It's a split tunneling version when all your traffic goes through a safe tunnel except the selected apps. This is different from a usual setup when all your traffic goes through your ISP, and only some of the applications are routed through a separate tunnel.