<?xml version="1.0" encoding="UTF-8"?>
<!--
  Lilt sitemap — lists the three public landing URLs for search engines
  (Google, Bing) and LLM crawlers (Apple App Review searches for
  "Lilt privacy policy" and indexes via this surface).

  Auth-gated SPA routes (/home, /signin, /signup, /onboarding, etc.)
  are intentionally NOT listed — they require authentication and would
  bounce to /welcome for any crawler. /reset-password, /verify-email,
  and /delete-account are intentionally NOT listed either: the first
  two carry single-use tokens that must not be indexed (and are
  Disallow'd in robots.txt + carry X-Robots-Tag: noindex headers);
  /delete-account is the Play Store "Data deletion" URL — its presence
  in search results would be hostile UX (users searching for "delete
  lilt account" land on the destructive form), so it's also Disallow'd
  + noindex'd.

  Only the three real landing surfaces here:
    /          — the SPA landing page (Welcome → tutor onboarding flow)
    /privacy   — Privacy Policy (App Store + Play Console reference)
    /terms     — Terms of Service (App Store + Play Console reference)

  changefreq is advisory only (Google ignores it post-2023 per
  Search Central). lastmod is the bigger signal — keep it current
  when content actually changes (legal pages carry their own
  "Last updated" date inside the body; sitemap mirrors).
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://lilt-cu8.pages.dev/</loc>
    <lastmod>2026-05-11</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://lilt-cu8.pages.dev/privacy</loc>
    <lastmod>2026-06-17</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://lilt-cu8.pages.dev/terms</loc>
    <lastmod>2026-05-14</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
