CB Privacy: How to configure?

In our CB database there are two distinct groups of members: "refugees" (internally guests) and "helpers" (internally special). One or more refugees are connected to one helper. The helpers may register themselves on frontend. The refugees are principally registered by a few people having super-user-rights. Refugees do not use the system themselves at the moment. Their data are fed in via paper forms.
In order to establish privacy, we want to get the refugee-related personal data and the connections between refugees and their personal helpers transparent only to those who are directly involved and to the super-users.
How do we establish this by means of CB Privacy?
Thanks for your help
Timm

I assume by connections you mean you're using CB Connections and requesting then accepting connection requests between users. In this case edit your tabs or fields and set "Display" to "Forced privacy controls" next select "Connections" for "Default". This means the tab or field can only be viewed by the user, the users connected to them, or CB Moderators only.

Thank you Kyle.
There is, however, another problem, I haven't solved yet: The CB connections between individual refugees and helpers ought to be set by a user who is member of our organization-committee (=super-user). This person himself is not part of the connection. In fronted, I only can establish cb connections between another person an myself, as whom I am logged in, but not on behalf of a another helper. So it would be helpful to establish cb connections from the backend. So far I haven't found a way to do so. Can you give me an advice or a work-around, please?
Thanks
Timm

There's no backend management of connections at this time. You could assign a usergroup to helpers then set the forced privacy for that usergroup, but this would allow helpers to access the information for all refugees.