<?xml version="1.0" encoding="UTF-8"?>
<!--
  The four public pages. The parent portal at /app/ is deliberately absent:
  it is a signed-in application, and robots.txt disallows it.

  /terms was missing here until 2026-09-07 — and 404'd in production at the
  same time, because nginx had no location block for it. A page that is
  linked from the privacy policy and names itself in its own canonical has
  to be reachable and has to be listed.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://brain-wave.sazinga.com/</loc>
    <lastmod>2026-09-07</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://brain-wave.sazinga.com/privacy</loc>
    <lastmod>2026-09-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://brain-wave.sazinga.com/terms</loc>
    <lastmod>2026-09-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://brain-wave.sazinga.com/delete-account</loc>
    <lastmod>2026-09-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
