A shelf of instant noodles, energy drinks, laundry pods and single-dose ibuprofen in a residence hall lobby is one of the easiest retail ideas on a campus, and one of the hardest rooms to actually run it in. The demand is captive, repeat, and awake at hours no store is. The trouble is that both of the obvious ways to collect money fail here, and they fail for opposite reasons.
The honor jar fails because the money isn't in the building. Students are the most card-and-phone-native buyers there are. A cash box in a dorm doesn't really measure honesty — it measures who happens to be carrying currency, and in a residence hall that is close to nobody. A student who fully intends to pay you stands there, finds no bills, and takes the granola bar anyway. You will read that as theft. It mostly isn't. (If you want the research on where unattended shrink actually comes from, we wrote that up separately in what the research says about honor-system shrink — the four-gate model in that piece applies here, and gate one is exactly this.)
A staffed counter fails because the demand is at 1am. It spikes during exams, collapses over winter break, and vanishes in summer. Nobody can afford to pay a person to sit there for the hours the shelf sells best.
Self-checkout on a tablet is the shape that fits the room. What follows is the part nobody writes down: the operational stuff.
Who runs it decides almost everything
There are two very different operators, and they have different failure modes.
Residence life, housing, or a student union is an institutional department. The money is university money, which means someone in a business office will eventually want a report that ties cleanly to a deposit. Purchasing rules, sales tax handling, and record retention are not optional, and the person asking about them will not accept "the app shows it."
A student-run venture — an entrepreneurship club, hall council, a Greek chapter, a campus co-op — has the opposite problem. Officers turn over every year, sometimes every semester. The bank account may sit under student activities. The real risk isn't audit; it's that the sophomore who set the whole thing up graduates in May and takes the passwords with her.
Both need the same thing for different reasons: the money and the records have to outlive the people. Practically, that means don't run the operation out of one person's phone. Catalog, prices, device registration, and reports live in the web portal, under accounts your organization controls, so that handover is an account change rather than an archaeology project.
Give students the shelf, not the keys
You are going to hand a device to a rotating cast of student workers. Two separate places to think about:
On the device. Checkout is the default screen and the only thing a shift needs. Admin pages sit behind a PIN. A separate manager PIN gates the things that move money the wrong direction — discounts, overrides, refunds. Change both PINs when officers turn over. It takes five seconds and it is the single most-skipped step in every handover we've seen described.
In the portal. Catalog, pricing, device management, reporting, and reconciliation live there. Give portal access to the people who are actually accountable for the money — not to everyone who restocks. Restocking a shelf requires no login at all, which is the point.
There's also a voice assistant setting you can switch on if you want the till to talk back — useful when someone's hands are full of boxes. It's a plain configuration toggle in settings, off unless you turn it on.
A note on how items get into the cart, because it's often described wrong: the camera does not watch the shelf. It isn't recognizing what people pick up. Every item is added by the customer — they scan a barcode or QR code, or they tap to snap a photo and server-side AI matches it against your catalog. For a dorm shelf that split is very convenient: nearly everything you stock is packaged goods that already carry a barcode, and barcode scanning happens locally on the tablet and needs no network at all. The photo path is the exception handler — a bakery item from dining, branded hall merch, something repackaged from bulk — and that one does need a connection.
An empty lobby is "unattended" — and that decides how you take cards
This is the constraint nobody mentions until after you've bought hardware. Stripe classifies a location by whether a person is on the property — not by whether anyone is watching the device:
- Attended — staff support is available, either per device or per location.
- Semi-attended — the customer independently works the card reader, but staff may be in the building or nearby if needed.
- Unattended — no staff is on location to help the customer if needed.
Stripe's pre-certified card readers and Tap to Pay support attended and semi-attended retail environments. They do not support unattended ones. And a residence hall lobby at 1am — precisely when this shelf sells hardest, precisely through the exam weeks you're counting on — has nobody on the property. That's unattended. Note that the category tracks the clock, not the room: the same lobby can be semi-attended at 2pm and unattended at 2am.
This does not mean giving up card payments. Worth stating bluntly, because the opposite is widely assumed. Cards keep working — they move off your tablet and onto the student's own phone. The till can display a Stripe QR code that opens a hosted checkout in the student's browser, where they pay by card or wallet. That's an ordinary online card payment, and online payments carry no attendance restriction at all. What's unavailable in an empty lobby is card-present capture — Tap to Pay on your tablet, or a Stripe reader mounted beside it.
For a residence hall, that trade is close to free and arguably an upgrade. Students are the most phone-native buyers there are, and a checkout that finishes on the device already in their hand is the one they'd have chosen anyway. It also means no card reader sitting in an unattended lobby overnight — one less thing bolted to a wall.
The exception, stated honestly: plenty of residence halls are staffed. A front desk with an overnight student worker, or a live-in RA or hall director resident in the building, makes the property semi-attended — and semi-attended supports readers and Tap to Pay normally. A hall with a 24-hour desk simply has more options than a hall that locks up at 11pm. Work out which one describes your building before you spend money on hardware. The full rules, and the edge cases, are in attended, semi-attended and unattended: what Stripe's rules mean for your location.
The academic calendar is your demand curve
Dorm retail has a shape unlike almost any other location: a slow first week, a steady mid-term plateau, a hard spike around midterms and finals, and then a cliff. Over winter break the building is empty and the shelf earns nothing for a month.
Don't guess at the shape — measure it. Reports are real-time and itemized by product and by device, and they export to CSV. Treat your first semester as a data collection exercise and stock the second one off the actual numbers rather than off what you assumed 18-year-olds want at midnight.
Three calendar habits worth building in now:
- Check shelf life against the break calendar. Nothing perishable should be stocked into a period where the building empties out. Work backwards from the last day of classes.
- Zero the shelf before breaks, or pull it entirely. An unattended shelf in an empty building is a target with no upside.
- Reconcile before the term ends, not after. Student officers scatter in May, and an unreconciled payment is much harder to chase in July.
Mount it properly — and be honest about kiosk mode
Kiosk mode is Android screen pinning. It locks the tablet to the checkout screen and disables the browser context menu, and it is genuinely useful. It is not tamper-proof. An admin can get out of it — by PIN, by manager QR, or remotely from the portal. Anyone telling you a tablet in a public lobby is tamper-proof is selling you something. In a dorm lobby, assume the software lock is a speed bump and put your real defenses elsewhere:
- Physical. A proper security enclosure bolted to a wall or a weighted stand, charging cable routed inside the mount, charger not reachable. The realistic loss scenario in a lobby is a device walking off, not a clever software exploit.
- Evidential. Turn on cart photos at checkout, so a disputed sale has an image attached to the transaction. Then put a sign up saying the till photographs each checkout. The sign does more work than the photos do.
- Remote. Devices are managed from the portal. If a tablet goes missing you deal with it from the portal, not by walking down to the lobby.
- Financial. Running card-only is itself an anti-theft measure. There is nothing in the till worth prying open.
None of that addresses product walking off the open shelf — that's shrink, and it's a margin and stocking question rather than a software one.
When the campus network drops
Residence hall Wi-Fi is not always your friend, and this is the part people get wrong most often, so here is the exact chain. One thing to note before the list: offline store-and-forward runs through a Bluetooth reader, which makes it a card-present method — so it belongs to the staffed-building case above, not to an empty overnight lobby. The QR path needs a connection too, though it borrows the student's phone signal rather than your Wi-Fi.
If offline resilience matters to your building, read taking card payments when the internet goes down before you buy hardware — the reader you choose decides this, and you can't fix it afterwards in software.
What the business office will ask for
Have these answers ready before the meeting, because they're the ones that get asked:
- Itemized sales, by day, item, and device, in real time, exportable as CSV.
- Payment records that reconcile against Stripe payouts, plus a reconciliation view for anything needing manual marking.
- Sales tax calculated by jurisdiction for your campus address and reported separately from revenue. Whether a university department's sales are taxable at all is a question for your controller and your state — the till calculates and records tax; it does not decide your exemption status.
- Attribution on adjustments. Refunds, discounts, and manager overrides are recorded with the audit trail rather than quietly disappearing.
- Receipts by email or SMS, so a student has proof of purchase without a printer in the lobby.
Payments run through Stripe. In an unstaffed lobby the primary path is the Stripe QR code: the student scans it and pays by card or wallet in their own browser, which is where a student would rather finish anyway. Where the building is staffed, the card-present methods are open to you as well — Tap to Pay on Android and Stripe card readers — and wallets like Apple Pay, Google Pay, Cash App Pay and Link work across both. Which methods appear is your call in settings. Cash and check are supported too, but they're off by default — and in a dorm you'll likely leave them that way.
What it doesn't do
Worth saying plainly, because these are the questions that kill a pilot in week three:
- No campus meal plan, dining dollars, or student ID card integration. TallyTill does not read a campus card or talk to your card office. If the requirement is "must accept meal swipes," this is not the product for that shelf.
- Android tablets and Chrome. There is no iOS build.
- No scale or weighing integration. Items are priced per unit, not per pound.
- Kiosk mode is screen pinning, not a device-owner lockdown, as above.
- No card reader in an unstaffed lobby. Card-present capture needs someone on the property; the QR path covers the rest.
Starting
Work in this order: the setup checklist to get from zero to a first sale, then QR code device setup when you add a second hall. If you're weighing whether one building has enough foot traffic to be worth it, the economics of small locations are covered in micro market "lite"; if you're adding refrigerated drinks, starting a self-serve fridge without a smart fridge covers that hardware.
Pricing is published and current on the pricing page — we'd rather you read the real numbers there than a figure in an article that goes stale.