<?xml version="1.0" encoding="UTF-8"?>
<!--
  Only the routes that are actually public and meant to be indexed —
  everything else (Dashboard, Goals, Calendar, /ai, /analytics, etc.) sits
  behind ProtectedRoute and a logged-out visitor (Googlebot included) sees
  the Landing page instead via HomeGate, so there's nothing there for a
  crawler to index anyway. /login, /forgot-password and /reset-password
  are left out on purpose too: they're transactional, not content, and
  reset-password carries a one-time token in its query string.

  Update "lastmod" when a page's actual content changes, not on every
  deploy — it's a hint to crawlers about freshness, not a build timestamp.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://www.nuvora.ps/</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://www.nuvora.ps/welcome</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://www.nuvora.ps/pricing</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://www.nuvora.ps/terms</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://www.nuvora.ps/privacy</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://www.nuvora.ps/refund-policy</loc>
    <lastmod>2026-10-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
