Releasing to the App Store

Distribution choices

Option	Who can install	Review
Public, listed	Anyone, via App Store search	Full App Store review
Public, unlisted	Anyone with the link	Review still required
Custom	One store / org, via install link	No review, no Billing API

The distribution method is chosen once in the dashboard and is hard to change, so decide early.

Before you submit — the checklist

Technical

• [ ] Installs and opens with no errors, immediately after install
• [ ] Uses session-token auth (no third-party cookies), works in an incognito window
• [ ] Only requests scopes it actually uses, and explains sensitive ones (orders, customers)
• [ ] Handles the 3 compliance webhooks + app/uninstalled
• [ ] GraphQL Admin API only (required for new public apps)
• [ ] Expiring offline tokens (required for public apps created after 2026-04-01)
• [ ] Charges only via Shopify Billing. Upgrades and downgrades work
• [ ] Theme changes via theme app extensions, not the Asset API

Listing

• [ ] App name, icon (1200×1200), screenshots, feature list, pricing that matches what you actually charge
• [ ] Demo store or screencast showing the core flow
• [ ] Test credentials for any external account the reviewer needs (e.g. a FlowFlex test org)
• [ ] Privacy policy URL, support email

Common rejection reasons

Asking for unused scopes. Broken install on a fresh store. Requiring the merchant to sign up on an external site before the app works (make onboarding happen inside the app). Billing outside Shopify. Missing compliance webhooks.

Review usually takes days to a few weeks. The reviewer sends findings, you fix them, and you resubmit.

Built for Shopify (the badge)

An extra tier with better App Store ranking. Requirements include:

• Traction: at least 50 net installs from active paid shops, at least 5 reviews, good partner standing
• Performance at p75: Admin LCP ≤ 2.5 s, CLS ≤ 0.1, INP ≤ 200 ms
• Integration: embedded, latest App Bridge, sign-up with Shopify credentials, theme app extensions only
• Design: looks and works like the Admin (Polaris), mobile-friendly
• Extra category-specific criteria

Source: Built for Shopify requirements

After launch

• Bump the API version at least yearly, ideally every quarter.
• Watch the developer changelog. Deprecations come with deadlines.
• Respond to reviews. Ratings and the reviews count feed Built for Shopify.

Check yourself

1. Your app makes merchants create a FlowFlex account on flowflex.ai first. What's the review risk, and how would you fix the onboarding?
2. Name three Built for Shopify requirements a brand-new app can't meet on day one.