<?xml version="1.0" encoding="UTF-8"?>
<!--
  Minimal sitemap. The app subdomain only has a couple of public-facing
  routes — everything else is behind auth. The marketing site
  (shipwithecho.com) has its own sitemap.

  When new public routes land (e.g. /privacy, /terms), add them here.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://app.shipwithecho.com/</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://app.shipwithecho.com/login</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
</urlset>
