I have tunnelbear runnning on three devices:
- Amazon fire table
- Android phone
- Windows 10 laptop
The function for whitelisting (allowing) an app is called "Splitbear."
On windows you cannot whitelist an app because only tablets and phones run apps.
But on the fire tablet and the android phone, I was able to whitelist Pandora. The reason I did this is because sometimes here on the east coast of the U.S., Tunnelbear wants to connect to a server in Canada.
There seems to be some kind of legal issue for Pandora if it thinks you're in Canada, so it won't run.