being paid is the person who did the work.
Analytics and reporting built for the two audiences that matter during a raise — the operator running the business and the investor inspecting it.
The Domain
The constraints that shape every build in this sector — and the ones an agency that has not worked here tends to discover late.
A payment system that throws errors is recoverable. One that quietly charges the wrong amount for six weeks is a refund programme and a trust problem. Detection matters more than throughput.
Every distribution needs to be explainable after the fact, to the recipient and sometimes to a regulator. That means the rules live as inspectable data, not as conditionals buried in a service.
You cannot pause billing to change billing. Moving live members onto a new engine has to happen underneath them, mid-term, without a single interrupted charge.
In a raise, the deadline is external and immovable. Scope gets shaped around what has to be demonstrably working on a date, which is a different planning problem to a normal roadmap.
Paying the wrong person is as bad as paying the wrong amount. Verification belongs in the same design conversation as the payment flow, not bolted on afterwards.
Related Work
Tronc distribution for hospitality, a payment loop built in five weeks, and billing that stopped failing quietly.

Built the platform that powered TiPJAR's Crowdcube fundraising campaign — exceeding their target by 336%.

A paid inbox built for BYO Labs from an empty AWS account — inbound mail, Stripe payments, read receipts and payouts, live in five weeks.

Credit-based booking, billing and trainer payouts for 50+ UK gyms — with 21 health checks that surface billing drift before a member does.
Related
Related Service
This page is about the sector. If you would rather start from the work itself, our bespoke software development page covers scope, process and engagement.
Tell us what you are trying to ship and what is in your way. We will come back with a straight answer on whether we are the right team for it.
Get in Touch