NMPEDU Academy is an independent clinical education platform focused on clear, practical learning for healthcare professionals and students. NMPEDU Academy is the primary brand; Dr V.A.R. Live is a featured educational and media programme within the Academy.
Independent education platform
Founder
Dr Victor Ayanwale Raji, FMCA
Anaesthesia and intensive care clinician and medical educator.
Founder details are kept here and in the footer rather than inside the main NMPEDU logo. The homepage portrait is now separated from promotional text and feature-strip artwork.
Contact & Enquiries
For courses, teaching collaborations, institutional enquiries and NMPEDU Academy programmes.
This prototype does not send messages yet. The live version will connect this form to a secure email or CRM service.
🔒 Secure checkoutPayments handled by a specialist provider at launch
🛡️ Privacy-firstOnly necessary learner information collected
✉️ Verified accountsEmail confirmation enabled through Supabase Auth
💾 Managed backupsProduction hosting will include recovery controls
MEMBERSHIP
A simple structure that can grow with the Academy
The live site can support free access, individual course purchases and optional membership without forcing every learner into a subscription.
Launch-candidate policy text is now available directly on the site. Final legal-entity/contact details and professional legal review remain launch sign-off items.
Privacy Notice
How NMPEDU Academy uses account, learning, payment-metadata and security information, including learner rights.
Clear treatment of statutory cancellation rights, digital-content access, duplicate payments and course cancellation.
LAUNCH CHECKLIST
What remains between this prototype and NMPEDU Academy going live
☐ Domain name and DNS
☐ Managed secure hosting
☐ Production database
☐ Email verification/reset
☐ Payment-provider account
☐ Payment confirmation/webhooks
☐ Admin two-factor authentication
☐ Privacy/terms/refund documents
☐ Backup and recovery plan
☐ Final mobile/accessibility testing
Current status
Branding, public-site structure, learner journey, Exam Hub concept, course delivery, checkout journey and admin experience are now represented in the prototype.
Production credentials and real payment keys must never be embedded in a downloadable HTML prototype.
EXAM HUB · PRACTICE SESSION
Exam Hub practice session
Score: 0 / 0
PRODUCTION V2
Live-service connection layer
Secure learner authentication is now connected to Supabase. Enrolments, payments and transactional email workflows remain staged for production integration. Only the browser-safe Supabase publishable key is present in this public build; server secrets remain outside the page.
CONNECTED
Authentication
Email/password registration, email confirmation, login, session persistence and password reset are connected to Supabase Auth.
FOUNDATION LIVE
Database
Production tables and Row Level Security are in place for learners, courses, modules, enrolments, exam attempts, results and certificate references.
ACCOUNT REQUIRED
Payments & email
Hosted payment checkout and transactional email will be connected using server-side secrets, never exposed in browser HTML.
ACCOUNT FLOW
Production-ready registration behaviour
1 · Register
Validate details and create account.
2 · Verify
Send secure email verification.
3 · Enrol
Free enrolment or hosted checkout.
4 · Learn
Unlock authorised portal content.
PRODUCTION V3
Completion certificates with verification references
Certificates can be issued only after the required completion criteria are met. A public verification reference can confirm that NMPEDU issued the certificate without exposing the learner's private account information.
NMPEDU ACADEMY
Certificate of Completion
This certifies that
Learner Name
has completed
Course Title
Completion date: DD Month YYYY
Verification reference: NMPEDU-XXXX-XXXX
Certificate wording will not imply professional accreditation, regulatory recognition or CPD approval unless such approval has actually been obtained.
SECURITY & OPERATIONS
Production controls around the Academy
ADMIN SECURITY
Protected administration
Separate administrator role
Multi-factor authentication
Server-side authorisation checks
Audit trail for important changes
Session expiry and account recovery controls
RESILIENCE
Backup & recovery design
Automated database backups
Protected media/resource storage
Restore procedure documented and tested
Production secrets kept outside source code
Monitoring for failed payments and email delivery
Learner data
Collect only data required to operate accounts, enrolments, learning and legitimate Academy administration.
Exam records
Attempts and results belong in the authenticated database, not browser local storage as the source of truth.
Payment records
Store provider references and payment status while the payment provider handles sensitive card information.
PRODUCTION V4
Legal, privacy and learner-protection centre
These are working policy structures for the Academy. They require final business/legal review before public launch and will be linked at registration and checkout.
PRIVACY
Privacy Notice
Explains learner data, purposes, retention, rights, processors and contact arrangements.
Draft structure:
NMPEDU Academy will collect only information reasonably required to provide accounts, enrolments, learning services, support, payments and lawful administration. The final notice will identify the legal/business operator, contact details, processing purposes, retention periods, service providers and applicable learner rights.
Accounts are personal to the registered learner. Course materials may not be redistributed without permission. Educational content supports learning and does not replace local clinical policy, professional judgement or patient-specific medical decision-making.
PURCHASES
Cancellation & Refunds
Sets expectations before a learner pays for a course, event or other eligible service.
Draft structure:
The final policy will state prices, access commencement, cancellation process, refund eligibility and any statutory consumer rights that apply. It must be approved before live paid checkout is enabled.
QUALITY ASSURANCE
Mobile and accessibility launch gate
Accessibility checks
☐ Keyboard navigation through menus, forms and Exam Hub
☐ Visible keyboard focus
☐ Form labels and understandable error messages
☐ Sufficient text/background contrast
☐ Meaningful headings and image alternative text
☐ Screen-reader testing before launch
Device checks
☐ Small Android phone
☐ iPhone-sized viewport
☐ Tablet portrait/landscape
☐ Desktop/laptop
☐ Registration and checkout at narrow widths
☐ Exam questions usable without horizontal scrolling
NMPEDU Academy cookie preferences
Necessary functions can support sign-in and security. Optional analytics/marketing technologies should remain off unless the learner chooses them.
AN NMPEDU ACADEMY PROGRAMME
Dr V.A.R. Live
Real conversations. Practical clinical insights. Evidence over opinion.
Production authentication will use verified accounts, protected password handling and password-reset workflows.
Protected payments
Card payments will be processed by a specialist payment provider rather than stored directly by NMPEDU Academy.
Privacy by design
Registration will collect only information needed for learning, enrolment, communication and legitimate administration.
PRIVACY
NMPEDU Academy Privacy Notice
Launch candidate · September 2026
Launch sign-off: before public launch, confirm the Academy's legal operator name, business/postal address and dedicated privacy contact details. This notice is a working production draft, not a substitute for legal advice.
1. Who we are
NMPEDU Academy is an independent clinical education platform providing online learning, revision, examinations, live teaching and related educational services. The final legal-operator identity and contact details will be published here before public launch.
2. Information we use
Account and profile data: name, email address, professional role and authentication information.
Learning data: enrolments, module progress, assessment attempts, answers, scores, mastery and certificate records.
Purchase and payment metadata: order identifiers, course purchased, price, currency, payment status and provider references. NMPEDU Academy does not store full card numbers in this website code.
Support and communications: enquiries, support requests and information you choose to send us.
Security and technical data: sign-in/session information, device/browser information, security events and necessary cookies or local storage used to provide the service.
3. Why we use information
To create and secure learner accounts and deliver purchased or enrolled courses.
To save learning progress, assessment history and completion records.
To process orders, confirm payment outcomes and grant course access.
To prevent fraud, protect accounts and investigate security incidents.
To respond to support, administrative and course enquiries.
To comply with legal, accounting and regulatory obligations.
For optional analytics or marketing only where the required choice or consent has been obtained.
Depending on the activity, the lawful basis may include performance of a contract, compliance with a legal obligation, legitimate interests in operating and securing the Academy, or consent where consent is required.
4. Service providers
NMPEDU Academy uses specialist providers to operate the platform. Current production components include Supabase for authentication/database services, Vercel for website hosting and Stripe for hosted payment processing. Other communications or analytics providers will be listed when enabled. Providers may process information in countries outside the UK; where applicable, appropriate transfer safeguards should be used.
5. Retention
We keep personal data only for as long as reasonably required for the purpose for which it was collected, including account operation, learning records, security, dispute handling and applicable legal/accounting obligations. Retention periods will be documented in the Academy's internal retention schedule before public launch.
6. Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your personal data, object to certain processing, obtain portable data, and withdraw consent where processing is based on consent. You may also complain to the UK Information Commissioner's Office (ICO).
7. Security
We use account authentication, role-based access, administrator multi-factor authentication, secure hosted checkout and database access controls. No internet service can guarantee absolute security, so security controls are reviewed and improved over time.
8. Contact and changes
Privacy enquiries can currently be raised through the site's Contact & Enquiries section. A dedicated privacy contact and operator address must be added before public launch. We may update this notice when services, providers or legal requirements change.
TERMS
NMPEDU Academy Terms & Conditions
Launch candidate · September 2026
Launch sign-off: confirm the legal operator, business contact details, governing-law wording, course-access periods and any subscription rules before public launch. Professional legal review is recommended.
1. Educational purpose
NMPEDU Academy provides educational content for healthcare learners and professionals. Content supports learning and revision and is not a substitute for patient-specific clinical judgement, local policies, supervision, professional regulation or emergency medical advice.
2. Accounts
You must provide accurate registration information, keep your credentials secure and use your own account. You must not share passwords, authentication factors or paid course access with another person. We may suspend access where necessary to protect users, the platform or course content.
3. Courses and access
Course descriptions, prices and any stated access period form part of the purchase information presented before checkout. Learning resources may be updated to maintain educational quality. Material changes that materially reduce a paid course should be handled fairly, including an appropriate remedy where required.
4. Payments
Card payments are handled through a specialist hosted payment provider. NMPEDU Academy receives payment status and transaction references needed to confirm an order and grant access. Prices and currency are shown before payment.
5. Intellectual property and acceptable use
Unless stated otherwise, Academy teaching materials, question banks, graphics, recordings and written resources are protected by intellectual-property rights. Personal educational use is permitted for authorised learners. Republishing, bulk copying, scraping, reselling, credential sharing or distributing paid materials without permission is prohibited.
6. Assessments and certificates
Practice scores, readiness indicators and formative pass thresholds are educational tools. They do not represent an official FRCA, EDAIC or other external examination result or guarantee success. Certificates, where offered, confirm the relevant Academy activity and do not by themselves establish professional competence.
7. Availability
We aim to keep the service available and secure, but maintenance, provider incidents or events outside reasonable control may cause interruption. Where a material paid service is unavailable for a significant period, we will take reasonable steps to restore access or provide an appropriate remedy.
8. Refunds and cancellation
Refunds and statutory cancellation rights are described in the separate Refund & Cancellation Policy. Nothing in these Terms is intended to exclude rights that cannot lawfully be excluded.
9. Changes and termination
These Terms may be updated when services, law or platform features change. Material changes should be communicated appropriately. We may terminate or restrict an account for serious misuse, fraud, security abuse or unlawful activity, subject to applicable rights.
REFUNDS
Refund & Cancellation Policy
Launch candidate · September 2026
Principle: this policy does not remove or reduce statutory consumer rights.
1. Statutory cancellation rights
Where UK consumer cancellation rights apply to an online purchase, the applicable cancellation period and exceptions will be respected. For digital content supplied immediately, any lawful loss of the cancellation right requires the customer's express consent to immediate supply and acknowledgement of the effect on the cancellation right. Where those requirements are not met, statutory rights remain unaffected.
2. Before accessing paid digital content
Before public launch, the checkout journey should clearly display the relevant course-access information and, where required, record consent/acknowledgement for immediate digital supply. Until that launch control is implemented and legally reviewed, this policy should not be interpreted as a blanket “no refunds” rule.
3. When a refund may be appropriate
Duplicate or clearly erroneous payment.
Payment taken but course access cannot be provided after reasonable troubleshooting.
NMPEDU Academy cancels a paid course or materially fails to provide the purchased service.
A refund or remedy is otherwise required by applicable consumer law.
4. How to request help
Contact NMPEDU Academy with the account email, course name, purchase date and a brief description of the issue. Do not send full card details. A dedicated refunds/support contact must be published before public launch.
5. Refund method
Approved refunds should normally be returned through the original payment method where possible. Processing times can depend on the payment provider and card issuer.
COOKIES
Cookie & Local Storage Notice
Launch candidate · September 2026
Necessary technologies
The platform may use necessary cookies or browser storage to keep learners signed in, protect sessions, remember essential security state and operate account/course functionality. These technologies are required for the service to work.
Optional analytics or marketing
Optional analytics or marketing technologies should remain disabled unless and until the learner makes the required choice. If optional services are introduced, the site should identify their purpose and allow the user to revisit preferences.
Current consent control
The site currently separates “Necessary only” from “Accept optional” in the cookie-preference interface. Before public launch, the production implementation should persist the user's choice and ensure optional scripts are genuinely blocked until permitted.
Join NMPEDU Academy
Create your secure learner account.
Email confirmation is required before first sign-in.
Stay signed in: on this device, NMPEDU securely restores your Supabase session automatically until you choose Sign out, clear browser data, or the session is revoked. Your password is not stored in this page.
Set a new password
Your recovery link has opened a secure password-reset session.
Choose a new password of at least 12 characters.
Course registration
Choose a course and continue to secure checkout.
Card
Apple / Google Pay
International payment
For the live site, payment should be processed by a PCI-compliant provider such as Stripe; NMPEDU should not store card numbers.
Module
CourseNot started0%
Loading learning content…
Progress changes are saved securely to Supabase.
LEARNING RESOURCE
Resource
NMPEDU ACADEMY
Certificate of Completion
This certifies that
Learner
has completed
Course
By Dr Victor Ayanwale Raji (Dr V.A.R)
Learner copy. This release confirms course-completion eligibility from your live learning record. A public certificate-verification registry will be connected in a later production stage.
Adaptive formative assessment
Intelligent revision session
ADAPTIVEQuestion 1
Preparing your questions…
This is a formative revision tool. Recommendations are derived only from your stored NMPEDU question history and are intended to guide revision, not replace formal assessment or clinical judgement.
Timed formative assessment
FRCA / EDAIC Exam Simulator
SIMULATORSETUP
Choose a timed paper. Answers are hidden until submission. Your selections, flags and timer state are saved on this device while the exam is in progress.
One best answer per item.
NMPEDU practice timing: 90 seconds per item.
Balanced mixed-domain paper Physiology, pharmacology, physics/equipment, clinical anaesthesia and exam technique.
Five-character T/F pattern Example: TTTFF. Each statement is answered independently.
Large endurance paper: 250- and 500-item modes test navigation, stamina and analytics. If a selected paper is longer than the currently eligible unique published bank, the simulator may use validated fallback variants until the editorial bank reaches that scale. Large navigators are paged in blocks of 50 for smoother browser performance, and Save & exit preserves the paper while the examination clock continues.
Formative benchmark: 80%. This is an NMPEDU Academy revision benchmark, not an official FRCA or EDAIC pass mark.
0 of 0 answered
0 flagged for review
00:00
Autosave ready
Ready to submit?
During a timed exam, answer explanations remain hidden until the paper is submitted. Closing this window does not discard an in-progress paper on this device.
NMPEDU ACADEMY · Learner Portal
Welcome to your NMPEDU learner portal
Your authenticated learner session is active. Live enrolment and learning progress are loading from NMPEDU Academy.
Learning progress
Loading live progress…
Continue learning
Loading your current course…
LIVE
Exam Hub
Revision bank and practice engine.
Upcoming
Your registered events will appear here.
My Courses
Progress controls below save directly to your NMPEDU Academy learning record.
Loading your live enrolments…
Available course access
Paid access uses secure hosted checkout. NMPEDU Academy does not collect card details on this website.
Loading available offers…
Exam Hub
Your formative assessment history is securely stored in your learner account. Review individual attempts, track topic-level performance, and identify areas for focused revision.
FRCAEDAICICM
Attempts0
Questions answered0
Average—
Best—
Passed0
Pass rate—
Recent attempts
No stored assessment attempts yet.
Repeated-error signals
Repeated-error analysis will appear after you answer questions.
Default formative pass threshold: 80%. Module completion remains separate from quiz performance unless a course explicitly requires a pass.
TIMED
Exam Simulator
Sit 10, 20, 50, 100, 250 or 500-item timed papers in SBA/MCQ, five-statement MTF (TTTFF-style), or mixed format. Includes countdown timer, flag-for-review, paged question navigator, autosave/resume, Save & exit and post-submission explanations.
An unfinished timed exam is saved on this device.
Personalised revision plan
Recommendations are generated from your own missed questions and topic accuracy; they are not a diagnostic assessment.
Your revision plan will appear as your assessment history grows.
Topic mastery
Calculated from your stored answer history. Low exposure is shown separately from low accuracy.
Complete more questions to build your topic profile.
Learning Resources
Course-linked lesson notes, one-page summaries and knowledge checks from your active enrolments. Saved items are stored on this device for quick access.
Available0
Saved0
Courses represented0
Loading your learning library…
Certificates
Completion eligibility is calculated from your live course-module progress. Eligible learner copies can be printed or saved as PDF.
Loading certificate eligibility…
Public verification and externally accredited/CPD claims are not enabled unless separately approved.
Academy Operations
Staff-only operational workspace for course inventory, enrolments and learning progress. Exam Hub code remains frozen and is not modified here.
Production operations workspace
Uses the existing Supabase tables and your authenticated Academy role. Card/payment data is never handled here.
Not loaded
Learner profiles visible—
Active enrolments—
Courses—
Module completions—
Course
Status
Modules
Published
Active enrolments
Avg learner progress
Load Academy operations to view live data.
Why learner UUID? Browser-side staff tools cannot safely enumerate Supabase Auth email identities. Use the learner UUID from the Supabase Auth user list. This avoids exposing privileged Auth administration credentials in the website.
Learner
Course
Status
Enrolled
Progress
Action
Load Academy operations to view live data.
Hosted checkout only. NMPEDU never receives or stores card numbers. The browser asks a Supabase Edge Function to create a Stripe Checkout Session, and Stripe hosts the payment page.
Course offers
Attach a Stripe Price ID to a live course. Prices are displayed to learners from this table; the Stripe secret key remains server-side.
Load commerce data to view offers.
Orders
Payment records are created by server-side functions and reconciled by signed Stripe webhooks.
Order
Learner
Course
Amount
Status
Created
Commerce database not loaded.
This page deliberately tests only browser-safe access. If a table is blocked by Row Level Security, V25 reports it rather than requesting a service-role key.
Not checked yetOpen or refresh Academy Operations.
Security rule: never paste a Supabase service-role key, database password or payment secret into this HTML/GitHub repository. Privileged production actions should use server-side functions.
Operational resilience workspace
Read-only production health checks, known-good release anchors and recovery runbooks. This panel never requests privileged keys.
Not checked
Known-good release anchors
Use these as rollback reference points. Do not “fix forward” several components at once during an incident.
Exam HubValidated assessment baseline
V23.2 frozen
CommerceStripe checkout → webhook → order → enrolment
V26.2 frozen
Admin securityTOTP MFA with AAL2 privileged access
Targets should be approved before public launch rather than invented by the website.
RTOMaximum acceptable service-restoration time
To approve
RPOMaximum acceptable data-loss window
To approve
Backup ownerNamed person responsible for scheduled verification
To assign
Restore testEvidence that a backup can actually be restored
To schedule
Read-only production health check
Checks whether the signed-in admin session can safely read the critical public application tables. It does not read Auth users, secrets or card data and makes no database changes.
Critical table
Purpose
Status
Visible row count
Run the health check to inspect browser-safe production access.
Safe snapshot rule: the downloadable snapshot contains counts, health statuses and release labels only. It deliberately excludes access tokens, emails, learner UUIDs, payment references and secrets.
Incident recovery sequence
Stabilise first.
Record the time and symptoms. Avoid simultaneous changes in GitHub, Vercel, Supabase and Stripe.
Identify the affected layer.
Website/deployment, database, authentication, payment processing or enrolment synchronisation.
Rollback before rewriting.
For a bad website deployment, use the last known-good Vercel production deployment / GitHub commit rather than editing multiple systems.
Protect data.
If corruption is suspected, minimise writes, establish the incident timestamp and verify available Supabase backup/restore options before destructive action.
Reconcile payments.
Use Stripe event delivery as the payment evidence, then reconcile payment_events → orders → enrolments. Never grant paid access from a browser-only payment claim.
Validate and document.
Run health checks, confirm sign-in/MFA, inspect one learner path and record what was changed before closing the incident.
System-specific recovery notes
Vercel / websiteRollback to a known-good deployment; confirm Production/Current; hard-refresh; test login and one protected route.
Supabase / databaseVerify backup availability for the current plan. Restore cautiously, preferably into an isolated recovery environment first. Critical tables are listed in the health check.
Stripe / commerceInspect webhook deliveries, resend a failed event when appropriate, and verify the event is idempotently reflected in payment_events, orders and enrolments.
Admin MFAUse the enrolled authenticator for AAL2. Lost-factor recovery must use a trusted server/admin path; never place a service-role key in this page.
Exam HubKeep the V23.2 assessment baseline frozen during unrelated recovery work. Treat assessment changes as a separate controlled release.
Backup is not the same as recovery. Before public launch, perform at least one documented restore exercise and record the result, date, operator and lessons learned.
Account
Profile
Signed in securely through Supabase Auth.
Loading Academy role…
Your profile name is stored in the NMPEDU Academy learner database.
Security & learning data
🔒
Persistent sign-in A refreshable Supabase session is stored on this device. Use Sign out on shared computers.
📚
Learning record Course progress and assessment history are linked to your authenticated learner account.
💳
Payment safety NMPEDU does not store card numbers in this website code.
Administrator two-factor authentication
TOTP authenticator protection for Academy admin/staff access.
Checking…
Admin tools require an AAL2 session when MFA is enrolled. Keep a second factor enrolled on a separate trusted device for recovery.
Exam Hub stable release: assessment functionality remains frozen at the validated V23.2 baseline. V29.1 preserves the V29 recovery workspace and fixes the public Login/Register modal handlers; validated MFA, Exam Hub, V26.2 commerce and V28 policy interfaces remain unchanged.
ADMIN SECURITY
Two-factor authentication
Protect Academy Operations with an authenticator code.
Scan this QR code in your authenticator app. If scanning is unavailable, enter the secret manually:
Enter the current code from your authenticator app.
Privacy choices. This prototype uses no analytics or advertising cookies. The production site will provide clear consent controls before optional cookies are enabled.
\n\n
EDITORIAL
Question Bank Manager V21
Create, review, publish, retire and bulk-import SBA/MTF items. Access is restricted to Academy admin/staff/editor roles.
Page 1
Bulk CSV import
Use the NMPEDU template. Exact duplicate stems are held back for review; matching external keys are treated as updates. Imported rows retain their supplied workflow status.