Subprocessors
This list is referenced by our Privacy Policy. It lists the third-party service providers that process personal data on behalf of ONEPLANNER TECHNOLOGIES for Duitlah, covering both this website and the Duitlah app at platform.duitlahapp.com, which we operate.
Last reviewed: July 23, 2026
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Google Analytics (GA4) | Web analytics | Usage and event data from this website (no account or financial data) | United States |
| PostHog | Product analytics | Usage and event data (no financial data) | United States |
| Supabase | Database hosting and authentication (app) | Account data and the financial data you enter in the app | Malaysia |
| Render | Application hosting (app) | N/A (infrastructure) | Malaysia |
| Microsoft Azure (Azure OpenAI Service) | AI-assisted features (app) | Data you submit to AI features, with direct identifiers removed or pseudonymised where the feature allows | Malaysia |
Where personal data is transferred outside Malaysia, we do so in accordance with Section 129 of the Personal Data Protection Act 2010. Google Analytics and PostHog, which are hosted in the United States, receive website and product usage data only; they do not receive the financial data you enter in the app. Supabase, Render and Microsoft Azure, which handle that data (including the data you submit to AI-assisted features), are hosted in Malaysia.
Our subprocessors maintain independent third-party security certifications as part of their own compliance programmes. To request their certification documentation, or to ask about our arrangements with them, contact [email protected].
See also our Security Policy.