You could try setting up a Wireguard tunnel, then using scp to fetch files from the instance using the IP address listed in fly ips private. People have had mixed success with this, but worth a try!
A simpler solution would be to expose these files in a web service behind authentication. So your web app could create a zip file, for example, and allow you to download from the web.