Privacy Policy for Duitlah
This Privacy Policy explains how ONEPLANNER TECHNOLOGIES (Registration No. 202503272767 (NS0314486-M)) ("Duitlah", "we", "us") handles personal data in connection with the Duitlah website and app. Unlike our B2B OnePlanner product, here we act as the data controller ("data user") under Malaysia's Personal Data Protection Act 2010 ("PDPA") — if you interact with Duitlah directly, or through the app at platform.duitlahapp.com, we are responsible for deciding how your personal data is used.
Last Updated: July 23, 2026
1. Information We Collect
1.1 On the Duitlah marketing website
This website does not collect personal data through any form. It contains links to platform.duitlahapp.com, and runs analytics tooling (see Section 4).
1.2 On platform.duitlahapp.com
The Duitlah app is operated by ONEPLANNER TECHNOLOGIES. We collect the account registration data you provide, the financial data you enter (income, expenses, goals, debts, and similar), and, if you choose to be connected with a licensed financial planner, the contact details and financial summary needed to make that connection. We also collect usage data through the analytics tools described in Section 4.
2. How We Use Information
| Purpose | Data used | Basis |
|---|---|---|
| Operate the app you register for | Account and financial data you provide | Performance of contract / consent |
| Connect you with a licensed financial planner, if requested | Contact details, relevant financial summary | Consent |
| Product analytics | Usage data (website and app) | Legitimate interest |
| AI-assisted features | Data you submit to those features | Consent / performance of contract |
For AI-assisted features, we do not send identifying details such as your name, email address, or phone number to the AI provider unless the feature genuinely needs them to work. Where an identifier is required (for example, to label output for you), we use a pseudonym or internal reference instead of your real name or contact details wherever the feature allows it.
3. Data Sharing
We do not sell your personal data. We disclose personal data only to:
- Subprocessors listed in our Subprocessors page.
- A licensed financial planner or firm, only if and when you actively request to be connected with one — this is the point at which your relationship with a B2B firm (e.g. an OnePlanner customer) may begin, and their own privacy practices apply to their handling of your data from that point.
- Law enforcement or regulators, where required by Malaysian law.
- A successor entity, in the event of a merger, acquisition, or asset sale.
4. Cookies and Analytics
This website uses Google Analytics (GA4) for aggregated page-view analytics. The Duitlah app uses a Supabase Auth session cookie, which is strictly necessary to keep you signed in, and PostHog for product analytics, which is tied to your account once you sign in. You can block or delete cookies through your browser settings; blocking the session cookie will prevent you from signing in.
| Cookie / tool | Purpose | Type |
|---|---|---|
| Google Analytics | Web analytics (marketing site) | Analytics (non-essential) |
| Supabase Auth session | Keeps you signed in (app) | Strictly necessary |
| PostHog | Product analytics (app) | Analytics (non-essential) |
5. International Data Transfers
Google Analytics and PostHog process usage data on servers outside Malaysia, including in the United States. Where personal data is transferred outside Malaysia, we do so in accordance with Section 129 of the Personal Data Protection Act 2010. The financial data you enter in the app is stored and processed in Malaysia, including data you submit to AI-assisted features, which is processed by Microsoft Azure (Azure OpenAI Service) in Malaysia. See our Subprocessors page for details.
6. Data Retention
Account and financial data on platform.duitlahapp.com is retained for as long as your account remains active, plus 90 days after closure to allow you to request a copy, unless a longer period is required by applicable law. Analytics data is retained according to the retention settings of Google Analytics and PostHog.
7. Security
See our Security Policy.
8. Your Rights under the PDPA
You may request access to, correction of, or (where applicable) deletion of your personal data, and may withdraw consent for processing based on consent, by contacting [email protected]. We may need to verify your identity first.
9. Children
Duitlah is not directed at individuals under 18, and we do not knowingly collect personal data from minors.
10. Changes to This Policy
We will update the "Last Updated" date above for any change, and will highlight material changes prominently on the site.
11. Contact
ONEPLANNER TECHNOLOGIES (Registration No. 202503272767 (NS0314486-M))
P.O. Box 10251, GPO Kuala Lumpur, 50708 WPKL
Questions about this policy: [email protected]