Bluuberry asks the user to authorize the following OAuth 2.0 permissions (scopes):

• Access and manage your data (api)
• Access your basic information (id, profile, email, address, phone)
• Perform requests on your behalf at any time (refresh_token, offline_access)

You can find out more about Salesforce's OAuth 2.0 scopes here.