<?xml version="1.0" encoding="UTF-8"?>
<urlset
    xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
    xmlns:xhtml="http://www.w3.org/1999/xhtml">

    <!-- Public landing — only one indexable URL.
         Single-page React app: language is detected at runtime
         (navigator.language + Cloudflare CF-IPCountry) and persisted in
         localStorage. We don't expose per-language URLs (no ?lng= params,
         no /es /en /pt subpaths), so there are no hreflang alternates to
         declare. lastmod is updated alongside marketing-relevant changes
         (copy, pricing, structure). -->
    <url>
        <loc>https://kfinanc3.com/</loc>
        <lastmod>2026-05-07</lastmod>
        <changefreq>weekly</changefreq>
        <priority>1.0</priority>
    </url>

    <!-- Legal pages — referenced by Google's OAuth consent screen so they
         must be live, indexable URLs. Lower priority since they're not
         the main entry point. -->
    <url>
        <loc>https://kfinanc3.com/privacy</loc>
        <lastmod>2026-05-07</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.3</priority>
    </url>
    <url>
        <loc>https://kfinanc3.com/terms</loc>
        <lastmod>2026-05-07</lastmod>
        <changefreq>yearly</changefreq>
        <priority>0.3</priority>
    </url>

</urlset>
