QuickQ per-app / bypass lists decide which processes enter the tunnel. Invert the list and the client stays green while that app’s egress is still the ISP. Measure inside the app, not only on 1.1.1.1/help in Safari. On Android, Chrome, WebView, and the vendor browser are different rows. iOS will not do messenger-level split; stop scrolling Settings for it.
Smart routing is by name; per-app is by process. They are not the same layer—smart vs global. First run: connect. Builds: download. Android VPN primer: VPN on Android.
Write the must-tunnel list on paper first
Typical: Chrome/Firefox in; banks and corp chat Direct; games in only when you want the pop. Tick from the paper. Forgetting the system HTTP stack looks like a DNS incident: the app shell opens, the WebView does not.
Inverse bug: everything in the tunnel except QuickQ itself, so node refresh and the send-code API fail. Missing SMS: see whether the Messages app or QuickQ was Direct’d by mistake—SMS.
| Sighting | Likely | Move |
|---|---|---|
| Browser IP moved, in-app IP did not | That app is not in the list | Tick it (or the inverse) |
| Nothing moved | No tunnel | Fix connect, not the list |
| Only intranet died | OA was tunneled | Direct that app |
| Disabling split-app fixes everything | The list | Add back one row at a time |
What each OS can actually do
Android “allowed apps” versus “disallowed apps” are opposite. You think you wrote a allowlist; it was a denylist; everyone went in. Re-read the list after flipping the mode. Work profile needs a second copy. Always-on VPN can force every app in and override split-app—Always-on. If you need fine split, do not fight Always-on.
Windows bypass lists: corp chat, OA, printer tools. UWP ≠ Win32. Steam and the game binary can be two processes. TAP missing means split-app is theatre—TAP.
macOS is weaker; include/exclude hosts instead. Linux process split is cgroup/iptables, not a GUI we document—TUN. TVs and routers have no per-app layer—TV/router.
Kill Switch and cafe Wi-Fi
With the switch armed, Direct rows do not matter during a down window. On a hotspot, keep the list short; go global, then split—public Wi-Fi, Kill Switch. A protocol switch can look like “this one app died”—prove global first—protocol.
Add one app, then stop
Start from empty or “all tunneled,” add one, measure one. Five random ticks: reset the list. Do not paste a forum “Direct all CN apps” sheet—process names move with versions. Guides: hub. FAQ: FAQ. When the game row is stable, read UDP.
Screenshot the final list. After a 2.5.0 reinstall, tick from the screenshot so you do not forget Chrome WebView.