<?xml version="1.0" encoding="UTF-8"?>
<!--
  Three URLs. /privacy and /terms are no longer drafts — the placeholders are
  gone, the draft banner is gone, and both pages are `index, follow` — so
  they belong here alongside the home page. `changefreq` is yearly for both:
  a legal page only moves when the product does, and the `lastmod` above is
  the honest signal either way. If either page ever goes back to `noindex`,
  drop it from this file in the same change — a sitemap entry for a noindex
  URL sends crawlers two contradictory signals.

  Both legal URLs carry a TRAILING SLASH, and that is load-bearing: Nginx
  resolves these as directories, so https://toranjai.com/privacy answers
  301 -> https://toranjai.com/privacy/. The slashless form in this file
  listed two redirects as if they were pages, and each page's own canonical
  named a URL that was not itself. The canonical tags, the og:url tags and
  every internal link now use the same slashed form these entries do — if
  the server ever stops redirecting, all four move together.

  /download stays out on purpose: it is `noindex, follow` until the APK it
  advertises is actually built and hosted. Add it here in the same change
  that flips its robots tag.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://toranjai.com/</loc>
    <lastmod>2026-09-19</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://toranjai.com/privacy/</loc>
    <lastmod>2026-09-19</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://toranjai.com/terms/</loc>
    <lastmod>2026-09-19</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
