<?xml version="1.0" encoding="UTF-8"?>
<!--
  The public marketing surface of gigworkerapp.com, and nothing else.

  Four URLs, matching the four unauthenticated routes in src/App.tsx that a
  stranger is meant to land on: the landing page and the three legal/support
  documents linked from its footer (src/screens/legal-copy.ts LEGAL_PATHS).

  What must NEVER appear here, no matter how a future generator is written:
   - /share/<token>. Those are tokenized invoices carrying a real client's
     name and a real day rate. They are disallowed in /robots.txt; listing
     one here would be handing a crawler the token by hand.
   - Any session-gated route (/jobs, /timecard, /invoices, /settings,
     /onboarding, /auth). A crawler has no session, so each is just the login
     screen wearing a different URL.

  Note the SPA caveat: every URL below is served the same index.html, whose
  <head> is static and canonicalizes to "/". A search engine may therefore
  fold the three document pages into the home page. They are listed anyway —
  being crawlable and reachable is the point; ranking separately would need a
  per-route <head> this build cannot produce. See the comment in index.html.

  lastmod is the effective date these documents were published.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://gigworkerapp.com/</loc>
    <lastmod>2026-08-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://gigworkerapp.com/privacy</loc>
    <lastmod>2026-08-05</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://gigworkerapp.com/terms</loc>
    <lastmod>2026-08-05</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
  <url>
    <loc>https://gigworkerapp.com/support</loc>
    <lastmod>2026-08-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
