How Free-Vend Health Programs Work

A free-vend health program gives away health products from a vending machine and replaces the price with an entitlement check: who may take an item, and how many. Getting that check right is most of the design. Too loose, and one person empties the machine. Too tight, or too nosy, and the people the program exists for stay away. This guide sets out the access patterns programs use, how to limit use without collecting identity, how quotas, refills and funder reporting work, and where map finders fit. It draws on public programs and on our own free-vend projects.

Quick answer

• Free vend is a control, not the absence of one. The machine checks an entitlement instead of taking payment, and it records every dispense.
• Five access patterns: open button, postcode or area entry, registered card, phone-verified code, and validation against an existing system.
• Limit without identifying. Registration happens on the user’s phone; the machine sees only a code; the quota is tracked against the code in the cloud.
• Quotas are policy. Examples: up to four HIV self-test kits per person per month (MyTest, NSW); one two-dose naloxone kit per client per week (Clark County, Nevada).
• Logistics decide success. Low-stock alerts drive refills. Dispense records feed funder reports. A map finder gets people to the machine.

What a free-vend program is

On a KioskForce machine, free vend is a payment mode in its own right: the item carries no charge, and the control moves from price to entitlement. Health programs use it for HIV self-test kits, condoms and lubricant, period products, rapid tests and harm-reduction supplies. Workplaces use the same mode to issue PPE against a staff badge.

The funder pays for every unit that leaves the machine. That changes what the machine is for. A paid machine has to collect money; a free one has to make sure each item reaches someone who needs it, and prove that it did.

Five ways to decide who gets a free item

Pattern	What the user does	What is collected	Abuse control	Public example
Open button	Presses a button or taps the screen	Nothing personal	Per-vend limits only	Victoria’s free pads and tampons machines: press a button, collect from the slot
Postcode or area entry	Types a postcode, then the product code	A postcode	Weak; adds a light barrier and a geographic signal	New York City’s first public health vending machine (2023): enter a NYC ZIP code, then the product number
Registered card	Registers once, then swipes a card	A program ID number	Per-person quota	Clark County, Nevada: a vending ID number and a magnetic swipe card, issued at registration
Phone-verified code	Registers on their phone, receives a code, scans or enters it	A phone number or email, held by the registration service	Per-person quota	HIVConnect and MyTest in Australia; our map-finder project for a charity
External validation	Requests an item; the machine asks another system	Whatever that system already holds	The other system’s rules	Our SMS2Vend project: employees validated against the employer’s database

The patterns differ in friction. An open button reaches everyone and protects nothing. A phone-verified code stops stockpiling and counts real users, but asks the user to register first. Choose by asking two questions. What happens if one person takes ten? And who stays away if we ask them to register?

A non-vending parallel is the UK’s C-Card scheme, where young people aged 13 to 24 register once with a trained worker and then show the card at any participating outlet for free condoms. The principle is the same: register once, then collect without explaining yourself each time.

Identifying users without collecting identity

The aim is to count and limit a person without knowing who the person is.

On our public health builds, the pattern is:

1. Registration happens off the machine, on a web page on the user’s phone. The HIVConnect user answers a few questions and provides a mobile number; the MyTest user provides a mobile number or email.
2. The program issues a code or token. HIVConnect sends an SMS code. Our monthly-quota project issues a reusable access code at first sign-up.
3. The machine sees only the code. It scans a QR code or accepts a typed code, and releases. No personal data lives on the machine.
4. The quota is tracked against the token, not the name, in the cloud.

That keeps the machine anonymous, but the registration service still holds a phone number or email. Treat it as personal information. Two privacy regimes show how regulators think about it:

• Australia. Australian Privacy Principle 2 says individuals must have the option of not identifying themselves, or of using a pseudonym, unless the law requires identification or it is impracticable. APP 11.2 requires personal information no longer needed to be destroyed or de-identified.
• United Kingdom and EU. The data minimisation principle in Article 5(1)(c) of the UK GDPR requires personal data to be “adequate, relevant and limited to what is necessary”. ICO guidance adds that you must not collect personal data “on the off-chance that it might be useful in the future”.

In practice: collect a contact detail only if the quota needs it, keep it on the registration service rather than the machine, set a retention period, and do not join dispense records to identity unless the program’s rule requires it.

This is a summary for planning, not legal advice. Rules change; confirm with your privacy regulator and program funder. Facts stated as of October 2026.

Setting per-person quotas

A quota has three parts: units, period and scope.

Program	Product	Quota
MyTest, New South Wales	HIV self-test kits	Up to 4 free kits per person per month, enforced by the cloud platform
Clark County, Nevada (naloxone from March 2019)	Naloxone	One kit (two doses) per client per week
Our monthly-quota project for a health agency	Free kits	A monthly quota per tester, against a reusable access code
Scotland’s Period Products Act	Period products	No numeric cap in the Act; provision must be “sufficient to meet the person’s needs”

Practical rules:

• Per-transaction limits cap units per vend and need no registration. Use them everywhere.
• Per-period quotas stop repeat visits from emptying the machine. They need a token, a card or a code.
• Scope the quota across the program. Because quotas are enforced in the cloud, a user who hits the limit at one machine cannot simply walk to the next.
• Don’t undercut a legal duty. Where the law requires sufficient free supply, as Scotland’s Act does for period products, a quota must sit above real need, not below it.
• Plan for offline. Where an outside service validates codes, the machine needs that service reachable, so code-released items pause while the link is down. Decide in advance what the user sees then.

Refill logistics

Refills are where free programs most often fail in public. An empty free machine reads as a broken promise.

• Live stock, not rounds. Our cloud dashboard shows stock levels across all machines with low-stock alerts, so restocking teams visit the machine that needs it.
• Expiry. Test kits, condoms and medicines carry expiry dates. Staff can monitor stock and expiry dates through the restocking interface; rotate first-expiry-first-out.
• Days-to-empty arithmetic. Selections × units per coil ÷ units dispensed per day = days to empty. As an illustration, a 10-selection wall-mount unit holding 12 kits per coil carries 120 kits. At 8 kits a day it empties in 15 days, so plan the visit around day 10, not day 15.
• A named owner. Connecticut’s OTC vending rule, for example, requires a designated person responsible for maintaining each registered machine. Even where no rule says so, name one.
• A visible helpline. Victoria’s free pads and tampons machines carry a “Need help?” sticker with the helpline and the machine number, so a user reporting a fault can say exactly which machine.
• Packaging changes. If a supplier changes pack size, the coil pitch must change too. On one of our builds the client revised product dimensions mid-build, and we re-pitched the coils and sourced new ones within 48 hours.

Reporting to funders

Funders pay for outcomes, and the dispense record is the raw material. On our machines each dispense writes an order record: items, quantities, machine, location, time, order state and receipt ID. From that a program can produce:

• units by product, site, day and hour;
• stock-outs and machine downtime;
• unique tokens served and repeat use, where a code is used;
• optional temperature logs alongside dispense data, where monitoring is fitted.

When a funder wants more than counts (first use versus repeat, how the user heard about the service, outcome questions), a short questionnaire on the user’s phone before release collects it. Our free sanitary products client gates free dispensing behind a questionnaire to verify eligibility and capture usage insights, and HIVConnect offers an optional follow-up survey.

What funders ask for is predictable. California’s wellness vending pilot asks campuses to report machine location, operating hours, costs, product types, sales volume, discount rates and funding sources. The community colleges’ key metrics add maintenance downtime and monthly usage trends. Build the report before launch, not after the first funding review.

Good records also make evaluation possible. In Clark County, Nevada, the program issued each registered client a swipe card that let staff track products dispensed at each machine. Researchers later found 229 opioid-involved overdose deaths in the 12 months after naloxone dispensing began, against 270 forecast. They noted they could not tell where the naloxone used in an overdose had come from, and could not rule out other prevention efforts running at the same time.

Map finders

People cannot use a machine they cannot find. A map finder is a web page that shows where a program’s machines are.

Program	How users find a machine
Our map-finder project for a charity	Mobile website that validates the phone number and includes a location finder
Victoria’s free pads and tampons program	Search by postcode or suburb on the program website; over 1,000 machines listed
MyTest, New South Wales	Users choose from 16 locations during registration

Design notes: put the finder on the same page as registration, so finding and signing up are one visit. Show opening hours, because a machine inside a building is only as available as the building. Update it the day a machine moves.

What a free-vend program costs to set up

Our published code-and-quota projects list US$11,000 initial and US$200 a month for the mobile website, code system and quota logic. Machines are on top: a compact wall-mount unit is USD 800–1,500 at published prices. The full breakdown, with third-party public program figures, is in what a medicine vending machine costs.

What to decide before you specify

1. Products and packed dimensions.
2. Access pattern: open, postcode, card, phone-verified code or external validation.
3. Quota: units per vend, units per person per period, and whether quotas span all machines.
4. What may be collected, where it is held and for how long, agreed with your privacy officer.
5. Offline behaviour for each release method.
6. Who restocks, and the alert thresholds.
7. The funder’s report, field by field.
8. The finder: sites, hours and who keeps it current.

Send that list through the contact form. The release methods and data model are described on the medicine vending hub and the payments page.

Where free vend is the wrong design

• When the product needs a conversation at supply. A pharmacist-only medicine cannot be made open-access by making it free.
• When the funder needs named records that the target group will not give. Registration will suppress use; consider staffed distribution instead.
• When no one can restock reliably. A free machine that is often empty does more harm than none.
• When demand is tiny. A basket at a reception desk costs less than a machine and a code system.

Frequently asked questions

What is a free-vend program?

A free-vend program dispenses products at no charge from a vending machine, usually funded by a health department, charity, employer or advertiser. The machine still controls release: instead of taking payment, it checks an entitlement, such as a code issued after registration, a program card, a staff badge or a postcode, and records each dispense. Free vend is a payment mode in its own right on KioskForce machines. Health programs use it for test kits, condoms, period products and harm-reduction supplies.

How do free vending machines stop one person taking everything?

With a release check and a quota. The simplest machines cap units per vend. Stronger control comes from a per-person quota per period, tracked against a code or card: MyTest in New South Wales allows up to four free HIV self-test kits per person per month, and the Clark County, Nevada program limited naloxone to one two-dose kit per client per week. The quota is enforced by the cloud platform, so it holds across every machine in the program, not just the one the person is standing at.

Can a free-vend program limit use without collecting personal information?

Largely, yes. The user registers once with a phone number or email on a separate web page and receives a reusable code or token. The machine sees only the token, and the quota counts against it, so no name or personal data lives on the machine. The registration service does hold a contact detail, so it needs a privacy notice, a retention period and secure handling. Where a program can run without that, an open button or a postcode entry collects nothing personal at all.

What data do funders get from a free health vending machine?

Each dispense writes an order record: items, quantities, machine, location, time, order state and receipt ID. From that, a program can report units by product, site, day and hour, stock-outs and downtime. If the program needs more, such as first use versus repeat use or how the user heard about the service, a short questionnaire on the user’s phone before release collects it. California’s wellness vending pilot asks campuses to report location, hours, costs, product types, sales volume and funding source each year.

How often does a free vending machine need refilling?

It depends on capacity and demand, so work it out per machine: selections times units per coil, divided by expected units per day, gives days to empty. Plan the visit well before that, because empty machines damage trust in a free service. KioskForce’s cloud dashboard shows live stock with low-stock alerts, so restockers visit the machines that need it rather than running a fixed round, and staff can monitor expiry dates through the restocking interface.

What is a map finder for vending machines?

A web page that shows where a program’s machines are, so people can find one before they travel. KioskForce delivered a free-vend project for a charity whose mobile website validated phone numbers before dispensing and included a location finder. Victoria’s free pads and tampons program lets people search for a machine by postcode or suburb. MyTest users choose from 16 locations when they register. The finder is the program’s front door, so keep it current when machines move.

What happens when a free-vend machine loses its internet connection?

It depends on the release method. Where an outside service issues and checks codes, the machine needs that service reachable to validate a code, so code-released items pause while the link is down. Free vend against a locally held entitlement can keep working, with orders syncing when the link returns. Decide which behaviour the program wants before installation, and put an out-of-service notice and a helpline on the machine.

References

• Allen ST et al., Annals of Medicine — “Evaluating the impact of naloxone dispensation at public health vending machines in Clark County, Nevada” (2022). https://pmc.ncbi.nlm.nih.gov/articles/PMC9542801/
• NYC Department of Health and Mental Hygiene — “Health Department Launches NYC’s First Public Health Vending Machine” (5 June 2023). https://www.nyc.gov/site/doh/about/press/pr2023/health-department-launches-first-public-health-vending-machine.page
• Better Health Channel, Victorian Government — “Free pads and tampons” (reviewed 7 May 2026). https://www.betterhealth.vic.gov.au/free-pads-and-tampons
• Office of the Australian Information Commissioner — “Read the Australian Privacy Principles” (accessed 2 October 2026). https://www.oaic.gov.au/privacy/australian-privacy-principles/read-the-australian-privacy-principles
• Information Commissioner’s Office — “Principle (c): Data minimisation” (accessed 2 October 2026). https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/data-minimisation/
• legislation.gov.uk — “Period Products (Free Provision) (Scotland) Act 2021”, sections 1 and 4 (accessed 2 October 2026). https://www.legislation.gov.uk/asp/2021/1
• California Legislative Information — “AB-2482 Public postsecondary education: student health: pilot program: wellness vending machines” (2022); California Community Colleges Chancellor’s Office — “2022-23 Report: Wellness Vending Machine Program” (18 July 2025). https://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=202120220AB2482 and https://www.cccco.edu/-/media/CCCCO-Website/docs/report/wellness-vending-machine-program-a11y.pdf
• iCaSH (NHS) — “C-Card scheme” (accessed 2 October 2026). https://icash.nhs.uk/contraception-and-sexual-health/c-card-scheme/

Related

• Medicine vending machines: the cluster hub
• HIV self-test vending machines
• Naloxone vending machines
• Period product and tampon vending machines
• Health vending machines for universities and schools
• What a medicine vending machine costs
• Public health vending and harm reduction vending machines

Talk to us about a free-vend program

Tell us the products, the number of sites, how users should be authorised and what your funder needs to see. We will come back with a machine specification, a release and quota design, and a quotation.