What data Hype can access

Hype Bundles can only touch what you approved on Shopify's permission screen when you installed it. Below is that list in plain words, with what each permission is actually used for. If a permission is not on this list, Hype Bundles cannot use it, whatever any screen inside the app appears to offer.

What Hype Bundles can change

Permission	What it lets the app do	Why it needs it
Products	Create and update products, and add images to them	A bundle needs a product of its own to sit in the cart. Hype Bundles creates and maintains that product for you.
Cart transforms	Change how cart lines are grouped at checkout	This is what merges a bundle's components into a single line, at the bundle price, instead of showing them loose.
Discounts	Create, edit and delete discounts	Bundle pricing and quantity breaks are applied as real Shopify discounts.
Publishing	Publish a product to your sales channels	So the bundle product is visible on your online store rather than sitting unpublished.

Products is the widest of these. It is there because Hype Bundles cannot express a bundle without a product to represent it — that is how Shopify's cart works. It is used for the bundle products the app manages.

What Hype Bundles can read

Permission	What it can read	Why
Products and collections	Your catalog	So you can pick what goes into a bundle or a quantity break. Included in the Products permission above.
Markets	Your Shopify Markets	For market targeting and per-market amounts.
Languages	The languages your store publishes	To show translation tabs for the text on your bundle blocks.
Themes	Your themes and their settings files	To check whether the app embed and Hype blocks are turned on, and to show the theme picker in Settings.
Orders	Orders as they are created	Two uses: counting paid orders for billing, and measuring which bundles produced sales.

Orders are protected customer data under Shopify's rules, so this permission is reviewed and approved by Shopify before the app is allowed to request it.

What Hype Bundles cannot do

It cannot read or change anything not on the lists above. In particular it cannot:

Take payments, issue refunds, or see card or payment details. Shopify never exposes those to any app.
Read your customers or customer segments at all.
Read your store's locations, or run analytics queries against your sales history.
Read your Shopify staff accounts or their passwords.
Change your store's settings, plan or domain.
Access other apps' data.

It also cannot see which member of your staff is using it. Hype identifies your store, not the individual signed in, which is why an in-app support conversation belongs to the store rather than to a person.

Where the data goes

Your configuration — bundles, quantity breaks, blocks, settings — is stored by Hype so the app works.
Order events are used to attribute sales to bundles and to count paid orders for billing.
Nothing is sold to anyone, and nothing is shared with other merchants.

The products it creates

Hype Bundles creates and maintains a product per bundle. Leave those products alone in the Shopify admin: editing or deleting one by hand can break the bundle that owns it. Manage them from Hype Bundles instead.

Why the permission screen appeared again

Shopify asks you to re-approve whenever an app's permission list changes — including when it is reduced. A re-consent prompt is not by itself a sign that the app is asking for more.

Removing access

Uninstalling Hype Bundles from Apps in your Shopify admin revokes every permission immediately. Your Hype configuration is deleted with it — see Uninstalling Hype.